Command line

kiv is a terminal client for reading your vault from a script, a server, or a CI pipeline. It's published on npm and needs Node.js 22.11 or newer.

The basics#

npm install -g @keepinvault/cli

kiv login          # sign in with your email + master password
kiv list           # see your items
kiv get <item>     # read one

The CLI reference has every command, including generating passwords and TOTP codes.

Using it in a deployment#

To pull secrets into a process's environment instead of reading them by hand, use a service account and kiv run — that's covered on the developer guide.

kiv run --collection 42 -- php artisan serve   # injected into the process, never on disk