EnvTie
Every change runs as a signed, owner-approved plan — from a PR preview or the dashboard — and your providers' credentials never leave your own infrastructure.
Real examples
Automate pull-request previews in GitHub Actions, or plan environments in the control plane and let your runner apply them—Docker, your laptop, or any CI that can poll.
GitHub Actions
Neon, Upstash Redis, Vercel Hosting, Stripe, and a GitHub environment for each PR.
#481 · feat/checkout
DB, Redis, deploy, webhook
pr-481.preview.example
Expires in 7 days
Control plane + runner
Upstash Vector, Resend, Sentry, and Vercel Blob—credentials stay on the runner; outputs land in a local dotenv.
demo-stack · owners review
Ed25519 · bound to workspace
Docker / laptop / CI poll
.env on the runner
How it works
Each step has a clear input and a tangible output.
BlueprintNamed environment template
List the services each preview needs and how their outputs connect. Every new environment gets its own copy from just a name.
Proposed changesEd25519-signed plan
Owners see exactly what will be created, attached, or deleted—and approve it—before anything runs.
Signed planLive preview resources
Your runner verifies the Ed25519 signature, checks each adapter’s SHA-256, and executes with credentials only it holds—never sent to EnvTie.dev.
Expiry or destroyProvider cleanup verified
Environments expire on schedule. Destroy is checked against each provider so nothing lingers on your bill.
Security and control
Provider keys stay on your runners. EnvTie.dev stores resource IDs and Ed25519-signed plans—not secrets—and runners pin adapters by SHA-256.
.env filesEvery change is an Ed25519-signed plan bound to your workspace. Runners refuse anything unsigned, expired, or tampered with, and verify each adapter binary against its pinned SHA-256 before execution. The control plane never stores provider credentials or tokens and rejects secret-shaped blueprint fields before they are saved.
Integrations and capabilities
Official adapters cover common preview stacks. Custom providers use a small JSON protocol—bring what you already run.
Provider API keys and tokens never leave your runners. The control plane keeps resource IDs only and rejects secret-shaped blueprint fields.
Every change is an immutable Ed25519-signed plan bound to your workspace. Runners refuse anything unsigned, expired, or tampered with.
Set a lifetime per blueprint. Expired previews are destroyed for you, and protected environments need typed confirmation.
A GitHub Action, a distroless Docker image, or a single CLI binary. Runners verify each adapter’s SHA-256 before execution.
Neon, Upstash Redis and Vector, Stripe, Sentry, Mailtrap, Resend, Vercel Hosting and Blob, and GitHub out of the box, plus a small JSON protocol for your own.
Invite teammates by email, separate owners from members, and see every approval and change in the activity log.
Pricing
For individuals trying EnvTie.dev.
$0/ month
For teams running previews on every pull request.
$49/ month
For organizations with many projects and strict review.
$199/ month
Provider resources (Neon, Upstash, Vercel, Stripe, etc.) are billed separately by those providers; tier limits here count EnvTie environments only.
FAQ
No. EnvTie.dev does not store provider credentials or tokens. Runners read them from their own environment and send back only sanitized resource identifiers. Blueprints containing secret-shaped values are rejected before they are stored. Plans are Ed25519-signed; adapters are verified by SHA-256.
Any environment that has been planned and not yet destroyed. When an environment is destroyed, manually or by expiry, it stops counting toward your subscription tier.
EnvTie.dev queues a signed destroy plan. The next time your runner polls, it deletes the managed resources, keeps referenced ones, and reports back.
The customer-side CLI, runner, adapters, SDK, and contracts are open source under Apache-2.0 in github.com/coddicat/envtie-core. Contact us about hosted-control-plane deployment.
Any time, from Billing in the dashboard. Upgrades take effect immediately with prorated charges; cancellations apply at the end of the billing period.
Founder
Founder of EnvTie.dev
Co-Founder & CTO at Click Clarity AI. Hands-on across software engineering, architecture, DevOps, and scalable distributed systems—fintech, cybersecurity, and SaaS.
United States
Start on the Free tier with 3 active environments. No credit card required.