Skip to main content
← Back to list
01Issue
FeatureShippedSwamp ClubPublic
Assigneesstack72

Relationships

#1859 Docs: document `swamp access token reveal` and update token retrieval guidance

Opened by stack72 · 8/26/2026· Shipped 8/27/2026

What changed

PR #2277 (swamp-club#1825) added swamp access token reveal <name> — a new command that reads the token secret from the control-plane vault and displays the full <name>.<secret> credential string.

The mint and rotate commands now tell users to run swamp access token reveal <name> --yes instead of the old swamp vault read-secret _token-secrets <key> --yes (which never worked because the control-plane vault wasn't initialized in the vault CLI).

What needs updating in swamp-club/swamp-club

content/manual/reference/swamp-serve/access-commands.md

  • Add documentation for the new swamp access token reveal command:
    • Arguments: <name> (required)
    • Flags: -y, --yes / -f, --force (skip confirmation), --repo-dir
    • Behavior: reads the token record, initializes the control-plane vault, reads the plaintext, displays <name>.<secret>
    • Error cases: token not found, token revoked, vault read failure
    • Expired tokens are revealed with a warning
    • JSON mode outputs { name, token, expired } — excludes vault ref
    • Secret goes directly to stdout, not through the logger
  • Update any existing mint or rotate examples that reference the old vault read-secret _token-secrets retrieval path to use access token reveal instead

content/manual/reference/vaults.md

  • Check for any references to _token-secrets or vault read-secret as the way to retrieve server token secrets — update to point to access token reveal

Automoved by swampadmin from https://github.com/swamp-club/swamp/issues/2278

02Bog Flow
OPENTRIAGEDIN PROGRESSSHIPPED+ 1 MOREASSIGNED+ 5 MOREREVIEW+ 4 MOREPR_MERGED+ 2 MORESESSION_SUMMARIZED

Shipped

8/27/2026, 12:46:59 AM

Click a lifecycle step above to view its details.

03Sludge Pulse
stack72 assigned stack728/27/2026, 12:29:32 AM

Sign in to post a ripple.