Skip to main content

vaultuner

PyPI version License: MIT Python 3.11-3.14

Human-readable secrets for Bitwarden Secrets Manager.

Vaultuner replaces cryptic UUIDs with intuitive paths like myapp/prod/db-password. Your secrets, organized the way you actually think about them.

The Problem

# Bitwarden's default CLI
bws secret get 550e8400-e29b-41d4-a716-446655440000

You shouldn't need to memorize UUIDs or dig through dashboards to find secrets.

The Solution

# With vaultuner
vaultuner get myapp/prod/db-password

Secrets organized by project and environment. Instantly memorable. Zero cognitive overhead.

Features

  • Path-based naming - project/env/secret instead of UUIDs
  • Environment isolation - Keep dev, staging, and prod secrets separate
  • .env sync - Export to and import from .env files seamlessly
  • Secret metadata - Attach descriptions to secrets via --description
  • Soft delete - Recover accidentally deleted secrets
  • Keychain storage - Credentials secured in macOS Keychain

Quick Start

Install

uv tool install vaultuner

Or run without installing:

uvx vaultuner list

Configure

vaultuner config set access-token <your-token>
vaultuner config set organization-id <your-org-id>

Get credentials from Bitwarden Secrets Manager.

Use

# Create secrets
vaultuner set myapp/api-key "sk-abc123"
vaultuner set myapp/prod/db-password "hunter2"

# Retrieve
vaultuner get myapp/prod/db-password -v

# List everything
vaultuner list

# Export for local dev
vaultuner export -p myapp -e dev -o .env

Commands

Command Description
list List secrets with project/env filtering
get Retrieve a secret value
set Create or update a secret
delete Soft-delete (recoverable)
restore Recover a deleted secret
export Export to .env file
import Import from .env file
projects List all projects
config Manage stored credentials

Naming Convention

PROJECT/SECRET           # Project-level secret
PROJECT/ENV/SECRET       # Environment-specific secret

Examples:

myapp/api-key            # Shared across environments
myapp/prod/db-password   # Production only
myapp/dev/db-password    # Development only

Requirements

  • Python 3.11+
  • macOS (Keychain integration)
  • Bitwarden Secrets Manager account

Documentation

Full docs at vaultuner.alltuner.com

Support the project

vaultuner is an open source project built by David Poblador i Garcia through All Tuner Labs.

If this project was useful to you, consider supporting its development.

❤️ Sponsor development https://github.com/sponsors/alltuner

☕ One-time support https://buymeacoffee.com/alltuner

Your support helps fund the continued development of vaultuner and other open source developer tools such as Factory Floor.

License

MIT


Built at All Tuner Labs by David Poblador i Garcia

Release files for vaultuner 0.1.13

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for vaultuner 0.1.13
File Size Uploaded
vaultuner-0.1.13.tar.gz 10.8 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for vaultuner 0.1.13
File Interpreter ABI Platform
vaultuner-0.1.13-py3-none-any.whl Python 3 none any Details

Total release size: 25.0 kB

Release files / vaultuner-0.1.13.tar.gz

Download URL vaultuner-0.1.13.tar.gz
Size 10.8 kB
Tags Source
SHA-256 checksum
How to use checksums
0cd89fc22d90562d271a44bfd9433fbfba12b90ab16bdc0843b8400c3a3b7d63
BLAKE2b-256 checksum
How to use checksums
3c81bf50ea1ff1a605fc74badd11187f03e92d76d27f9a89914dd79dc1e73e74
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.12

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on May 3, 2026.

Transparency log

Release files / vaultuner-0.1.13-py3-none-any.whl

Download URL vaultuner-0.1.13-py3-none-any.whl
Size 14.2 kB
Tags Python 3
SHA-256 checksum
How to use checksums
79f6b158040a87543093e028f02374c3599d66f6c91ae58ca1b4d479bfae9222
BLAKE2b-256 checksum
How to use checksums
e68d473a15f3213b681c75cd65c97265e4581987d0d9fb79ad3352415eb61164
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.12

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on May 3, 2026.

Transparency log

Release history Release notifications | RSS feed

This release

0.1.13 This release

2 release files

0.1.9

2 release files

0.1.8

2 release files

0.1.7

2 release files

0.1.6

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page