vault/

HashiCorp Vault

HashiCorp

Manage secrets, encryption, and access control with HashiCorp Vault from the command line.

Security & IdentityJSON

docs repo .json

01Install

brew install vault

Download binary →

02Agent Notes

vault manages secrets and encryption. Always pass `-format=json` for machine output. `vault kv get/put/list` for KV secrets. `vault read/write` for generic paths. VAULT_ADDR must be set to the Vault server URL. Token-based auth or use `vault login -method=<method>`. `vault secrets list` to see enabled engines. `vault kv get -format=json secret/myapp` to read a secret as JSON.

03Global Flags

Flag	Type	Description
`-format`	enum [json, yaml, table, pretty]	Output format
`-address`	string	Vault server address
`-namespace`	string	Vault namespace to target
`-tls-skip-verify`	boolean	Skip TLS certificate verification

04Authentication

Methods

tokenenvironment-variables

Env vars

VAULT_ADDRVAULT_TOKENVAULT_NAMESPACE

Setupvault login

Docsdeveloper.hashicorp.com/vault/docs/commands/login

05Capabilities

Secrets Management Identity & Access Authentication

Reference

binaryvault

checkvault version

authtoken, environment-variables

formatstable, yaml, pretty

json flag-format=json

version1.21.4