sops
CLISecrets management tool supporting YAML, JSON, and .env files.
Encrypt secrets in YAML/JSON/ENV files with AWS KMS, GCP KMS, or age
Recipes
Curated from documentation and usage. Percentages are estimates, not measurements.
Encrypt a YAML secrets file
sops --encrypt secrets.yaml > secrets.enc.yamlCommon failures (1)
- No master keys foundConfigure .sops.yaml with your key ARN/fingerprint
Edit encrypted file in-place
sops secrets.enc.yamlDecrypt to stdout
sops --decrypt secrets.enc.yamlInstall
Homebrew
brew install sopsAgent notes
- When to use
- Managing encrypted secrets in git repositories
Use from an agent
curl -s https://clihub.com/api/tools/sops | jq '.agentHints.provenRecipes[] | {task, command, verified}'Or call get_tool with slug sops on the MCP server at https://clihub.com/mcp.