Vault

AGH RuntimeVault

agh vault put

Store one write-only vault secret from stdin

Audience: Operators running durable agent work
Focus: Vault guidance shaped for scanability, day-two clarity, and operator context.

agh vault put

Store one write-only vault secret from stdin

agh vault put <ref> [flags]

Examples

  # Store a session vault secret
  printf "%s" "$TOKEN" | agh vault put vault:sessions/sess_123/github-token --kind token --value-stdin

  # Rotate a value without changing its existing kind metadata
  printf "%s" "$TOKEN" | agh vault put vault:sessions/sess_123/github-token --value-stdin

Options

  -h, --help          help for put
      --kind string   Optional secret kind metadata
      --value-stdin   Read the secret value from stdin

Options inherited from parent commands

      --json            Emit JSON output
  -o, --output string   Output format: human, json, jsonl, or toon (default "human")

Output Formats

Every AGH command supports -o, --output:

human for interactive terminal use
json for scripts and other machine-readable consumers
jsonl for wait or streaming commands that emit one JSON record per line
toon for compact agent-readable summaries

Example:

agh vault put <ref> -o json

agh vault list

List redacted vault secret metadata

agh install

Bootstrap AGH and create the default general agent

On this page

agh vault put Examples Options Options inherited from parent commands Output Formats