remove

Deletes one secret from the vault. Inside a project the key is the project's; @ reaches one with no profile from there.

monkeys remove [@profile] <KEY>

Deletes one secret from the vault. Inside a project the key is the project's; @ reaches one with no profile from there:

monkeys remove OPENROUTER_API_KEY
monkeys remove @ TYPESAFE_API_KEY

The .monkeys file is not touched: a project still lists the key, and doctor reports it missing until someone stores a secret for it again.

set

Reads a secret and stores it under the key. On a terminal it prompts, and what you paste is not echoed.

run

Runs the command with the named secrets in its environment, and nowhere else. Nothing in the line holds a secret, so nothing you write can spill one.