---
name: agentuity-cli-cloud-secret-pull
description: Pull secrets from cloud to local .env file. Requires authentication. Use for Agentuity cloud platform operations
version: "0.1.2"
license: Apache-2.0
allowed-tools: "Bash(agentuity:*)"
metadata:
  command: "agentuity cloud secret pull"
  tags: "slow requires-auth requires-project"
---

# Cloud Secret Pull

Pull secrets from cloud to local .env file

## Prerequisites

- Authenticated with `agentuity auth login`
- Project context required (run from project directory or use `--project-id`)
- cloud deploy

## Usage

```bash
agentuity cloud secret pull [options]
```

## Options

| Option | Type | Required | Default | Description |
|--------|------|----------|---------|-------------|
| `--force` | boolean | No | `false` | overwrite local values with cloud values |

## Examples

Run pull command:

```bash
bunx @agentuity/cli secret pull
```

Use force option:

```bash
bunx @agentuity/cli secret pull --force
```

## Output

Returns JSON object:

```json
{
  "success": "boolean",
  "pulled": "number",
  "path": "string",
  "force": "boolean"
}
```

| Field | Type | Description |
|-------|------|-------------|
| `success` | boolean | Whether pull succeeded |
| `pulled` | number | Number of items pulled |
| `path` | string | Local file path where secrets were saved |
| `force` | boolean | Whether force mode was used |