SecretCarousel

Quickstart

One command. Your agent has an encrypted vault. No more plain text keys.

Claude Web Claude Code Cursor Cline Windsurf Aider
1

Signup (instant, one command)

# Install globally or use npx
npx secretcarousel signup my-project --local

# Output:
# Tenant "my-project" created!
# API Key: sc_trial_my_project_a1b2c3...
# Saved: .sc/config.json (local)

Key saved to .sc/config.json. Add .sc/ to your .gitignore.

2

Store your first secret

sc secret "DATABASE_URL" "postgres://user:pass@host:5432/db" -t database-credentials

# Secret created
#   ID:   secret-abc123
#   Name: DATABASE_URL
#   Type: database-credentials
3

Retrieve it (decrypted on demand)

sc secret show secret-abc123

# DATABASE_URL  database-credentials  active
# Value: postgres://user:pass@host:5432/db
# Version: 1  Accessed: 1x
4

List all secrets

sc secrets

# Secrets (3)
#   secret-abc123  DATABASE_URL  database-credentials  v1  production
#   secret-def456  API_KEY       api-key               v2  staging
#   secret-ghi789  JWT_SECRET    custom                v1  development
5

Export as .env

sc env pull --env production > .env

# DATABASE_URL=postgres://user:pass@host:5432/db
# API_KEY=sk_live_...
6

Rotate (Pro plan)

# Rotate immediately
sc rotate secret-abc123

# Set 30-day auto-rotation
sc rotate set secret-abc123 --schedule "30d" --email ops@myproject.dev
7

Share (Pro plan)

# Create a 1-hour, single-use share link
sc share secret-abc123 --hours 1 --views 1

# Share created
#   Token: sct_abc123...
#   Expires: 2026-06-08T20:00:00Z

Configuration

# Config priority (first match wins):
# 1. --key flag
# 2. SC_API_KEY environment variable
# 3. .sc/config.json (local project)
# 4. ~/.secretcarousel/config.json (global)

# Check which config is active:
sc config

# Add --json to any command for structured output:
sc secrets --json
sc me --json

Resources

© 2026 Tyga.Cloud Ltd. All rights reserved.