.Net Commander CLI

Commander CLI written in .Net

Overview

The .Net Commander CLI is a command-line application built on the Keeper .NET SDK. It provides interactive and scriptable access to your Keeper vault, enabling basic record management, folder operations, sharing, enterprise administration, and more.

Building and Running Commander

Clone the Repository

git clone https://github.com/Keeper-Security/keeper-sdk-dotnet.git
cd keeper-sdk-dotnet

Build the Commander CLI

# Build Commander project only
dotnet build Commander/Commander.csproj

# Or build entire solution
dotnet build KeeperSdk.sln

Build Output Locations

• .NET 8.0: Commander/bin/Debug/net8.0/

• .NET Framework 4.7.2 (Windows): Commander/bin/Debug/net472/

Running

Run from Project

# when using linux or macos
dotnet run Commander --framework=net8.0

# when using windows
dotnet run Commander --framework=net472

Quick Start Guide

First Time Setup

1. Launch Commander - You'll see the interactive prompt:

   Not Logged In>

2. Login to Keeper:

   My Vault> login

   Enter your credentials when prompted:

   • Email address

   • Master password

   • Two-factor authentication code (if enabled)

   • Approve device if required

3. Sync Your Vault:

   My Vault> sync-down
   # or use the alias
   My Vault> d

4. List Your Records:

   My Vault> list
   # or
   My Vault> ls -l

5. Get Record Details:

   My Vault> get <record-uid-or-title>

Command Reference

These are all the commands supported by commander cli. (Link).

All commands below support --help as argument. This can be used to know about the command usage.

Authentication Commands

Command	Alias	Description
login		Login to your Keeper account
sync-down	d	Download & decrypt vault data
logout		Logout and clear session
whoami		Display current user information

Biometric Commands

Command	Alias	Description
biometric register		Register a new windows hello key
biometric verify		Verify login using biometrics
biometric list		List all biometrics linked to keeper account
biometric remove		Remove credential linked to account on current platform

Vault Navigation & Search

Command	Alias	Description
search	list	Search vault (supports regex patterns)
ls		List current folder contents
cd		Change current folder
tree		Display folder structure as tree

Record Management

Command	Alias	Description
get		Get detailed information about records, folders, teams, etc.
add-record	add	Create a new record
update-record	edit	Update existing record
rm		Remove record(s)
mv		Move record or folder to different location
record-history		Display record version history
record-type-info	rti	Get record type information
share-record		Manage record sharing permissions

Attachment Management

Command	Alias	Description
download-attachment		Download file attachment(s) from record
upload-attachment		Upload file attachment to record
delete-attachment		Delete attachment from record

Folder Management

Command	Alias	Description
mkdir		Create new folder
rmdir		Remove folder
update-dir		Update folder properties

Shared Folder Commands

Command	Alias	Description
sf-list		List all shared folders
sf-user		Manage shared folder user permissions
sf-record		Manage shared folder record permissions

Trash Management

Command	Alias	Description
trash		Manage deleted records in trash

Device Management

Command	Alias	Description
devices		Manage other devices
this-device		Manage current device settings

Enterprise Commands

Command	Alias	Description
enterprise-get-data	eget	Retrieve enterprise data
enterprise-node	en	Manage enterprise organizational nodes
enterprise-user	eu	Manage enterprise users
enterprise-team	et	Manage enterprise teams
enterprise-role	er	Manage enterprise roles
enterprise-device	ed	Manage user devices
transfer-user		Transfer user account ownership
audit-report		Run audit trail reports

Record Type Management

Command	Alias	Description
record-type-add		Add a new custom record type
record-type-update		Update existing record type
record-type-delete		Delete custom record type
load-record-types		Bulk load record types from JSON file
download-record-types		Export record types to JSON file

Security & Reporting

Command	Alias	Description
password-report		Generate comprehensive password security report
breachwatch		BreachWatch security monitoring commands

Other Commands

Command	Alias	Description
ksm		Keeper Secrets Manager commands
one-time-share		Manage one-time secure shares
import		Import records from JSON file
clear	c	Clear the screen
help	?	Display help information
quit	q	Exit Commander

Biometric Login Examples

Logging in with Biometric

Connected to "keepersecurity.com".

Username: user_email
Biometric authentication successful.
Authentication completed successfully.

Syncing...
Decrypted 62 record(s)

Register Biometric Credentials

This command creates a new passkey with currently logged in user's email. this passkey will be used for authenticating user when they want to login once we register biometric login on a device.

To use this command, you have to be logged in on CLI.

Note:

1. After executing this command, user has to register the device with Keeper to use biometric as default login method.

2. Persistent login takes precedence over biometric login, so if the device has persistent login enabled, biometric credentials are not required during login.

My Vault> biometric register
Registering Windows Hello biometric credential...
Windows Hello credential registered successfully
Provider: Windows Hello

You can now use Windows Hello to log in to Keeper.

Authenticate Biometric Credential

This command will be used to authenticate your session with credential stored. This same functionality will be used when we are trying to login using biometrics.

My Vault> biometric verify
Verifying Windows Hello authentication for '<user_email>' (purpose: vault)...
Windows Hello verification successful.

My Vault> biometric verify --purpose=login
Verifying Windows Hello authentication for '<user_email>' (purpose: login)...
Windows Hello verification successful.

List Biometric Credential

This command shows all the credentials which have been registered to the given account, along with the authenticator type, credential ID, date created and last used date

To use this command, you have to be logged in on CLI

My Vault> biometric list
Listing Windows Hello biometric credentials...


    #  Friendly Name  Provider                Created           Last Used         Status
  ---  -------------  ----------------------  ----------------  ----------------  ------
    1  Windows Hello  Windows Hello           2025-10-10 19:41  2025-10-10 19:42  Active
    2  Windows Hello  Windows Hello           2025-10-29 12:59  2025-10-29 14:14  Active

Remove Biometric Credential

This command will be used to deactivate biometric credential from Keeper, meaning the Keeper platform will stop accepting the given cryptographic credential for logging in the user.

My Vault> biometric remove
Are you sure you want to remove Windows Hello biometric credential for '<user_email>'? (y/N): y
Biometric credential removed for user: '<user_email>'