CLI Command Reference

Commands

  • muth init: Silently generates identity and empty muth.lock.
  • muth set KEY=VAL: Encrypts key-value into muth.lock.
  • muth get [--reveal]: Displays stored keys (masked by default).
  • muth edit: Interactively opens decrypted secrets in $EDITOR (nano/vim) and re-encrypts on save.
  • muth diff [.env.example]: Compares required keys in reference files against muth.lock and surfaces missing keys.
  • muth grant <pubkey>: Appends recipient stanza for team onboarding.
  • muth run -- <cmd>: Decrypts secrets into RAM and spawns child process.
  • muth doctor: System identity and permission check.
← PREVIOUS LESSON Security Spec NEXT LESSON → Architecture