Check token path capabilities

Show effective ACL verbs the current token has on a path; fast policy debugging

vault token capabilities database/creds/readonly
tool
vault31 commands
tags
vaultsecuritytroubleshootingobservability

More vault commands

  • Revoke a dynamic lease
    vault lease revoke -prefix database/creds/readonly

    Revoke all leases under a prefix to kill leaked dynamic DB creds instantly

  • Login with token
    vault login <token>

    Authenticate to Vault using a token

  • Login with AppRole
    vault write auth/approle/login role_id=<role> secret_id=<secret>

    Authenticate via AppRole auth method

  • KV get secret
    vault kv get -mount=secret path/to/secret

    Read a KV v2 secret; add -format=json for scripting

  • KV put secret
    vault kv put -mount=secret path/to/secret key=value

    Write or update a KV v2 secret

all 31 vault commands