Setup Commands

connect

Select which bootstrapped vault identity to use when the machine has more than one. You only need this if more than one vault is registered on this machine.

# Select a vault
sikkerkey connect vault_abc123

# Select and alias it
sikkerkey connect vault_abc123 --alias prod

# Show current vault
sikkerkey connect

# List all bootstrapped vaults
sikkerkey connect --list

# Clear default vault
sikkerkey connect --clear

Accepts vault IDs or aliases.

set application

Scope subsequent commands to a single application. Applications group related projects (typically a service's Production / Staging / Dev environments); scoping limits list secrets, list projects, export, and run --all to just that application's projects.

# Scope to an application
sikkerkey set application app_a1b2c3d4e5

# Show the current scope
sikkerkey set application

# Return to global (all projects)
sikkerkey set application none

The scope is stored locally per vault, so it persists across invocations. It is read-only context: an explicit --project always overrides it, and leaving it unset (or none) keeps every command global. Run sikkerkey list applications to see the applications this machine can reach.