Vaults

List Vaults

passbox vault list

Shows all vaults you have access to, with your role in each.

Create a Vault

passbox vault create <name>

Creates a new vault with the given name. A default development environment is created automatically.

Example

passbox vault create my-app
# ✓ Vault "my-app" created

Delete a Vault

passbox vault delete <name>

Permanently deletes a vault and all its secrets, environments, and members. Requires owner role.

Caution

This action is irreversible. All secrets in the vault will be permanently deleted.

Example

passbox vault delete old-project
# Are you sure? (y/N): y
# ✓ Vault "old-project" deleted

Initialize Project

passbox init

Creates a .passbox.json file in the current directory, linking the project to a vault. You’ll be prompted to select a vault from your list.

Example .passbox.json

{
  "vault": "my-app",
  "environment": "development"
}

Once initialized, you can omit the --vault flag from other commands:

# Before init
passbox get API_KEY --vault my-app

# After init
passbox get API_KEY

Vault Roles

Role	Read	Write	Delete	Manage Members	Delete Vault
viewer	Yes	No	No	No	No
member	Yes	Yes	No	No	No
admin	Yes	Yes	Yes	Yes	No
owner	Yes	Yes	Yes	Yes	Yes