Skip to main content

Bitwarden Secrets Manager CLI with PROJECT/[ENV/]SECRET naming

Project description

vaultuner

PyPI version License: MIT Python 3.11-3.14

Human-readable secrets for Bitwarden Secrets Manager.

Vaultuner replaces cryptic UUIDs with intuitive paths like myapp/prod/db-password. Your secrets, organized the way you actually think about them.

The Problem

# Bitwarden's default CLI
bws secret get 550e8400-e29b-41d4-a716-446655440000

You shouldn't need to memorize UUIDs or dig through dashboards to find secrets.

The Solution

# With vaultuner
vaultuner get myapp/prod/db-password

Secrets organized by project and environment. Instantly memorable. Zero cognitive overhead.

Features

  • Path-based naming - project/env/secret instead of UUIDs
  • Environment isolation - Keep dev, staging, and prod secrets separate
  • .env sync - Export to and import from .env files seamlessly
  • Soft delete - Recover accidentally deleted secrets
  • Keychain storage - Credentials secured in macOS Keychain

Quick Start

Install

uv tool install vaultuner

Or run without installing:

uvx vaultuner list

Configure

vaultuner config set access-token <your-token>
vaultuner config set organization-id <your-org-id>

Get credentials from Bitwarden Secrets Manager.

Use

# Create secrets
vaultuner set myapp/api-key "sk-abc123"
vaultuner set myapp/prod/db-password "hunter2"

# Retrieve
vaultuner get myapp/prod/db-password -v

# List everything
vaultuner list

# Export for local dev
vaultuner export -p myapp -e dev -o .env

Commands

Command Description
list List secrets with project/env filtering
get Retrieve a secret value
set Create or update a secret
delete Soft-delete (recoverable)
restore Recover a deleted secret
export Export to .env file
import Import from .env file
projects List all projects
config Manage stored credentials

Naming Convention

PROJECT/SECRET           # Project-level secret
PROJECT/ENV/SECRET       # Environment-specific secret

Examples:

myapp/api-key            # Shared across environments
myapp/prod/db-password   # Production only
myapp/dev/db-password    # Development only

Requirements

  • Python 3.11+
  • macOS (Keychain integration)
  • Bitwarden Secrets Manager account

Documentation

Full docs at vaultuner.alltuner.com

Support the project

vaultuner is an open source project built by David Poblador i Garcia through All Tuner Labs.

If this project was useful to you, consider supporting its development.

❤️ Sponsor development https://github.com/sponsors/alltuner

One-time support https://buymeacoffee.com/alltuner

Your support helps fund the continued development of vaultuner and other open source developer tools such as Factory Floor.

License

MIT


Built at All Tuner Labs by David Poblador i Garcia

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

vaultuner-0.1.12.tar.gz (9.7 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

vaultuner-0.1.12-py3-none-any.whl (13.0 kB view details)

Uploaded Python 3

File details

Details for the file vaultuner-0.1.12.tar.gz.

File metadata

  • Download URL: vaultuner-0.1.12.tar.gz
  • Upload date:
  • Size: 9.7 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for vaultuner-0.1.12.tar.gz
Algorithm Hash digest
SHA256 fa02e9bfeb22458cb9b6d777ed6555d880a2272c2b2abe4a401bc921ce337ed9
MD5 c281aee45136085fe24368b784fcdcdc
BLAKE2b-256 782389f206a75b8f99e781402f3148791d4b2355ad6e714ca6a86a056cd1efe1

See more details on using hashes here.

Provenance

The following attestation bundles were made for vaultuner-0.1.12.tar.gz:

Publisher: release.yml on alltuner/vaultuner

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file vaultuner-0.1.12-py3-none-any.whl.

File metadata

  • Download URL: vaultuner-0.1.12-py3-none-any.whl
  • Upload date:
  • Size: 13.0 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for vaultuner-0.1.12-py3-none-any.whl
Algorithm Hash digest
SHA256 be875a52c4f9a922f3569ab6bab89903c08140660c4d022603fa56316ea56a8b
MD5 7aff5d5ab074c8cd3ef6473f0c4c6a69
BLAKE2b-256 b20c0d4a8a50c6debafd453f85776d7c06f8bf3a1e46c236956a91c0b2991982

See more details on using hashes here.

Provenance

The following attestation bundles were made for vaultuner-0.1.12-py3-none-any.whl:

Publisher: release.yml on alltuner/vaultuner

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page