tetherCLI
GitHub ↗

SAME TEAM. SHARED SETUP.

Share the setup.
Keep your keys.

Give your team the configs and project secrets they need. Tether connects their machines through your team’s Git repository.

Set up your team See the security model ↗

Git backed · age encryption · Individual keys

ONE PROJECT. SHARED CONTEXT.
Your team repo.env.age · Encrypted for recipients
Your machine Your private key.env
Teammate’s machine Their private key.env
Each recipient uses their own key to decrypt the file.
BUILT AROUND YOUR WORKFLOW
Your Git repoYour projectsYour recipients

CONNECT YOUR TEAM

From a shared repo
to a shared environment.

  1. 1

    Set up the team.

    Connect a team repository and create your age identity. Add each teammate’s public key as a recipient.

    Terminal
    tether team setup
  2. 2

    Map your organization.

    Associate your GitHub organization with the team. Tether uses that mapping to find the right team.

    Terminal
    tether team orgs add github.com/your-org
  3. 3

    Share a project file.

    Run this command from your project. Tether encrypts the file for the configured recipients.

    Terminal
    tether team projects add .env

MATCH THE PROJECT, NOT THE FOLDER

Different paths.
The same project.

Tether matches projects by Git remote URL. Your teammate can keep their checkout in a different directory.

PROJECT SECRET SHARING
  1. Select a project file.env in your local checkout
  2. Encrypt for the teamPublic age keys select recipients
  3. Apply on their machineMatch the project’s Git remote
Recipients need repository access and a matching private age key.

One key per person.

Each teammate has their own age identity. Add their public key so they can decrypt shared secrets.

Personal settings stay personal.

Keep personal configuration alongside your team setup.

Work with collaborators.

Use collab secrets for project sharing based on GitHub collaborators. Enable the feature for projects that need it.

Read about collab secrets ↗

THE COMMANDS YOU NEED

Manage your team
from your terminal.

Team setup

tether team setup
Set up your team repository.
tether team status
Check your team configuration.

Organizations

tether team orgs add <ORG>
Map an organization to your team.
tether team orgs list
List mapped organizations.
tether team orgs remove <ORG>
Remove an organization mapping.

Project secrets

tether team projects add .env
Share a project secret file.
tether team projects list
List shared project files.
tether team projects migrate
Move personal project secrets to your team.
tether team projects purge-personal
Remove personal copies after migration.

Recipient keys

tether team secrets add-recipient <KEY>
Add a teammate’s public age key.
tether team secrets list-recipients
List the recipient keys.
tether team secrets remove-recipient <NAME>
Remove a named recipient.

Team secrets

tether team secrets set <NAME>
Set a named team secret.
tether team secrets get <NAME>
Read a named team secret.

READY TO CONNECT

Give your team
a common starting point.

Start with team setup. Choose what to share.

Read the team guide