VS Code Extension
Browse, peek, and manage secrets from your Arcan server directly in VS Code.
Installation
Install from the VS Code Marketplace:
- Open VS Code
- Go to Extensions (
Ctrl+Shift+X/Cmd+Shift+X) - Search for "Arcan Secrets"
- Click Install
Or install from a .vsix file:
code --install-extension arcan-secrets-0.1.0.vsix
Configuration
Run Arcan: Configure Connection from the command palette (Ctrl+Shift+P / Cmd+Shift+P) to set up your connection.
| Setting | Default | Description |
|---|---|---|
arcan.serverUrl | https://localhost:9797 | Arcan server URL |
arcan.token | (empty) | API token (prefer SecretStorage via Configure command) |
arcan.defaultRealm | default | Default realm slug |
arcan.defaultEnv | dev | Default environment |
arcan.rejectUnauthorized | true | Reject invalid TLS certificates (set to false for self-signed) |
The API token can also be set via the ARCAN_TOKEN environment variable.
Features
Sidebar Tree View
Browse secrets organized by realm and environment in the Arcan sidebar panel. Secret values are never shown in the tree view -- only key names are displayed.
Hover to Preview
Hover over environment variable references in your code to see the corresponding Arcan value.
Supported languages:
| Language | Pattern |
|---|---|
| JavaScript/TypeScript | process.env.KEY |
| Python | os.environ["KEY"], os.getenv("KEY") |
| Go | os.Getenv("KEY") |
| Shell | $KEY, ${KEY} |
.env files | KEY=value |
Peek Secret Values
View secret values in a notification without opening files. Values are shown masked (first 2 and last 2 characters only).
Copy to Clipboard
Copy secret values with automatic 30-second clipboard clearing for security.
Insert References
Insert language-appropriate environment variable references from a quick-pick menu.
Set/Update Secrets
Create or update secrets directly from the command palette.
Commands
| Command | Description |
|---|---|
| Arcan: Refresh Secrets | Refresh the secrets tree and clear hover cache |
| Arcan: Copy Secret Value | Copy a secret value to clipboard (auto-clears after 30s) |
| Arcan: Peek Secret Value | Show a secret value in a notification |
| Arcan: Set Secret | Create or update a secret |
| Arcan: Delete Secret | Delete a secret (with confirmation) |
| Arcan: Insert Secret Reference | Insert a language-appropriate env var reference |
| Arcan: Configure Connection | Set API token or open settings |
Security
- Secret values are never shown in the tree view -- only key names
- Peek shows masked values only (first 2 and last 2 characters)
- Clipboard is automatically cleared 30 seconds after copying
- API tokens are stored in VS Code SecretStorage (encrypted by the OS keychain)
- Use valid TLS certificates in production (not self-signed)
- Use read-only tokens (
arcan token create --scopes read) for applications that only need to read secrets