mise secrets ls

• Usage: mise secrets ls [-J --json] [--no-header]
• Aliases: list
• Effect: read-only
• Source code: src/cli/secrets/ls.rs

[experimental] List secret names from the project's secrets source

Shows names and metadata, never values. The source is declared in the project's mise.toml with [secrets.fnox]. A line describing the source goes to stderr and the table to stdout.

Columns:

• ENV: the key's env setting in the source: true, exec, false, or - if unset
• FILE: whether the value is handed over as a file
• SCOPES: where mise can grant the key: run (tasks) and exec (mise exec)
• TASKS: the tasks that request the key

A SCOPES value of - means the key cannot be granted. A file secret can be granted to tasks only, because mise exec cannot clean up the file after it hands the process over.

Flags

• -J --json — Output in JSON format
• --no-header — Do not print the table header
• -h --help — Print help

Examples

List the secret names and how each can be granted

mise secrets ls
KEY                ENV    FILE  SCOPES     TASKS   DESCRIPTION
AWS_ACCESS_KEY_ID  -      no    run, exec          (lease aws)
DATABASE_URL       true   no    run, exec  deploy  app database
GCP_SA_JSON        exec   yes   run                service account
SIGNING_KEY        false  no    -                  release signing key

Related documentation

• fnox secrets.
• mise secrets [-J --json] [--no-header] [SUBCOMMAND].
• Global flags and argument syntax.