Human-readable secrets for Bitwarden Secrets Manager.
Replace cryptic UUIDs with intuitive paths like myapp/prod/db-password.
uv tool install vaultunerOr run without installing:
uvx vaultuner listConfigure once:
vaultuner config set access-token <your-token>
vaultuner config set organization-id <your-org-id>Credentials come from Bitwarden Secrets Manager.
Bitwarden Secrets Manager addresses every secret by UUID. Looking one up means digging through the dashboard or memorising hex strings. vaultuner sits on top and lets you address secrets by readable paths organised by project and environment, so retrieving a secret feels like reading a config file:
# Bitwarden CLI
bws secret get 550e8400-e29b-41d4-a716-446655440000
# vaultuner
vaultuner get myapp/prod/db-password- Path-based naming —
project/env/secretinstead of UUIDs. - Environment isolation — keep dev, staging, and prod secrets separate.
.envsync — export to and import from.envfiles seamlessly.- Secret metadata — attach descriptions via
--description. - Soft delete — recover accidentally deleted secrets.
- Keychain storage — credentials secured in the macOS Keychain.
# Create secrets
vaultuner set myapp/api-key "sk-abc123"
vaultuner set myapp/prod/db-password "hunter2"
# Retrieve
vaultuner get myapp/prod/db-password -v
# List everything
vaultuner list
# Export for local dev
vaultuner export -p myapp -e dev -o .env| Command | Description |
|---|---|
list |
List secrets with project/env filtering |
get |
Retrieve a secret value |
set |
Create or update a secret |
delete |
Soft-delete (recoverable) |
restore |
Recover a deleted secret |
export |
Export to .env file |
import |
Import from .env file |
projects |
List all projects |
config |
Manage stored credentials |
PROJECT/SECRET # Project-level secret
PROJECT/ENV/SECRET # Environment-specific secret
Examples:
myapp/api-key # Shared across environments
myapp/prod/db-password # Production only
myapp/dev/db-password # Development only
- Python 3.11+
- macOS (Keychain integration)
- Bitwarden Secrets Manager account
Full docs at vaultuner.alltuner.com.
vaultuner is an open source project built by David Poblador i Garcia through All Tuner Labs.
If this project was useful to you, consider supporting its development.
Built by David Poblador i Garcia with the support of All Tuner Labs.
Made with ❤️ in Poblenou, Barcelona.
