CLI
Encrypt, run, and manage .env files from the command line.
CLI Commands
- run
- run --convention=flow
- run --convention=nextjs
- run --debug
- run --env HELLO=String
- run --ignore
- run --lock-password
- run --log-level
- run --mask
- run --no-1password
- run --no-armor
- run --no-bitwarden
- run --no-native
- run --overload
- run --quiet
- run --redact
- run --redact -- claude
- run --redact -- claude -p
- run --redact -- codex
- run --redact -- codex exec
- run --strict
- run --token
- run --verbose
- run -f
- run -f directory
- run -f directory + nextjs
- run -fk
- run Alternate Values
- run Combine Multiple
- run Command Substitution
- run Contextual Help
- run Default Values
- run DOTENV_ENV=production
- run DOTENV_PRIVATE_KEY
- run DOTENV_PRIVATE_KEY_CI
- run DOTENV_PRIVATE_KEY_PRODUCTION
- run Environment Variable Precedence
- run Interpolation Syntax Summary
- run Multiline
- run Shell Expansion
- run Variable Expansion
- run with an Envfile
- get
- get (json)
- get --all
- get --all --pretty-print
- get --convention=flow
- get --convention=nextjs
- get --format
- get --format colon
- get --format eval
- get --format eval-export
- get --format shell
- get --lock-password
- get --no-1password
- get --no-armor
- get --no-bitwarden
- get --pretty-print
- get -ek
- get -f directory
- get -f directory + nextjs
- get -ik
- get KEY
- get KEY --env
- get KEY --ignore
- get KEY --mask
- get KEY --no-native
- get KEY --overload
- get KEY --strict
- get KEY -f
- get KEY -fk
- set
- set --no-1password
- set --no-bitwarden
- set KEY value
- set KEY value --encrypt
- set KEY value --no-armor
- set KEY value --no-create
- set KEY value --no-native
- set KEY value --plain
- set KEY value -f
- set KEY value -fk
- set KEY_PLAIN value
- set Values with leading dash
- set Values with spaces
- del
- del KEY
- del KEY -f
- encrypt
- encrypt --no-1password
- encrypt --no-armor
- encrypt --no-bitwarden
- encrypt --no-create
- encrypt --no-native
- encrypt --stdout
- encrypt --token
- encrypt -ek
- encrypt -f
- encrypt -fk
- encrypt -k
- encrypt KEY_PLAIN
- decrypt
- decrypt --no-armor
- decrypt --no-native
- decrypt --stdout
- decrypt --stdout --mask
- decrypt -ek
- decrypt -f
- decrypt -fk
- decrypt -k
- keypair
- keypair --format
- keypair --format colon
- keypair --format json
- keypair --format shell
- keypair --no-1password
- keypair --no-armor
- keypair --no-bitwarden
- keypair --no-native
- keypair --pretty-print
- keypair -f
- keypair -fk
- keypair KEY
- 1password
- 1password down
- 1password down -f
- 1password down -fk
- 1password pull
- 1password pull -f
- 1password pull -fk
- 1password push
- 1password push -f
- 1password push -fk
- 1password up
- 1password up -f
- 1password up -fk
- armor
- armor down
- armor down --team
- armor down --token
- armor down -f
- armor introduction
- armor login
- armor login --hostname
- armor logout
- armor logout --hostname
- armor move
- armor move --token
- armor move -f
- armor open
- armor open armor open -f
- armor pull
- armor pull armor pull --team
- armor pull armor pull --token
- armor pull armor pull -f
- armor push
- armor push --team
- armor push --token
- armor push -f
- armor settings
- armor settings armor settings device
- armor settings armor settings device armor settings device --unmask
- armor settings armor settings hostname
- armor settings armor settings off
- armor settings armor settings on
- armor settings armor settings path
- armor settings armor settings token
- armor settings armor settings token armor settings token --unmask
- armor settings armor settings username
- armor status
- armor up
- armor up armor up --team
- armor up armor up --token
- armor up armor up -f
- bitwarden
- bitwarden down
- bitwarden down -f
- bitwarden down -fk
- bitwarden pull
- bitwarden pull -f
- bitwarden pull -fk
- bitwarden push
- bitwarden push -f
- bitwarden push -fk
- bitwarden up
- bitwarden up -f
- bitwarden up -fk
- curl
- curl --data
- curl --token
- curl -X
- define
- define -f
- doctor
- feedback
- feedback --hostname
- genexample
- genexample -f
- genexample directory
- gitignore
- gitignore --pattern
- help
- hidden
- init
- init -f
- lock
- lock down
- lock down -f
- lock down -fk
- lock up
- lock up -f
- lock up -fk
- ls
- ls --json
- ls -ef
- ls -f
- native
- native down
- native down -f
- native down -fk
- native pull
- native pull -f
- native pull -fk
- native push
- native push -f
- native push -fk
- native up
- native up -f
- native up -fk
- prebuild
- prebuild directory
- precommit
- precommit --install
- precommit directory
- primitives
- primitives derive
- primitives derive --stdin
- primitives keypair
- primitives keypair --stdin
- primitives keypair <privateKey>
- protect
- protect --docker
- protect --docker directory
- scan
- update
- validate
- validate --convention
- validate --ignore
- validate --no-1password
- validate --no-armor
- validate --no-bitwarden
- validate --no-native
- validate --strict
- validate --token
- validate -e
- validate -f
- validate -fk
- validate -o
- version