CLI Reference
CLI Commands Overview
Complete index and syntax reference for all MayFly command-line operations.
Command Syntax
MayFly provides both the primary binary mayfly and the convenient short alias mf:
# 1. Direct process execution (recommended)
mf <command> [arguments...]
mayfly <command> [arguments...]
# 2. Vault and repository management commands
mf <subcommand> [flags] [arguments...]
mayfly <subcommand> [flags] [arguments...]
# 3. Interactive TUI dashboard
mf
mf currentCommand Matrix
| Command | Shorthand | Description | Primary Flags |
|---|---|---|---|
mf <command> | mf npm start | Spawns target binary with in-memory secrets injection | -- separator |
mf init | mf init | Initializes an encrypted vault for the current directory inode | -path <DIR> |
mf set | mf set KEY [VAL] | Stores or updates an encrypted variable in the project vault | Ephemeral alt-screen |
mf get | mf get KEY | Retrieves decrypted secret value (stdout or clipboard) | --clip / -c |
mf list | mf list | Lists all registered secret keys for the current project | --json |
mf delete | mf delete KEY | Removes a secret key from the encrypted vault | Key name |
mf import | mf import [.env] | Bulk-imports .env into vault with optional plaintext deletion | --delete, --no-delete |
mf rotate-password | mf rotate-password | Re-encrypts all project vaults with a new master password | Interactive prompts |
mf scan | mf scan [dir] | Scans source tree for plaintext secrets and API keys | --depth, --fix |
mf audit | mf audit | Views chronological access and modification event log | Log history |
mf audit verify | mf audit verify | Cryptographically verifies SHA-256 Merkle hash chain | Integrity check |
mf backup | mf backup [file] | Exports an encrypted snapshot of vault and registered projects | Snapshot file path |
mf restore | mf restore <file> | Restores project keys and vault data from snapshot | Snapshot file path |
mf migrate | mf migrate <old> <new> | Updates project identity when a repository directory moves | Source & target path |
mf update | mf update | Checks for newer releases and interactively prompts to update | --check, --yes |
mf completion | mf completion <shell> | Generates shell autocompletion script (bash, zsh, fish) | Shell format |
mf uninstall | mf uninstall | Cleanly removes binaries, cleans PATH, and wipes vault | -u / --uninstall |
mf | mf / mf current | Launches zero-dependency full-screen terminal UI dashboard | Project grid |
Global Options
The following flags and environment variables are supported across operations:
-h,--help: Display command usage and syntax.-v,--version: Output current MayFly binary version and build metadata.MAYFLY_VAULT_PASSWORD: Environment variable to provide the master vault password non-interactively in automated headless CI environments (GitHub Actions, GitLab CI, Buildkite).
Next Steps
- Vault Management Commands:
init,set,get,list,delete,import,rotate-password. - Process Execution:
mf runand direct execution syntax. - Credential Scanner: Scanning for accidental plaintext leaks.
- Universal Language Guides: Using MayFly with your favorite programming language.