secrets
ak secrets delete
Delete a stored secret
Use ak secrets delete for the operation described below. The command help records its arguments, effects, and options.
Command contract
Delete a stored secret
Synopsis
Permanently delete <ref>'s value from the active backend and remove its entry from the index. Deleting a ref that does not exist is an error, not a no-op — delete is not idempotent, so scripts can detect a stale/duplicate delete. Use it when a credential is rotated out of use, revoked, or no longer needed.
Effects: Removes the value from the active backend and the ref's entry from ~/.agentkit/secrets/index.json. Irreversible.
Exit status: 0 success 2 invalid flags or arguments 3 ref has no stored value 5 backend or index failure
ak secrets delete <ref> [flags]Examples
ak secrets delete ${REF}
ak secrets delete ${REF} --json # machine-readable confirmationOptions
--backend string Storage backend: keychain (default), file (age-encrypted vault), or memory (dev/test; values and its index are throwaway)
-h, --help help for delete
--json Emit machine-readable JSON (implies --no-interactive)
--no-interactive Disable interactive prompts (CI-safe)
-q, --quiet Suppress non-error output on stderr
--unlock-with-recovery Open the file backend's vault with a recovery private key and set a new passphrase
-V, --verbose Extra diagnostic output on stderr (loses to --quiet)
-y, --yes Assume yes for all promptsSEE ALSO
- ak secrets - Manage named secret values (API keys, tokens)