cgm
Store and load shell credentials securely
Security
Usage reference
Try an example
cgm env OPENAI_KEYSyntax
cgm <command> [credential ...]- Availability
- Available when secret-tool and a Secret Service provider are available
- Dependencies
- secret-tool and a Secret Service provider
Some subcommands change stored data or packages. Check the selected operation before running.
Adapts to terminal
Features & Examples
Examples appear only where they add useful detail.
set <name>Securely store or replace one credential
listList saved names without retrieving values
statusShow saved names and current-shell loaded state
checkCheck Secret Service availability without retrieving values
env <name ...>Load selected credentials into this shell
Examplecgm env OPENAI_KEYenv --allLoad every saved credential into this shell
unset <name ...>Remove selected variables from this shell
delete <name ...>Delete stored credentials and unset them here
helpShow this help text
| Usage | Description | Example |
|---|---|---|
| Securely store or replace one credential | No example documented |
| List saved names without retrieving values | No example documented |
| Show saved names and current-shell loaded state | No example documented |
| Check Secret Service availability without retrieving values | No example documented |
| Load selected credentials into this shell | |
| Load every saved credential into this shell | No example documented |
| Remove selected variables from this shell | No example documented |
| Delete stored credentials and unset them here | No example documented |
| Show this help text | No example documented |
Notes
- Secrets are stored by Linux Secret Service through secret-tool.
- cgm list and completion use credential names only; values stay hidden.
- cgm env changes this shell and child processes started afterward.
- Other open shells and already-running processes are not changed.
- cgm delete returns nonzero if a current-shell variable cannot be unset.