docs/commands
Command reference
Every command in the binary. Run foostash <cmd> --help for flags.
Auth & server
| Command | Does |
|---|
| foostash register | Register the first admin for an org |
| foostash login | Re-verify and refresh local identity |
| foostash join | Consume an invite token |
| foostash serve | Run the HTTP API server (self-host) |
| foostash mcp | Run the local MCP server for coding agents |
Projects & environments
| Command | Does |
|---|
| foostash init | Scaffold .foostash.yaml |
| foostash envs | List / create / clone / delete environments |
Secrets
| Command | Does |
|---|
| foostash set | Set one or more keys |
| foostash get | Read one key |
| foostash delete | Remove a key |
| foostash keys | List keys in an env |
| foostash pull | Dump an env as dotenv to stdout |
| foostash run | Run a command with secrets injected |
| foostash diff | Compare two envs |
| foostash history | Version history for a key |
| foostash rollback | Restore a prior version |
| foostash import | Load from .env or a .foostash bundle |
| foostash export | Write a password-encrypted bundle |
Shared vault
| Command | Does |
|---|
| foostash vault list | List org-wide vault secrets |
| foostash vault get | Read a vault secret |
| foostash vault set | Set vault secrets (admin-only) |
| foostash vault delete | Delete a vault secret (admin-only) |
| foostash vault history | Version history for a vault key |
| foostash vault rollback | Roll a vault key back (admin-only) |
Deployment targets
| Command | Does |
|---|
| foostash target docker render | Render secrets as a docker env file |
| foostash target kubernetes render|apply | Render or apply a K8s Secret |
| foostash target github-actions render|push | Render or push GitHub Actions secrets |
Admin
| Command | Does |
|---|
| foostash admin invite | Create an invite token |
| foostash admin users list | List users in the org |
| foostash admin users role | Change a user's role |
| foostash admin users revoke | Revoke a user |
| foostash admin audit | Query the audit log |