superkeycli

Push and pull encrypted .env values to and from SuperKey, with zero-knowledge AES-256-GCM encryption performed locally on your machine.

Usage

No install required — just use npx:

npx superkeycli <command>

Or install globally:

npm install -g superkeycli

Quick start

# 1. Issue a Personal Access Token in the dashboard at /dashboard/cli
npx superkeycli login --token sk_xxx

# 2. Link the current directory to a remote project + env
npx superkeycli link

# 3. Push your local .env (values are encrypted client-side)
npx superkeycli push

# 4. On another machine, pull and write a fresh .env
npx superkeycli pull > .env

Commands

• npx superkeycli login --token <pat> — authenticate this machine
• npx superkeycli logout — revoke the active token and remove cached credentials
• npx superkeycli whoami — show the current user and workspaces
• npx superkeycli link [--workspace <slug>] [--project <slug>] [--env <env>] — write .superkey.json
• npx superkeycli push [--env <env>] [--file <path>] — encrypt and upload
• npx superkeycli pull [--env <env>] [--out <path>] — fetch and decrypt

Environment variables

• SUPERKEY_API_URL — defaults to https://superkey.dev (or http://localhost:3000 during dev)
• SUPERKEY_PASSPHRASE — non-interactive passphrase for CI
• SUPERKEY_TOKEN — non-interactive PAT for CI

Security model

See doc/crypto.md in the SuperKey repository.