murk-cli 0.10.2

Encrypted secrets manager for developers — one file, age encryption, git-friendly
Documentation
.ie \n(.g .ds Aq \(aq
.el .ds Aq '
.TH connect 1  "connect " 
.SH NAME
connect \- Wire `murk mcp` into an AI editor\*(Aqs MCP config, minting a scoped grant. No CLIENT auto\-detects installed editors; give one (claude, cursor, vscode, zed, gemini, omp, codex) to target it
.SH SYNOPSIS
\fBmurk agent connect\fR <\fB\-\-only\fR> [\fB\-\-allow\-tag\fR] [\fB\-\-allow\-exec\fR] [\fB\-\-ttl\fR] [\fB\-\-name\fR] [\fB\-\-vault\fR] [\fB\-h\fR|\fB\-\-help\fR] [\fICLIENT\fR] 
.SH DESCRIPTION
Wire `murk mcp` into an AI editor\*(Aqs MCP config, minting a scoped grant. No CLIENT auto\-detects installed editors; give one (claude, cursor, vscode, zed, gemini, omp, codex) to target it
.SH OPTIONS
.TP
\fB\-\-only\fR \fI<ONLY>\fR
Keys the agent may read (required — fails closed)
.TP
\fB\-\-allow\-tag\fR \fI<ALLOW_TAG>\fR
Set the agent allow\-list to these tags before granting (repeatable)
.TP
\fB\-\-allow\-exec\fR
Also expose `murk agent exec` to the agent (adds \-\-allow\-exec)
.TP
\fB\-\-ttl\fR \fI<TTL>\fR [default: 2h]
Grant time to live, e.g. 30m, 2h, 7d (advisory — see `agent revoke`)
.TP
\fB\-\-name\fR \fI<NAME>\fR [default: mcp]
Grant name (used to disconnect/revoke it later)
.TP
\fB\-\-vault\fR \fI<VAULT>\fR [default: .murk]
Vault filename
.TP
\fB\-h\fR, \fB\-\-help\fR
Print help
.TP
[\fICLIENT\fR]
Editor to configure; omit to auto\-detect (claude, cursor, vscode, zed, gemini, omp, codex)