Secrets CLI

Manage the vault without a GUI — CI-friendly and scriptable.

omo secrets

Run with no args for full help.

Commands

Command	Description
omo secrets list [prefix]	List entries (optional path prefix filter)
omo secrets get <path>	Show one entry
omo secrets put <path> …	Create or update
omo secrets delete <path>	Remove an entry
omo secrets reset --yes	Delete omo.kdbx (key file kept)

put flags

omo secrets put <plugin/env/name> \
  [--username U] \
  [--password P] \
  [--url U] \
  [--notes N] \
  [--attr k=v]

Repeat --attr for custom fields (port, database, kubeconfig, …).

Examples

# Redis
omo secrets put redis/development/local \
  --url localhost \
  --password mypass \
  --attr port=6379 \
  --attr database=0

# List everything under redis/
omo secrets list redis

# Inspect
omo secrets get redis/development/local

# Remove
omo secrets delete redis/development/local

Automation tips

• Prefer omo secrets over committing passwords to repos or shell history files you share
• Pipe carefully: avoid echoing secrets into world-readable logs
• For playground seed scripts, see Playground