Skip to content
Varity Docs Varity Docs

Managed Credentials on Varity

Varity Team Core Contributors Updated June 2026

Varity provides the infrastructure, database, and storage credentials your app needs automatically. You still supply your own third-party API keys (OpenAI, Stripe, and similar) as environment variables. Varity does not create those accounts for you.

How It Works

Section titled “How It Works”

When you deploy with Varity, credentials are handled automatically at every stage:

  1. Development: Shared development credentials are available so you can start building without any .env setup.

  2. Production: When you run varitykit app deploy, Varity fetches production credentials and injects them into your deployed app’s environment.

  3. Runtime: Your deployed app reads its credentials from injected environment variables. Users never see API keys or configuration prompts.

Developer runs: varitykit app deploy
    |
Varity resolves the infrastructure & database credentials
    |
Credentials injected into the deployment automatically
    |
App deployed with everything configured

What’s Managed

Section titled “What’s Managed”

Varity provides credentials for:

ServiceWhat It CoversDeveloper Action
DatabaseConnection details for detected databases (Postgres, Redis, MongoDB, MySQL)None required
File StorageUploads, CDN deliveryNone required
InfrastructureNetwork access, operationsNone required

Development Mode

Section titled “Development Mode”

During local development, shared development credentials are available automatically, so your app can connect to a database without any setup. When Varity detects that your app needs a service (for example, a database client in your dependencies), it provisions that service on deploy and injects the connection details into your app’s environment.

Production Deployment

Section titled “Production Deployment”

When you deploy, the CLI handles everything:

Terminal window
varitykit app deploy

Output:

✓ Credentials: Auto-provided
✓ Build complete
✓ Deployed successfully
✓ URL: https://your-app.varity.app

No manual credential setup required.

Security

Section titled “Security”
  • Rate-limited: Credential issuance is rate-limited per app
  • Authenticated: Credential requests are authenticated before any secret is issued
  • Credentials never stored on disk: Injected at deploy time only
  • Isolated per app: Each app receives its own credential scope

Verifying Credentials

Section titled “Verifying Credentials”

Run the doctor command to verify your credential status:

Terminal window
varitykit doctor
Checking environment variables...
  ✓ Credentials: Auto-provided
  ✓ Storage API: Accessible

Next Steps

Section titled “Next Steps”