StoreEnv Beta
Documentation

Install the CLI, learn the model and look up every command.

CLI reference

storeenv verify

Verify a teammate's public key by comparing fingerprints, or show the key log head.

Global flags
zsh
$ cd ~/code/my-app
$ storeenv verify @bea SE:5008-741E-0507
  @bea   SE:5008-741E-0507   key version 4, logged 2026-11-15
  Verified @bea  SE:5008-741E-0507
  Pending key shares for @bea complete on your next command, or now with: storeenv share
$ storeenv verify [login] [fingerprint]

Arguments

<login>@username.
<fingerprint>The fingerprint they read to you (SE:XXXX-XXXX-XXXX).

Flags

More examples

$ cd ~/code/bea-my-app
$ storeenv verify @ada SE:0221-C9D2-646E
  @ada   SE:0221-C9D2-646E   key version 0, logged 2026-11-15
  Verified @ada  SE:0221-C9D2-646E
  Pending key shares for @ada complete on your next command, or now with: storeenv share
 
$ cd ~/code/my-app
$ storeenv verify --head
  Key log     LOG:7DE6B13E50AA3BAD
  Size        8 entries
  Root        tXS1JBlJ5pj6Iy3/ddP4kQKMMEuLIsT6kPt8qXVkrNY=
  If a teammate's CLI shows a different root at the same size, the server is showing you different logs.

Other uses

$0 verify @neha SE:1A2B-3C4D-5E6FRecord @neha's key as verified after she read you her fingerprint
$0 verify @nehaShow @neha's fingerprint and type the one she gives you
$0 verify --headPrint the key log head so two people can compare it

Good to know

  • Compare fingerprints over a channel you trust (in person, a call). storeenv whoami shows your own.
  • --head prints the key log head; compare it with a teammate's to detect a server showing you a different log.

Related commands

storeenv truststoreenv keysstoreenv sharestoreenv doctor

Global flags

--project <value>Project as <namespace/name> or its id (default: .storeenv.json, then this repository's remotes).
--env <value>Environment name.
--jsonMachine readable output.
--yes, -ySkip confirmations.
--colorColoured output (--no-color to turn off). Default: true.
--verboseShow debug details.
--api <value>API base URL of a self-hosted StoreEnv.
--trust-writer <value>Trust a writer for this run: @login=SE:XXXX-XXXX-XXXX.
--allow-unsignedpull and diff: use values that aren't signed by a trusted writer, after you confirm on a terminal (or with STOREENV_ALLOW_UNSIGNED=1). Never applies to run or copy.
Previous keys Next request