Render

Move environment variables to and from a Render service.

The connection

What	This provider
Vendor	Render
Key	`render-env`
Availability	`available`. You can connect it today.
Credential penv holds	`render-key`
Values read back	yes
Activation	`on-request`

Direction	What it does
`import`	Reads names and values out of the store into penv.
`export`	Writes names and values from penv into the store.

on-request. A new value waits there. penv can deploy to activate it, and the sync form asks you first.

Direction	Policies you can pick
`import`	`skip_existing`, `new_version`, `fail`
`export`	`create_only`, `overwrite`, `overwrite_and_prune`

How syncs work says what each one does.

You paste a credential you already hold. penv seals it and never shows it again.

Field	Label	Kind	Required	What it is
`apiKey`	API key	secret, masked here and sealed	yes

Answered once per environment you map.

Field	Label	Kind	Required	Advanced	What it is
`serviceId`	Service	text	yes	no	The service whose variables this environment maps onto. Its dashboard URL ends with the id.
`deployAfterSync`	Deploy after each sync	yes or no	yes	yes	Off, values wait for your next deploy. On, Render deploys this service immediately. Starts at `false`.

penv probes for these when it verifies the connection.

Permission	Directions	Blocking	Without it
`services:read`	every direction	yes	Preview cannot list the service's variable names.
`env:read`	`import`	yes	Import cannot read variable values.
`env:write`	`export`	yes	Export cannot write anything.