Doppler CLI

Doppler CLI manages secrets and environment configuration stored in Doppler workspaces, projects, and configs from the shell. It covers both secret consumption in apps and administrative tasks like project setup, service token management, and activity log inspection.

• Read, set, delete, upload, download, and template-substitute secrets for a selected project/config, or run commands with those secrets injected into the environment.
• Create and manage projects, environments, configs, and config service tokens without switching to the web dashboard.
• Inspect workplace activity logs and import project templates so secret changes and environment structure can be audited and reproduced.

• A global --json flag and broad CRUD-style subcommands make inspect, change, and verify loops straightforward.
• Works well in scripts once a token and target config are already set, and commands like run, secrets download, and token creation map cleanly to automation.
• Login and some setup or destructive flows still lean interactive, with browser auth, confirmations, and repo-scoped config prompts to account for.

• You need a Doppler account plus auth tokens or browser login before most commands do anything useful.
• Unattended use works best when project/config scope is already configured or always passed explicitly, otherwise setup and confirmation prompts get in the way.