Web UI

Manage your envctl projects through a visual web interface. View team members, approve requests, monitor peers, and review the audit log.

Opening the Web UI

The web UI is served by the envctl daemon. To open it:

$ envctl ui
Opening http://localhost:7835 in browser...

This opens the web UI in your default browser. If you prefer to get the URL without opening a browser:

$ envctl ui --no-open
http://localhost:7835

Prerequisite

The envctl daemon must be running. Start it with envctl daemon start if needed.

Features

Project Members

View all members of your project and their access levels:

  • Name and fingerprint — Identify each team member
  • Role — Admin, member, or reader
  • Environment access — Which environments each member can access
  • Online status — See who's currently connected

Pending Requests

Manage proposals that require approval:

  • Join requests — New members waiting to be added
  • Access changes — Requests for additional environment access
  • Role changes — Proposals to change member roles
  • Removal requests — Proposals to remove team members

Click a request to see details and approve or deny it directly from the UI.

Connected Peers

Monitor your P2P network:

  • Online peers — Team members currently connected
  • Connection type — Direct P2P or via relay
  • Sync status — Whether you're up to date with each peer

Audit Log

Review recent activity in your project:

  • Secret changes — Variables set, updated, or deleted
  • Membership changes — Members added or removed
  • Access changes — Environment permissions granted or revoked
  • Sync events — When data was exchanged with peers

Each entry shows who made the change and when.

When to Use the Web UI

The web UI is especially useful for:

  • Team management — Easier to see member roles and access at a glance
  • Approving requests — Visual review of pending proposals
  • Debugging sync issues — See which peers are connected
  • Auditing — Review who changed what and when

For day-to-day secret management (setting variables, switching environments), the CLI or VS Code extension are typically faster.

Security

The web UI runs locally and is only accessible from your machine:

  • Served on localhost only (not exposed to the network)
  • Communicates with the daemon over a local socket
  • No data is sent to external servers

Local access only

The web UI is designed for local use. Don't expose port 7835 to the network or proxy it externally.

Troubleshooting

"Connection refused"

The daemon isn't running. Start it:

$ envctl daemon start

Browser doesn't open

Use --no-open and open the URL manually:

$ envctl ui --no-open
http://localhost:7835

Page shows "No project"

Navigate to a directory containing an envctl project, or the daemon was started from a directory without a project. Restart the daemon from your project directory:

$ cd /path/to/your/project
$ envctl daemon stop
$ envctl daemon start

Related