List all secret names in the Keyway vault for the current repository. Returns only the keys, not the values.

Create or update a secret in the Keyway vault. The key must be uppercase with underscores (e.g., DATABASE_URL).

Run a command with Keyway secrets injected as environment variables. Secrets are only available to this command.

List available environments for the current repository vault.

Scan the codebase for potential secret leaks. Detects AWS keys, GitHub tokens, Stripe keys, private keys, and more.

Compare secrets between two environments to find differences.

Generate a secure secret and store it directly in the vault. The value is never exposed in the conversation.

Validate that required secrets exist in an environment. Useful for pre-deployment checks.