ironflow secret

Manage encrypted secrets. Secrets are environment-scoped and write-only — values can be set but are never returned by the CLI or API.

ironflow secret list

List all secrets in the current environment (metadata only — values are never shown).

ironflow secret list [--server URL] [--env ENV]

Flag	Short	Description	Default
--server	-s	Server URL	$IRONFLOW_SERVER_URL or http://localhost:9123
--env	-e	Environment name	$IRONFLOW_ENV or default

ironflow secret set

Create or update a secret.

ironflow secret set <name> <value> [--server URL] [--env ENV] [--description DESC]

Flag	Short	Description	Default
--server	-s	Server URL	$IRONFLOW_SERVER_URL or http://localhost:9123
--env	-e	Environment name	$IRONFLOW_ENV or default
--description	-d	Human-readable description	(none)

ironflow secret get

Get metadata for a specific secret (value is never shown).

ironflow secret get <name> [--server URL] [--env ENV]

Flag	Short	Description	Default
--server	-s	Server URL	$IRONFLOW_SERVER_URL or http://localhost:9123
--env	-e	Environment name	$IRONFLOW_ENV or default

ironflow secret delete

Delete a secret.

ironflow secret delete <name> [--server URL] [--env ENV]

Flag	Short	Description	Default
--server	-s	Server URL	$IRONFLOW_SERVER_URL or http://localhost:9123
--env	-e	Environment name	$IRONFLOW_ENV or default

Examples:

# List secrets (metadata only)
ironflow secret list

# Set a secret
ironflow secret set API_KEY sk-abc123 --description "OpenAI API key"

# Set a secret in a specific environment
ironflow secret set DB_PASSWORD mypass --env production

# Get metadata for a secret
ironflow secret get API_KEY

# Delete a secret
ironflow secret delete API_KEY

---