Skip to content

fnox get ​

  • Usage: fnox get [--base64-decode] [--refresh] <KEY>

Print the resolved value of one secret

Resolves KEY for the active profile through its provider, a lease backend, or the daemon cache, and prints the value to stdout followed by a newline. A secret with as_file = true prints the path of a temporary file that holds the value instead.

When the secret cannot be resolved, if_missing decides the outcome: with warn or ignore, fnox prints nothing to stdout and exits 0. To check that secrets resolve without printing them, use fnox check.

Arguments ​

  • <KEY> — Secret to print

Flags ​

  • --base64-decode — Decode a base64-encoded value before printing it
  • --refresh — Re-fetch the value from its provider instead of the daemon cache, and cache it
  • -h --help — Print help

Examples ​

Print a secret

sh
fnox get DATABASE_URL

Read from another profile

sh
fnox -P staging get DATABASE_URL

Decode a base64 value into a file

sh
fnox get TLS_CERT --base64-decode > cert.pem

See also ​

MIT LicenseCopyright © 2026jdx.dev