HashiCorp Vault CLI

hvac-cli is a replacement for the HashiCorp Vault CLI, with additional features and workarounds for known bugs.

• Quick start use cases
  • Dump and reload all secrets
• Command reference
  • kv delete
  • kv destroy
  • kv dump
  • kv erase
  • kv get
  • kv list
  • kv load
  • kv metadata delete
  • kv metadata get
  • kv metadata put
  • kv patch
  • kv put
  • kv rollback
  • kv undelete
  • status

Implementation matrix

Command	Implemented	Description
kv	yes	Interact with Vault’s Key-Value storage
read	no	Read data and retrieves secrets
write	no	Write data, configuration, and secrets
delete	no	Delete secrets and configuration
list	no	List data or secrets
login	no	Authenticate locally
status	yes	Print seal and HA status
unwrap	no	Unwrap a wrapped secret
audit	no	Interact with audit devices
auth	no	Interact with auth methods
lease	no	Interact with leases
operator	no	Perform operator-specific tasks
path-help	no	Retrieve API help for paths
plugin	no	Interact with Vault plugins and catalog
policy	no	Interact with policies
secrets	no	Interact with secrets engines
ssh	no	Initiate an SSH session
token	no	Interact with tokens

Note

hvac-cli does not implement any Vault features that are not available under a Free Software license.