monkeysSecret
A secret is what a key holds: the API key, token or password itself. It is the only thing monkeys exists to keep, and the only thing it never prints.
A secret is what a key holds: the API key, token or password itself. It is the
only thing monkeys exists to keep, and the only thing it never prints.
Where it goes
A secret enters the vault through set, typed at a prompt, piped in or read
from the clipboard, and leaves it in exactly one way: into the environment of
a command that run starts. What that command prints comes back through
monkeys, which replaces the secret with [redacted KEY] on the way.
Replacing one
Storing a secret under a key you already stored replaces the old one, and nothing says so. The previous secret is gone; the vault keeps no history to recover it from.
Reading one
No monkeys command prints a secret. To read one in full, open the vault
itself, Keychain Access on macOS or the desktop's secret browser on Linux,
where the decision to look at one is yours and deliberate.
Key
A key is the name of an environment variable, the KEY of KEY=secret. It is what a program reads, what a .monkeys file lists, and what every command takes on…
Vault
The vault is the operating system's own secret store, and monkeys keeps nothing anywhere else. There is no file of monkeys's own to back up, leak or forget,…