Skip to content
Core ConceptsCLI ReferenceAPI Reference
Vault
AGH RuntimeVault

agh vault

Manage encrypted daemon vault metadata and write-only secrets

Audience
Operators running durable agent work
Focus
Vault guidance shaped for scanability, day-two clarity, and operator context.

agh vault

Manage encrypted daemon vault metadata and write-only secrets

Options

  -h, --help   help for vault

Options inherited from parent commands

      --json            Emit JSON output
  -o, --output string   Output format: human, json, jsonl, or toon (default "human")

Output Formats

Every AGH command supports -o, --output:

  • human for interactive terminal use
  • json for scripts and other machine-readable consumers
  • jsonl for wait or streaming commands that emit one JSON record per line
  • toon for compact agent-readable summaries

Subcommands

CommandDescription
agh vault deleteDelete one vault secret
agh vault getShow redacted metadata for one vault secret
agh vault listList redacted vault secret metadata
agh vault putStore one write-only vault secret from stdin

agh bridge update

Update mutable bridge fields

agh vault delete

Delete one vault secret

On this page

agh vaultOptionsOptions inherited from parent commandsOutput FormatsSubcommands