Documentation

Install the CLI, learn the model and look up every command.

CLI reference

storeenv keys

List, verify or forget teammates' public keys; set up this device's signing key (signing-setup).

Global flags
zsh
$ cd ~/code/my-app
$ storeenv keys list
Your key SE:0221-C9D2-646E
Member Fingerprint Status Key version Last checked
@bea SE:5008-741E-0507 verified 4 2026-11-15
$ storeenv keys [action] [login] [fingerprint]

Arguments

<action>list teammates' keys, verify (or trust) one by fingerprint, forget one, or set up or show this device's signing key. One of: list, trust, verify, forget, signing-setup, signing. Default: list.
<login>@username.
<fingerprint>Their fingerprint, as they read it to you.

Good to know

  • signing-setup reads the recovery phrase from a hidden prompt, never from a flag, and keeps only this device's signing key.

Global flags

--project <value>Project as <namespace/name> or its id (default: .storeenv.json, then this repository's remotes).
--env <value>Environment name.
--jsonMachine readable output.
--yes, -ySkip confirmations.
--colorColoured output (--no-color to turn off). Default: true.
--verboseShow debug details.
--api <value>API base URL of a self-hosted StoreEnv.
--trust-writer <value>Trust a writer for this run: @login=SE:XXXX-XXXX-XXXX.
--allow-unsignedpull and diff: use values that aren't signed by a trusted writer, after you confirm on a terminal (or with STOREENV_ALLOW_UNSIGNED=1). Never applies to run or copy.