Command Line Tools
wheels deploy secrets
Secret-store integration. Five built-in adapters (1Password, Bitwarden, AWS Secrets Manager, LastPass, Doppler), exposed behind three verbs.
From the shell, use the flat aliases wheels deploy fetch-secrets, wheels deploy extract-secrets, and wheels deploy print-secrets. The nested wheels deploy secrets <verb> form is shadowed by the CLI's own top-level secrets command (the local secrets store) and prints that command's help instead (#2697, fixed by the flat aliases in #2699). The nested form remains for direct callers that bypass the shell, such as MCP.
| Verb | Shell form | Purpose |
|------|------------|---------|
| fetch | wheels deploy fetch-secrets | Pull keys from a named adapter. |
| extract | wheels deploy extract-secrets | Extract one key from a KEY=VALUE block. |
| print | wheels deploy print-secrets | Print the resolved .kamal/secrets. |
Adapter names
Section titled “Adapter names”Each adapter is registered under one or two aliases matching Kamal's CLI conventions.
| Adapter | Aliases |
|---------|---------|
| 1Password | op, 1password |
| Bitwarden | bw, bitwarden |
| AWS Secrets Manager | aws |
| LastPass | lpass, lastpass |
| Doppler | doppler |
Adapters shell out to the corresponding CLI tool on the control machine. See Secrets for setup.