{
  "name": "sigil",
  "tagline": "Secrets an agent can use without ever seeing them.",
  "description": "Local credential CLI over the macOS Keychain or Linux Secret Service. Inject-at-fire: a secret reaches one child process's environment, never argv, history, the transcript, or a file. Approval-gated reads (Touch ID on macOS, terminal y/N on Linux) unless a name is deliberately armed.",
  "homepage": "https://sigil-cli.daystra.com/",
  "install": {
    "shell": "curl -fsSL https://sigil-cli.daystra.com/install.sh | sh",
    "platforms": [
      "darwin-arm64",
      "linux-x86_64 (glibc>=2.28)"
    ],
    "update": {
      "darwin": "sigil update",
      "linux": "re-run install.sh"
    },
    "verification": {
      "darwin": "sha256 + Developer ID code signature (team RY99V66U84)",
      "linux": {
        "sha256": true,
        "signature": "ed25519",
        "manifest_key": "sig_linux_x86_64",
        "pubkey": "MCowBQYDK2VwAyEAy7f/9iJ7NtWX0FMWRXwEWEXpFky2CE2sCWo6sBNN4kU=",
        "verifier": "openssl pkeyutl -verify -rawin (OpenSSL 3 verified; 1.1.1 untested)",
        "skip_env": "SIGIL_INSTALL_SKIP_SIGNATURE=1"
      }
    }
  },
  "mcp": null,
  "commands": [
    "set",
    "get",
    "list",
    "run",
    "config arm-unattended",
    "config disarm",
    "config can-resolve",
    "config status",
    "export",
    "import",
    "reindex",
    "update",
    "anchor init",
    "anchor status",
    "owner confirm",
    "owner list",
    "owner revoke"
  ],
  "exit_codes": {
    "0": "ok",
    "1": "error or refusal (message names the fix)",
    "7": "OWNER_MISMATCH",
    "8": "OWNER_CHANGED"
  },
  "links": {
    "llms": "https://sigil-cli.daystra.com/llms.txt",
    "manifest": "https://sigil-cli.daystra.com/latest.txt",
    "installer": "https://sigil-cli.daystra.com/install.sh"
  },
  "publisher": {
    "name": "Cybercussion Interactive, LLC",
    "url": "https://cybercussion.com"
  }
}