# HLOS Documentation: CLI Reference

> Source: https://hlos.ai/docs/cli
> Last updated: 2026-01-10
> Context: HLOS is a financial control plane for AI agents. Agents never receive credentials directly.

# CLI Reference

Complete command reference for @hlos/cli.

The HLOS CLI is your primary interface for managing secrets from the terminal. Install it globally with `npm install -g @hlos/cli`.

## Global Options

- `--help, -h` — Show help for any command
- `--version, -v` — Show CLI version
- `--space, -s` — Override the active space for this command
- `--quiet, -q` — Suppress non-essential output

## Authentication

### hlos login

Authenticate with your HLOS account via browser OAuth.

**Flags:**
- `--no-browser` — Print URL instead of opening browser

### hlos logout

Clear stored credentials from your system keychain.

### hlos whoami

Display the currently authenticated user email and account info.

## Spaces

Organize secrets by project or environment.

### hlos spaces list

List all spaces you have access to.

### hlos spaces create \<name\>

Create a new space for organizing secrets.

```bash
$ hlos spaces create my-saas-app
```

**Flags:**
- `--description, -d` — Add a description for the space

### hlos spaces use \<name\>

Set the active space for subsequent commands.

```bash
$ hlos spaces use production
```

### hlos spaces delete \<name\>

Delete a space and all its secrets (requires confirmation).

## Secrets

Manage secrets within the active space.

### hlos secrets list

List all secrets in the current space (names only, not values).

**Flags:**
- `--provider, -p` — Filter by provider (openai, stripe, etc.)
- `--json` — Output as JSON

### hlos secrets set \<key\>

Set a secret. Prompts for value interactively (secure input).

```bash
$ hlos secrets set OPENAI_API_KEY
```

### hlos secrets set \<key\> \<value\>

Set a secret with inline value (use with caution in scripts).

### hlos secrets get \<key\>

Retrieve and display a secret value.

```bash
$ hlos secrets get DATABASE_URL
```

### hlos secrets delete \<key\>

Delete a secret from the current space.

## Sync & Run

Synchronize secrets across environments and platforms.

### hlos push

Push local .env file contents to your HLOS vault.

**Flags:**
- `--file, -f` — Specify a different .env file
- `--merge` — Merge with existing secrets instead of replacing

### hlos pull

Pull secrets from HLOS to a local .env.local file.

**Flags:**
- `--output, -o` — Specify output filename

### hlos run -- \<command\>

Run a command with secrets injected into the environment.

```bash
$ hlos run -- npm start
```

### hlos sync vercel

Sync secrets to your Vercel project environment variables.

**Flags:**
- `--env` — Target environment (production, preview, development)

### hlos sync railway

Sync secrets to your Railway project.

### hlos sync netlify

Sync secrets to your Netlify site.

## Health & Audit

Monitor secret health and access patterns.

### hlos health

Check health status of secrets (rotation, exposure, etc.).

**Flags:**
- `--severity` — Filter by severity (low, medium, high, critical)

### hlos audit

View recent access logs for secrets.