OverviewInstallFirst commandAuthenticateInject secretsUse in CI/CDTerminal UIExport dotenvGenerate TOTPCommandsTroubleshooting
DOCUMENTATIONOverview

Use Movitera® Vault in your terminal

movitera run injects Vault secrets into any process without creating a local .env. Use the TUI when you need to browse teams and credentials from the terminal without exposing values.

Inject secrets

Run any app without a local .env

movitera run fetches the ENV_BUNDLE from Vault and gives the keys only to the process you started.

CI/CD

Run in CI/CD without committing .env

Use movitera run in your pipeline to deliver Vault secrets to the build, test, or deploy step.

Run an app with Vault secrets

bash
$ movitera run -c myapp-prod -- npm start
> myapp@1.0.0 start
> node server.js

listening on http://localhost:3000

The process receives DATABASE_URL, REDIS_URL, tokens, and any other key in the ENV_BUNDLE. The CLI does not print or write the values.

Open the TUI when you need to explore

  • Type movitera in an interactive terminal to open the UI.
  • Search credentials by name, tag, or scope.
  • Copy ENV_BUNDLE to the clipboard or write a 0600 .env file.
  • Generate TOTP for credentials with OTPAUTH_URI.

Recommended path

  1. 1

    Install the CLI.

    bash
    $ pipx install movitera-cli
$ movitera --version
movitera 0.4.0
  2. 2

    Sign in and select a default team.

    bash
    $ movitera login
$ movitera team use <team-slug>
  3. 3

    Use an ENV_BUNDLE in a process.

    bash
    $ movitera run -c myapp-prod -- npm start
  4. 4

    Open the TUI to browse Vault.

    bash
    $ movitera

Documentation map

Read Install and First command to reach the first working result. Use the guides for recurring tasks, including CI/CD. The reference lists the available commands.

Next

Inject secretsUse the TUI