CLI Reference
The sanctum CLI is the primary interface for managing your vault, credentials, agents, and policies.
Global Options
| Flag | Description |
|---|---|
--vault-path <path> | Override default vault location (~/.sanctum/) |
--verbose / -v | Enable verbose output |
--json | Output in JSON format (for scripting) |
--version | Print version |
--help / -h | Print help |
Commands
Vault Management
| Command | Description |
|---|---|
sanctum init | Initialize a new vault |
sanctum daemon start | Start the background daemon |
sanctum daemon stop | Stop the daemon |
sanctum daemon status | Check daemon status |
Credential Operations
| Command | Description |
|---|---|
sanctum store | Store a credential |
sanctum get | Retrieve a credential |
sanctum list | List all credentials |
sanctum remove <path> | Delete a credential |
Agent Management
| Command | Description |
|---|---|
sanctum agent register | Register a new agent identity |
sanctum agent list | List registered agents |
sanctum agent remove | Deregister an agent |
Policy Management
| Command | Description |
|---|---|
sanctum policy add | Create an access policy |
sanctum policy list | List policies |
sanctum policy remove | Delete a policy |
sanctum policy simulate | Test a policy decision |
MCP & Integration
| Command | Description |
|---|---|
sanctum mcp serve | Start the MCP server (stdio) |
sanctum export | Export audit events |
Audit
| Command | Description |
|---|---|
sanctum audit log | View audit entries |
sanctum audit verify | Verify HMAC chain integrity |