What is AgentSecrets?
The Zero-Knowledge Difference
How AgentSecrets Works
Installation
Quick Start
Migrating from .env Files
Migrating from Vault / AWS
Migrating from dotenv-vault
Production Checklist
Credential Exposure
What Zero-Knowledge Means
The Proxy Model
The Three-Layer Model
Environments
Agent Identity
Storage Modes
The No get() Principle
Secret-Level Policies
Cloud Overview & Architecture
The Dual-Engine Model
Cloud Resolver Data Plane
Workload & Agent Tokens
Egress Allowlists & Audit Streams
Cloud REST API Reference
Account (init / login)
Server & Self-Hosting (server)
Docs
Shell Autocompletion
Keychain Auth
Secrets
Environments
Credential Proxy
env Injection
Workspaces & Teams
Projects
Agent Identity
Audit & Governance
Integrations Overview
Claude Desktop
Cursor
OpenClaw
HTTP Proxy (Any)
LangChain (Soon)
CrewAI (Soon)
CI/CD Pipeline
SDK Overview
Python SDK
Python API Reference
Python SDK Manual Testing
JavaScript SDK (Soon)
Ecosystem Overview
Zero-Knowledge MCP Server
Server Overview
5-Layer Architecture
Self-Hosting Guide
Authentication & Keys
Workspaces & Teams
Projects & Scope
Environments
Secrets & Sync Protocol
Agent Identity Resolution
Telemetry & Metrics Engine
Audit Log Sync
API Endpoint Reference
Security Overview
Anti-Impersonation & Process Verification
Encryption Model
Zero-Knowledge Sync
Proxy Security Layers
Threat Model
OWASP Top 10 Mitigation
Security FAQ
Third-Party Audit
Reporting Vulnerabilities
Guides Overview
Building on the SDK
Stripe Integration
OpenAI Integration
Multi-Agent Setup
Onboarding Team
CI/CD Pipeline
Publishing ZK MCP
Rotating Credentials
Auditing Team Activity
Dev to Production
Kubernetes Deployment
Monorepo Setup
Production Proxy Hardening
vs .env Files
vs HashiCorp Vault
vs AWS Secrets Manager
vs dotenv-vault
vs Infisical
When Not to Use
Proxy Not Starting
Proxy Not Resolving
Domain Blocked
Sync Conflicts
MCP Not Connecting
Session Token Errors
Proxy Session Authorization
Keychain Storage & Backends
SSRF & Destination Rules
Installation Issues
Error Codes Reference
Frequently Asked Questions
v3.1.x
v3.0.0
v2.1.0
v2.0.0
v1.4.0
v1.3.x
v1.2.0
v1.1.x
v1.0.x
CLI ReferenceShell Autocompletion

Shell Autocompletion

The AgentSecrets CLI includes built-in autocompletion support for Bash, Zsh, Fish, and PowerShell. Setting up completions makes command execution faster and reduces spelling errors.


1Zsh

To configure completions for Zsh, run the following commands to generate the completion script and load it automatically on startup:

Create the completions directory if it doesn't exist:

mkdir -p ~/.agentsecrets/completions/zsh

Generate the completion script:

agentsecrets completion zsh > ~/.agentsecrets/completions/zsh/_agentsecrets

Add the completions path and load the function in your ~/.zshrc:

Open your ~/.zshrc file and add the following lines before compinit:

fpath=(~/.agentsecrets/completions/zsh $fpath) autoload -U compinit; compinit

Reload your shell:

source ~/.zshrc

2Bash

To load completions in Bash, ensure the bash-completion package is installed, then configure your shell:

Generate and load completions in the current session:

source <(agentsecrets completion bash)

Load completions automatically on new sessions:

  • On Linux:
    agentsecrets completion bash > /etc/bash_completion.d/agentsecrets
  • On macOS (using Homebrew):
    agentsecrets completion bash > $(brew --prefix)/etc/bash_completion.d/agentsecrets

3Fish

Completions for Fish are stored in user configuration paths and load automatically:

Generate the completion script:

agentsecrets completion fish > ~/.config/fish/completions/agentsecrets.fish

4PowerShell

To configure completions for PowerShell:

Generate and import the completion script in your profile:

agentsecrets completion powershell | Out-String | Invoke-Expression

Add the above line to your PowerShell profile (check $PROFILE path) to load completions automatically on start.

Command Shortcuts & Dual-Number Aliases

AgentSecrets supports both plural/singular noun forms (secret/secrets, project/projects, workspace/workspaces, log/logs) as well as top-level verb-noun shortcuts:

ResourceFull CommandTop-Level Shortcut Alias
Secretsagentsecrets secrets listagentsecrets list-secrets
agentsecrets secrets set KEY=valagentsecrets set-secrets KEY=val
agentsecrets secrets delete KEYagentsecrets delete-secrets KEY
agentsecrets secrets pullagentsecrets pull-secrets
agentsecrets secrets pushagentsecrets push-secrets
agentsecrets secrets diffagentsecrets diff-secrets
Projectsagentsecrets projects listagentsecrets list-projects
agentsecrets projects create <name>agentsecrets create-project <name>
agentsecrets projects switch <name>agentsecrets use-project <name>
agentsecrets projects update <name>agentsecrets update-project <name>
agentsecrets projects delete <name>agentsecrets delete-project <name>
agentsecrets projects invite <email>agentsecrets invite-project <email>
Workspacesagentsecrets workspaces listagentsecrets list-workspaces
agentsecrets workspaces switch <name>agentsecrets switch-workspace <name>
agentsecrets workspaces create <name>agentsecrets create-workspace <name>
agentsecrets workspaces invite <email>agentsecrets invite-workspace <email>
agentsecrets workspaces membersagentsecrets list-members
agentsecrets workspaces remove-memberagentsecrets remove-member
agentsecrets workspaces promoteagentsecrets promote-member
agentsecrets workspaces demoteagentsecrets demote-member
agentsecrets workspaces deleteagentsecrets delete-workspace
Allowlistsagentsecrets workspace allowlist add <d>agentsecrets add-allowlist <d>
agentsecrets workspace allowlist remove <d>agentsecrets remove-allowlist <d>
agentsecrets workspace allowlist listagentsecrets list-allowlists
agentsecrets workspace allowlist logagentsecrets get-allowlist-logs
Agentsagentsecrets agents register <name>agentsecrets register-agent <name>
agentsecrets agents listagentsecrets list-agents
agentsecrets agents delete <name>agentsecrets delete-agent <name>
agentsecrets agents token issue <name>agentsecrets issue-token <name>
agentsecrets agents token list <name>agentsecrets list-tokens <name>
agentsecrets agents token revoke <id>agentsecrets revoke-token <id>
agentsecrets agents policy get <name>agentsecrets get-agent-policy <name>
agentsecrets agents policy set <name>agentsecrets set-agent-policy <name>
Logsagentsecrets logs listagentsecrets list-logs
agentsecrets logs show <id>agentsecrets show-log <id>
agentsecrets logs summaryagentsecrets summarize-logs
agentsecrets logs watchagentsecrets watch-logs
agentsecrets logs exportagentsecrets export-logs
agentsecrets logs verifyagentsecrets verify-logs
agentsecrets logs replay <id>agentsecrets replay-log <id>
Was this helpful?
Thanks for your feedback!
Your feedback helps us improve the platform.