keycard-credentials

keycard-credentials

Report what credentials are available in the current Keycard session.

Step 1 — Read credential info

Run:

keycard credential info --json

If the command fails, display the returned error message and stop.

Step 2 — Present the results

The command outputs one JSON object per line (JSONL): {"env_var":"VAR_NAME","resource":"https://..."}.

Present results under a ## Credentials heading as a Markdown list:

• For each entry: `ENV_VAR` → `resource-URL` (service label) where ENV_VAR is the env_var field value.
• Derive the service label from the resource hostname (e.g. api.github.com → GitHub API). Omit the label if the hostname does not map to a recognizable service.
• If the output is empty, say so and suggest keycard run -- <command> to start a hydrated session.
• Never display or request credential values — identifiers only.

Examples

Invocation:

/keycard-credentials

Sample output (credentials present):

## Credentials
- `GITHUB_TOKEN` → `https://api.github.com` (GitHub API)
- `NPM_TOKEN` → `https://registry.npmjs.org` (npm Registry)

Sample output (no credentials):

No credentials found. Start a secure session with: `keycard run -- <your-command>`.

Command failure (no configuration file):

/keycard-credentials

Sample output:

No keycard.toml found. Ensure keycard.toml exists and contains at least one [[credentials.default]] entry, then start a secure session with: `keycard run -- <your-command>`.