Docs

CLI commands

Full reference for every eanvi command and flag.

CLI commands

All commands support --help. Global flags: --api-url / --url, --api-key, --org.

eanvi login

Authenticate with browser (OAuth/SSO), email & password, or API key.

eanvi login
eanvi login [--api-key <key>]
eanvi login --browser
eanvi login -e you@company.com -p '***' -o acme
eanvi login --api-key eanvi_sk_live_... --key-name "laptop"

Running eanvi login with no flags shows interactive login options.

Flag	Description
`-b, --browser`	Browser OAuth / SSO / social login
`--api-key <key>`	Authenticate with an API key
`--api-url` / `--url`	API endpoint override
`-e, --email`	Account email
`-p, --password`	Account password
`-o, --org`	Organization slug
`--key-name`	Name for a created CLI token

Stores credentials in ~/.eanvi/credentials.json.

eanvi logout

Clear stored credentials and end the active CLI session.

eanvi logout

eanvi whoami

Show the authenticated user and organization.

eanvi whoami

eanvi init

Initialize .eanvi/config.json in the current directory.

eanvi init [--project <name>] [--environment <env>]
eanvi init -p my-app -e development -f .env.local
eanvi init --force

Flag	Description
`-p, --project`	Project slug
`-e, --environment`	Environment slug (default `development`)
`-f, --env-file`	Local env file path (default `.env`)
`-o, --org`	Organization slug
`--force`	Overwrite existing config without prompting

eanvi pull

Download secrets from remote and write a local env file.

eanvi pull [--environment <env>] [--output <file>]
eanvi pull -e production --output .env.production --force
eanvi pull --format json

Flag	Description
`-p, --project`	Project slug
`-e, --environment`	Environment slug
`-o, --org`	Organization slug
`--output`	Output file path
`--format`	`env` or `json` (default `env`)
`-f, --force`	Overwrite output file

eanvi push

Upload local .env secrets to remote.

eanvi push [--dry-run] [--force]
eanvi push --file .env.local --delete-missing --dry-run

Flag	Description
`--file`	Source `.env` path
`--dry-run`	Preview without writing remote
`-f, --force`	Bypass base version checks
`--delete-missing`	Delete remote keys absent locally
`--base-version`	Optimistic concurrency base version

eanvi sync

Bidirectional sync with conflict resolution.

eanvi sync [--yes] [--dry-run]
eanvi sync -y --force

Flag	Description
`-y, --yes`	Auto-resolve non-conflicting merges
`--dry-run`	Show diff without writing
`-f, --force`	Prefer local on conflicts
`--file`	Local env file path

eanvi list

List secrets in the current environment.

eanvi list [--reveal]
eanvi list --json

Flag	Description
`--reveal`	Print plaintext values
`--json`	JSON output

eanvi diff

Compare local .env to remote.

eanvi diff
eanvi diff --file .env.local --json

Flag	Description
`--file`	Local env path
`--json`	JSON diff

eanvi doctor

Check installation, connectivity, credentials, and config.

eanvi doctor
eanvi doctor --verbose

eanvi import

Import secrets from .env, JSON, or YAML.

eanvi import <file> [--environment <env>] [--dry-run]
eanvi import secrets.yaml --format yaml --skip-conflicts

Flag	Description
`--format`	`env`, `json`, or `yaml` (auto-detect default)
`--dry-run`	Preview only
`--overwrite`	Overwrite on conflict (default)
`--skip-conflicts`	Skip existing keys

eanvi export

Export secrets to .env, JSON, or YAML.

eanvi export [--format env|json|yaml] [--output <file>]
eanvi export --format yaml --output secrets.yaml --tags database

Flag	Description
`--format`	`env`, `json`, or `yaml` (default `env`)
`--output`	File path (stdout if omitted)
`--tags`	Comma-separated tag filter