Setup Commands

unlock

Add a project to this machine. Validates the machine has access before saving.

# Add a project
sikkerkey unlock proj_xyz789

# Add with an alias
sikkerkey unlock proj_xyz789 --alias production

If this machine is only bootstrapped with one vault, unlock auto-selects it — no prior connect step is required.

The CLI verifies project access with the server before saving. If the machine doesn't have access to the project, unlock fails with an error.

After unlocking, secrets in this project are available via get, export, etc.

connect

Select which bootstrapped vault identity to use when the machine has more than one. You only need this if more than one vault is registered on this machine.

# Select a vault
sikkerkey connect vault_abc123

# Select and alias it
sikkerkey connect vault_abc123 --alias prod

# Show current vault
sikkerkey connect

# List all bootstrapped vaults
sikkerkey connect --list

# Clear default vault
sikkerkey connect --clear

Accepts vault IDs or aliases.