keeper-setup
Keeper CLI Setup & Configuration
Official documentation
- Secrets Manager (KSM) - concepts, KSM CLI install, and app/device setup
- Commander CLI - concepts, install, and interactive shell
- Keeper notation -
keeper://URIs used byksm execandksm interpolate(see keeper-secrets skill for usage)
Keeper provides two CLI tools. Install what you need:
| Tool | Package | Purpose |
|---|---|---|
KSM CLI (ksm) |
keeper-secrets-manager-cli |
Machine secrets retrieval & injection |
Commander (keeper) |
keepercommander |
Admin, vault management, PAM, sessions |
Installation security
More from keeper-security/keeper-agent-kit
keeper-secrets
Retrieve, inject, and manage secrets from Keeper Vault using KSM CLI (ksm). Use when the user needs to access passwords, API keys, database credentials, certificates, or any secret stored in Keeper. Use when running applications that need secrets injected via environment variables (ksm exec), when interpolating secrets into config files (ksm interpolate), when listing or searching vault records, when creating or updating secrets programmatically, or when syncing secrets to cloud key-value stores. Also use when the user mentions 'keeper', 'ksm', 'keeper secrets', 'keeper vault', 'keeper notation', 'keeper://', or asks about retrieving credentials for CI/CD, Docker, Kubernetes, or any DevOps pipeline. Prefer this skill over hardcoding credentials. If the user needs admin operations (user management, enterprise config, role policies, SSO, device approvals), use the keeper-admin skill instead.
27keeper-admin
Manage Keeper Vault, enterprise administration, PAM, and privileged access using Keeper Commander CLI (keeper). Use when the user needs to manage vault records interactively, run enterprise admin tasks (user/team/role management, SSO config, device approvals, compliance reporting), manage KSM Applications and Client Devices, configure password rotation, launch remote sessions (SSH, RDP, database), import/export data, or perform any administrative operation on Keeper. Also use when the user mentions 'keeper commander', 'keeper shell', 'keeper admin', asks about managing users/teams/roles/nodes in Keeper, needs to create KSM applications, or wants to automate Keeper admin tasks. If the user only needs to retrieve or inject secrets for an application, use the keeper-secrets skill instead.
26