Overview

defenseclaw keys — Inspect and manage DefenseClaw API keys.

Reference

defenseclaw keys [OPTIONS]

Subcommand	Description
`check`	Exit 0 when all REQUIRED keys are set, non-zero otherwise.
`fill-missing`	Interactively prompt for every REQUIRED-but-unset credential.
`list`	List every credential DefenseClaw knows about.
`set`	Set a credential and persist it to `~/.defenseclaw/.env`.

Inspect and manage DefenseClaw API keys

Exit 0 when all REQUIRED keys are set, non-zero otherwise

Exit 0 when all REQUIRED keys are set, non-zero otherwise.

Intended for CI/preflight hooks. Produces a terse summary on stdout and nothing else.

Interactively prompt for every REQUIRED-but-unset credential

Options

Flag	Type	Default	Env var	Required	Description
`--yes`	boolean	—	—	no	Skip the confirmation prompt.

List every credential DefenseClaw knows about

Options

Flag	Type	Default	Env var	Required	Description
`--json`	boolean	—	—	no	Emit machine-readable JSON instead of a table.
`--show-values`	boolean	—	—	no	Show masked value previews (still truncated).
`--missing-only`	boolean	—	—	no	Only show credentials that are required by the current config but unset.

Set a credential and persist it to ~/.defenseclaw/.env

defenseclaw keys set <ENV_NAME>

Arguments

Name	Type	Arity	Required
`env_name`	text	1	yes

Options

Flag	Type	Default	Env var	Required	Description
`--value`	text	—	—	no	Value to store; prompts if omitted.

defenseclaw keys list --json
defenseclaw keys list --missing-only

--missing-only is useful in setup scripts that only care about unresolved providers.

defenseclaw keys set OPENAI_API_KEY --value "$OPENAI_API_KEY"
defenseclaw keys fill-missing --yes
defenseclaw keys check

Prefer environment-backed values in shared machines and CI.