CLI Installation

Install

npm install -g pabox

pnpm add -g pabox

yarn global add pabox

passbox --version
# 0.1.0

PassBox stores configuration in ~/.passbox/:

File	Purpose
`~/.passbox/config.json`	Server URL, default vault, default environment
`~/.passbox/auth.json`	Access token, refresh token, encrypted master key (mode 0600)

passbox config set server https://api.passbox.dev

passbox config set defaultVault my-app

passbox config set defaultEnvironment production

passbox config get server
passbox config get defaultVault

Create a .passbox.json in your project root to set per-project defaults:

passbox init

This generates:

{
  "vault": "my-app",
  "environment": "development"
}

Project config takes precedence over global config. Add .passbox.json to version control so your team shares the same defaults.

If running your own PassBox server:

passbox config set server https://your-passbox-server.com

Or set it per-project in .passbox.json:

{
  "vault": "my-app",
  "server": "https://your-passbox-server.com"
}

Command	Description
`passbox login`	Authenticate with email + password
`passbox logout`	Clear local session
`passbox whoami`	Show current user
`passbox init`	Create project config
`passbox vault`	Manage vaults (list, create, delete)
`passbox get`	Retrieve a secret
`passbox set`	Store a secret
`passbox delete`	Delete a secret
`passbox list`	List secrets in a vault
`passbox history`	View secret version history
`passbox env`	Push/pull .env files
`passbox environment`	Manage environments
`passbox import`	Import secrets from files
`passbox run`	Run command with secrets injected
`passbox member`	Manage vault members
`passbox token`	Manage service tokens
`passbox webhook`	Manage webhooks
`passbox rotation`	Manage secret rotation
`passbox account`	Account management
`passbox config`	View/set CLI config
`passbox serve`	Start MCP server