Cline stores and retrieves encrypted secrets. No more plain text credentials. 30 seconds.
# One command. Instant API key. Saved to project. npx secretcarousel signup my-project --local # Key saved to .sc/config.json (add .sc/ to .gitignore)
Paste this into your project's .clinerules file.
# SecretCarousel Integration This project uses SecretCarousel for encrypted secret management. CLI: npx secretcarousel (or sc if global). Key in .sc/config.json. ## Storing secrets sc secret "NAME" "VALUE" [-t database-credentials|api-key|certificate|custom] ## Retrieving secrets sc secret show <secretId> ## Listing secrets sc secrets [--type X] [--env X] ## Updating sc secret update <secretId> --value "new-value" ## Rotating (Pro plan) sc rotate <secretId> ## Sharing (Pro plan) sc share <secretId> --hours 1 --views 1 ## Export .env sc env pull --env production > .env ## Audit sc audit [--action secret.read] [--limit 20] ## Patterns - Use sc --json for structured output - Secret IDs: secret-uuid (auto-generated) - AES-256-GCM encrypted at rest - Config: .sc/config.json
# Store a credential sc secret "DATABASE_URL" "postgres://user:pass@host/db" -t database-credentials # Retrieve sc secret show sec-abc123 # Export for deployment sc env pull --env production > .env # Rotate after incident sc rotate sec-abc123
© 2026 Tyga.Cloud Ltd. All rights reserved.