Search the docs

Search guides, API endpoints and MCP tools.

Manage product secrets and production vault keys

clanker vault secret generate

Generate a value on the server for each selected environment

clanker vault secret generate [options]

Arguments

This command takes no arguments.

Options

--workspace <slug>string

Workspace slug or id (default: the linked workspace)

--product <slug>stringRequired

Product (repeatable)

Defaults to
--env <slug>stringRequired

Environment (repeatable)

Defaults to
--name <name>stringRequired

The secret's name, such as SESSION_SECRET

--type <type>stringRequired

token, password, uuid or ed25519

--bytes <count>string

token: random bytes, 16 to 512 (default 32)

--encoding <encoding>string

token: hex, base64 or base64url (default hex)

--length <count>string

password: characters, 8 to 256 (default 32)

--no-lowercaseflag

password: leave out a-z

--no-uppercaseflag

password: leave out A-Z

--no-digitsflag

password: leave out 0-9

--no-symbolsflag

password: leave out -_.~+=

--showflag

Print each generated value once

--request-id <id>string

Reuse this ID when retrying a write

Examples
clanker vault secret generate --product storefront --env staging --env production --name SESSION_SECRET --type token