QUICKSTARTTutorial

Run the first command

You will authenticate the CLI, confirm connectivity, and list the Vault credentials you can access.

1. Sign in

bash

$ movitera login
✓ Logged in as token movitera-cli @ macbook (expires 2026-08-21).
Stored in macOS Keychain.
Default team set to Acme IT.

Browser login opens the Movitera screen. Approve the authorization; the PAT does not appear in the URL or browser history.

2. Confirm the connection

bash

$ movitera whoami
API        https://api.movitera.com
Auth       stored token
Team       Acme IT (team_123)
Status     connected (2 teams)

3. List available ENV_BUNDLE credentials

bash

$ movitera creds list --env
NAME          KIND        TAGS           ID
myapp-prod    env bundle  backend,prod   cred_env_prod
myapp-dev     env bundle  backend,dev    cred_env_dev

The list shows metadata: name, kind, tags, and id. Secret values are never rendered.

4. Run a command with secrets

bash

$ movitera run -c myapp-prod -- npm start
> myapp@1.0.0 start
> node server.js

listening on http://localhost:3000

The CLI fetches the dotenv body from Vault, converts it to environment variables, and replaces the current process with your command.

Inject secrets Command reference

1. Sign in

2. Confirm the connection

3. List available ENV_BUNDLE credentials

4. Run a command with secrets

Next