CLI reference
Authenticate, select a secret set, manage values, and inject them directly into a child process.
Installation
npm install --global unbe-cliunbe --versionInstall the unbe-cli package globally to make theunbe command available in your terminal. Run the same install command again to update to the latest release.
Authentication
unbe login
unbe whoamiInteractive login opens an authorization flow and stores the resulting credential in the global CLI configuration. For a machine or non-interactive environment, provide a scoped token instead.
Choose a target
unbe use -w acme -p atlas-api -e developmentThe saved target becomes the default for commands run in this repository. Omit flags to use the keyboard-driven picker, or pass--global to save a user-wide fallback.
Read secrets
unbe secrets list
unbe secrets pull --format env
unbe secrets pull --format jsonValues are sensitive
Write secrets
unbe secrets set STRIPE_SECRET_KEY sk_live_...
unbe secrets import --from .env
unbe secrets delete STRIPE_SECRET_KEYSet updates one key. Import applies multiple dotenv entries to the selected environment. Delete is destructive and requires confirmation in an interactive terminal.
Run a command
unbe run -- npm run dev
unbe run -- node dist/server.jsThe first -- ends Unbe option parsing. The remaining arguments are started as the child command with the selected values in its environment.
Watch mode
unbe run --watch -- npm run dev
[unbe 14:06:22] watching acme/atlas-api/development; 6 secrets
[unbe 14:08:47] changed: DATABASE_URL
[unbe 14:08:48] restarted command with 6 secretsWatch mode checks for secret revisions and restarts the child process after changes settle. If connectivity is interrupted, the current child continues running while the watcher retries and reports recovery.
Command reference
unbe loginAuthorize the CLI through the browser.
unbe login --token <token>Save an existing machine token.
unbe logoutRemove the global login token.
unbe whoamiShow the current identity and resolved target.
unbe use -w <workspace> -p <project> -e <env>Save target defaults for this repository.
unbe secrets listList keys and metadata without values.
unbe secrets list --valuesInclude complete values in the output.
unbe secrets pull --format envPrint dotenv-formatted values to stdout.
unbe secrets pull --format jsonPrint values as JSON.
unbe secrets pull --out .env.localWrite values to an explicit file.
unbe secrets set KEY valueCreate or replace one secret.
unbe secrets import --from .envImport dotenv-formatted values.
unbe secrets delete KEYDelete one secret after confirmation.
unbe run -- <command>Run a child process with secrets injected.
unbe run --watch -- <command>Restart a child process when secrets change.