KMS
The `hanzo kms` commands.
Also for this capability: API · CLI · MCP · SDKs
Secret custody: your org's secrets sealed at rest, plus threshold signing.
hanzo kms configEvery command takes --json for the raw response and --help for its own flags. Sign in once with hanzo auth login; the commands below use that session, and the org they act in is the one it carries.
| Command | What it does |
|---|---|
hanzo kms config | Returns the runtime configuration for the KMS console. |
hanzo kms health | Reports whether this broker can actually serve secrets. |
auth
| Command | What it does |
|---|---|
hanzo kms auth login | Exchanges a machine credential for an IAM bearer token. |
secrets
| Command | What it does |
|---|---|
hanzo kms secrets create | Stores or replaces one secret in your org. |
hanzo kms secrets get | Lists the secrets your org holds, without their values. |
How is this guide?