CLI Reference

Inject secrets into files

Replace axo:// references in any text file with their resolved secret values:

ap inject --input config.template.yml --output config.yml

Reads from stdin and writes to stdout when --input / --output are omitted:

cat config.template.yml | ap inject > config.yml

Run commands with secrets in the environment

Interpolate axo:// references already present in the environment, then run a command:

ap exec -- make deploy

Load one or more dotenv files first — values in those files are also interpolated before the command runs:

ap exec --env-file .env.production -- node server.js

Glob patterns are supported, and multiple --env-file flags can be combined (later files take precedence):

ap exec --env-file '.env.*' --env-file .env.local -- ./deploy.sh