lizard secrets

Manage a project’s or service’s secrets (environment variables).

Usage

lizard secrets <subcommand> [args] [flags]

Subcommands

lizard secrets set <K=V>...

Set one or more secrets (variadic). Default scope is the service; --global targets the project.

lizard secrets list

List secrets in scope.

lizard secrets delete <K>...

Delete one or more secrets (variadic, alias rm). It asks for confirmation; without a TTY, pass -y.

lizard secrets import

Import KEY=value lines from stdin. It skips blank lines and lines starting with #. Quotes stay part of the value; remove any export prefixes first.

Examples

Set secrets on the linked service

lizard secrets set DATABASE_URL=postgres://… LOG_LEVEL=info
lizard secrets set API_KEY=sk_live_… --service api

Set a project-wide secret

lizard secrets set NODE_ENV=production --global

List and reveal secrets

lizard secrets list
lizard secrets list --show

Delete secrets

lizard secrets delete OLD_KEY ANOTHER_KEY
lizard secrets delete OLD_KEY --yes   # in CI or a script

Import a .env file

lizard secrets import < .env

See also

• Variables & secrets — scoping, precedence, and build-time vs. runtime behavior
• Cross-service references — read one service’s values from another
• Troubleshooting: a secret or reference isn’t showing up
• lizard run — run a command locally with project + service secrets injected

Updated October 9, 2026