CLI Reference

$ qring set OPENAI_API_KEY "sk-..." --project --env dev --tags ai,backend

$ qring set DB_PASSWORD --ttl 3600 --rotation-format password --requires-approval

$ qring set LEGACY_TOKEN --clear-tags

$ qring get OPENAI_API_KEY --project --env prod

$ qring delete LEGACY_TOKEN --project

$ qring has OPENAI_API_KEY --quiet && echo configured

$ qring list --project --tag payments --filter "STRIPE_*" --show-decay

$ qring inspect OPENAI_API_KEY --project

$ qring export --format env --project --env prod --keys OPENAI_API_KEY,STRIPE_KEY

$ qring import .env --project --skip-existing

$ qring check --project-path .

$ qring validate OPENAI_API_KEY --project

$ qring validate --all --manifest --project

$ qring exec --project --profile restricted --keys OPENAI_API_KEY -- npm test

$ qring run -- pnpm dev

$ qring run --dry-run -- pnpm dev

$ qring run --env prod --env-file .env.prod -- ./deploy.sh

$ qring setup cursor

$ qring setup kiro --dry-run

$ qring push github --repo you/your-app

$ qring push vercel --vercel-env production,preview

$ qring push fly --app my-app

$ qring push railway --service api --railway-env production

$ qring push netlify --site 1234-abcd

$ qring push github --keys DATABASE_URL,API_KEY --dry-run

$ qring scan src --fix --project

$ qring lint src/config.ts src/client.ts --fix --project

$ qring context --project --json

$ qring remember deployment_note "rotate Stripe key after release"

$ qring recall deployment_note

$ qring recall

$ qring forget deployment_note

$ qring approve OPENAI_API_KEY --project --for 1800 --reason "temporary agent read"

$ qring approvals

$ qring hook:install --project-path .

$ qring hook:uninstall --project-path .

$ qring hook:run

$ qring wizard stripe --keys STRIPE_KEY,STRIPE_WEBHOOK_SECRET --provider stripe --tags payments,prod

$ qring analyze --project

$ qring env --project-path .

$ qring generate --format api-key --prefix sk- --save OPENAI_API_KEY --project

$ qring entangle API_KEY API_KEY_BACKUP --source-project . --target-project ../worker

$ qring disentangle API_KEY API_KEY_BACKUP --source-project . --target-project ../worker

$ qring tunnel create "temp-token" --ttl 300 --max-reads 1

$ qring tunnel read tun_abc123

$ qring tunnel destroy tun_abc123

$ qring tunnel list

$ qring teleport pack --project --keys OPENAI_API_KEY,STRIPE_KEY > bundle.qring

$ qring teleport pack --keys API_KEY --to qring1a3F… --to qring1Zz9… > bundle.qring

$ qring teleport unpack "$(cat bundle.qring)" --project --dry-run

$ qring teleport keygen

$ qring teleport keygen >> team-recipients.txt

$ qring teleport identity

$ qring promote DATABASE_URL --from staging --to prod

$ qring promote DATABASE_URL --from staging --to prod --force --json

$ qring diff staging prod

$ qring diff dev staging --keys API_KEY,DATABASE_URL --json

$ qring rotate:due

$ qring rotate:due --all --json

$ qring audit --key OPENAI_API_KEY --action read --limit 50

$ qring audit:verify

$ qring audit:export --since 2026-03-01 --format json -o audit.json

$ qring health --project

$ qring hook add --key DB_PASSWORD --action write,rotate --exec "pnpm restart:api"

$ qring hook add --tag payments --url https://hooks.example.com/qring --action rotate

$ qring hook list

$ qring hook remove hk_abc123

$ qring hook enable hk_abc123

$ qring hook disable hk_abc123

$ qring hook test hk_abc123

$ qring env:generate --project-path . --env prod -o .env

$ qring status --port 9876 --no-open

$ qring agent --once --auto-rotate --project-path .,../worker

$ qring rotate OPENAI_API_KEY --project --provider openai

$ qring ci:validate --project --json

$ qring policy --json

$ qring doctor

$ qring doctor --json

$ qring completion zsh > ~/.zsh/completions/_qring

$ qring canary plant AWS_SECRET_KEY --format aws

$ qring canary plant GHP_BACKUP_TOKEN --format github-pat

$ qring canary plant AWS_SECRET_ACCESS_KEY --format aws-secret --push github --repo you/your-app

$ qring canary plant GITHUB_TOKEN --format github --project

$ qring canary list

$ qring canary list --json

$ qring canary disarm AWS_SECRET_KEY

$ qring canary alert add --discord https://discord.com/api/webhooks/…

$ qring canary alert add --ntfy https://ntfy.sh/my-canaries

$ qring canary alert list

$ qring canary alert test

$ qring mcp wrap -- npx some-mcp-server

$ qring mcp wrap --url https://mcp.example.com/mcp --auth-secret EXAMPLE_MCP_TOKEN

$ qring mcp wrap --label "browser tools" -- npx @some/browser-mcp

$ qring mcp approve github_merge_pr --for 900 --reason "release 1.4"

$ qring mcp approve github_merge_pr --revoke

$ qring mcp approvals

$ qring audit:sessions

$ qring audit:sessions --agent "Cursor@1.2.3" --since 7d --verbose

$ qring audit:sessions --json