vaultuner
Human-readable secrets for Bitwarden Secrets Manager.
Vaultuner replaces cryptic UUIDs with intuitive paths like myapp/prod/db-password. Your secrets, organized the way you actually think about them.
The Problem
# Bitwarden's default CLI
bws secret get 550e8400-e29b-41d4-a716-446655440000
You shouldn't need to memorize UUIDs or dig through dashboards to find secrets.
The Solution
# With vaultuner
vaultuner get myapp/prod/db-password
Secrets organized by project and environment. Instantly memorable. Zero cognitive overhead.
Features
- Path-based naming -
project/env/secretinstead of UUIDs - Environment isolation - Keep dev, staging, and prod secrets separate
.envsync - Export to and import from.envfiles seamlessly- Secret metadata - Attach descriptions to secrets via
--description - Soft delete - Recover accidentally deleted secrets
- Keychain storage - Credentials secured in macOS Keychain
Quick Start
Install
uv tool install vaultuner
Or run without installing:
uvx vaultuner list
Configure
vaultuner config set access-token <your-token>
vaultuner config set organization-id <your-org-id>
Get credentials from Bitwarden Secrets Manager.
Use
# Create secrets
vaultuner set myapp/api-key "sk-abc123"
vaultuner set myapp/prod/db-password "hunter2"
# Retrieve
vaultuner get myapp/prod/db-password -v
# List everything
vaultuner list
# Export for local dev
vaultuner export -p myapp -e dev -o .env
Commands
| Command | Description |
|---|---|
list |
List secrets with project/env filtering |
get |
Retrieve a secret value |
set |
Create or update a secret |
delete |
Soft-delete (recoverable) |
restore |
Recover a deleted secret |
export |
Export to .env file |
import |
Import from .env file |
projects |
List all projects |
config |
Manage stored credentials |
Naming Convention
PROJECT/SECRET # Project-level secret
PROJECT/ENV/SECRET # Environment-specific secret
Examples:
myapp/api-key # Shared across environments
myapp/prod/db-password # Production only
myapp/dev/db-password # Development only
Requirements
- Python 3.11+
- macOS (Keychain integration)
- Bitwarden Secrets Manager account
Documentation
Full docs at vaultuner.alltuner.com
Support the project
vaultuner is an open source project built by David Poblador i Garcia through All Tuner Labs.
If this project was useful to you, consider supporting its development.
❤️ Sponsor development https://github.com/sponsors/alltuner
☕ One-time support https://buymeacoffee.com/alltuner
Your support helps fund the continued development of vaultuner and other open source developer tools such as Factory Floor.
License
MIT
Built at All Tuner Labs by David Poblador i Garcia
Release files for vaultuner 0.1.13
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| vaultuner-0.1.13.tar.gz | 10.8 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| vaultuner-0.1.13-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 25.0 kB
Release files / vaultuner-0.1.13.tar.gz
| Download URL | vaultuner-0.1.13.tar.gz |
|---|---|
| Size | 10.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
0cd89fc22d90562d271a44bfd9433fbfba12b90ab16bdc0843b8400c3a3b7d63
|
|
BLAKE2b-256 checksum How to use checksums |
3c81bf50ea1ff1a605fc74badd11187f03e92d76d27f9a89914dd79dc1e73e74
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on May 3, 2026.
Transparency logRelease files / vaultuner-0.1.13-py3-none-any.whl
| Download URL | vaultuner-0.1.13-py3-none-any.whl |
|---|---|
| Size | 14.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
79f6b158040a87543093e028f02374c3599d66f6c91ae58ca1b4d479bfae9222
|
|
BLAKE2b-256 checksum How to use checksums |
e68d473a15f3213b681c75cd65c97265e4581987d0d9fb79ad3352415eb61164
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on May 3, 2026.
Transparency log