Commands

Command	Description
`login`	Authenticate to Mellon with device flow
`logout`	Remove saved auth for a scope
`me`	Show current user info
`setup`	Save default project and env for the current directory (stored in ~/.mellon, not in the repo)
`status`	Explain configuration and test scoped access without exposing values
`discover`	Find Doppler and Mellon consumers without reading secret values
`run`	Run a command with secrets injected
`secrets`	List secrets for the configured env
`secrets get`	Get a secret value
`secrets set`	Set a secret value (omit value for a masked prompt or stdin)
`secrets delete`	Delete a secret
`secrets download`	Download all secrets in a chosen format
`sync cloudflare`	Review and synchronize secrets with a Cloudflare Worker
`keys rotate`	Re-encrypt stored ciphertext with the active key
`backup`	Create, verify, and restore encrypted D1 backups
`GitHub Actions`	Use a scoped, expiring Mellon token in GitHub Actions
`Xcode Cloud`	Use Mellon from an Xcode Cloud post-clone script
`orgs`	List organizations
`orgs create`	Create an organization
`projects`	List projects across organizations
`projects create`	Create a project
`projects get`	Get project details
`projects update`	Update a project
`projects delete`	Delete a project
`environments`	List envs for the configured project
`environments create`	Create an env
`environments get`	Get env details by id or slug
`environments rename`	Rename an env by id or slug
`environments delete`	Delete an env by id or slug
`self-host`	Deploy Mellon to your own Cloudflare account (npm package only)

Global Options

Option	Description
`-h, --help`	Display this message
`-v, --version`	Display version number
`--token [token]`	Auth token override
`--api-url [url]`	API URL override (default: https://mellon.jsj.sh)