keystackz CLI

Pull your encrypted env vars from KeyStackz straight into your project — no copy-paste.

Install

npm install -g @keystackz/cli
# or run from source:
cd cli && pnpm install --ignore-workspace
npm link            # makes `keystackz` available globally

Usage

# 1. Save a project token (create one in the dashboard → Tokens).
keystackz login                       # prompts for the token
keystackz login --token kstk_live_…    # non-interactive

# 2. In your project, pull active env vars into .env.local (auto-gitignored).
keystackz pull

# 3. See which variables this token can access (names only).
keystackz status

The token is stored at ~/.keystackz/credentials (permissions 600) and is sent only in the Authorization: Bearer header — never in a URL.

Options

• --api-url <url> — point at a non-default API (default http://localhost:3000, or set KEYSTACKZ_API_URL).
• pull --out <file> — write somewhere other than .env.local.