Machine access

Any machine that runs npx getmyenv run - a developer laptop, a production container, a CI job - goes through the same approval flow. There is no separate “production key” baked into the app.

• Identity - a persistent record of the machine that connected. Identity is recognition, not access.
• Authorization - a decision you make in the dashboard to approve or deny a request.
• Access - a one-time grant (valid up to 1 hour) that lets the CLI fetch encrypted secrets once.

Approval requests are valid for 5 minutes. If the window closes without a decision, the request expires and the CLI must ask again. After you approve, the grant can be used once within 1 hour.

You can revoke a machine identity from the dashboard. A revoked machine cannot request access again until it re-registers. Revocation is instant and applies to all future requests.