Referencesince 1.0.0
penv reveal
Show one value; an AI agent needs your approval first
Show one value; an AI agent needs your approval first.
Usage
penv reveal [--env <env>] [--approval <approval>] <key>Every command also takes the global options.
Arguments
| Argument | Required | What it is |
|---|---|---|
<key> | yes | The key to reveal. |
Flags
| Flag | What it does | Environment variable |
|---|---|---|
--env <env> | The environment to read. | PENV_ENV |
--approval <approval> | Print the value a person approved under this id. |
Exit codes
| Code | Name | What it means |
|---|---|---|
0 | ok | The command did what it says. |
1 | error | Unclassified failure. The message on stderr names the cause. |
2 | auth | Not signed in, or we rejected the credential. |
4 | confirmation | A person has to confirm. The JSON carries the command to replay. |
5 | no_credential | No credential is available and none can be obtained. |
6 | environment_refused | This identity may not read that environment. |
Under an agent
This command can write a secret value to stdout. Under an agent session a person approves it in the console before the value prints.
Related
penv run: Run a command with your secrets loaded into it.penv guard: Write the rules that keep AI tools out of .env.- Coding agents
- The audit log