登录

Commander

Keeper-SecurityMIT活跃维护

Keeper 密码管理平台的 Python 命令行工具和 SDK，可批量管理保险库、导入导出数据、生成报表并执行管理操作。

Keeper Commander is a python-based CLI and SDK interface to the Keeper Security platform. Provides administrative controls, reporting, import/export and vault management.

v18.1.9发布于 2026-11-03 03:09 UTC260star91fork同步于 2026-11-10 06:05 UTC
密码管理命令行工具保险库管理密钥管理Python SDK
对比 GitHub 官网clipasswordpassword-managersecretssecurity-tools

怎么上手

从 README 代码块原样提取，可能是其中一种安装方式
原文 
pip install keepercommander
git clone https://github.com/Keeper-Security/Commander
pip install -r requirements.txt
pip install -e .
硬件要求

README 没有说明硬件要求。

下载：源码 zip·GitHub Releases（安装包）本站不镜像安装包

项目说明

这个项目的说明还在生成中，先参考下面「最近发版」和 README。

最近发版

5 个版本v18.1.9
全部 release
  1. v18.1.9Release 18.1.9最新正式版2026-11-03 · 2026-11-03 03:09 UTC

    Security

    • The ldap3 library disables TLS certificate validation when created with default parameters, so an attacker on the network could impersonate an Active Directory server over LDAPS and capture bind credentials or feed forged directory data to pedm scim and SCIM sync. Certificates are now validated by default; --ad-ca-cert trusts a custom CA and --insecure explicitly opts out.
    • Service Mode filesystem bypasses: Closed bypasses in Service Mode command verification that let a request reach filesystem operations the service is meant to restrict, allowing reads or writes outside the permitted scope.
    • download-attachment path traversal: A shared folder with an attacker-chosen name (e.g. containing ..) could make download-attachment write files outside the chosen output directory. Resolved paths are now checked to stay within the output directory.

    Features

    • Notification Center: New notification command (list, view, read, unread, approve, deny). Handles device approvals, share requests and PAM workflow access requests; data is processed from sync-down.
    • Tailscale Funnel: Tailscale Funnel is a new Service Mode tunnel option alongside ngrok and Cloudflare, including a Docker sidecar setup, Windows installation and advertise tags.
    • Self-managed Keeper deployments: Commander now uses the server key of a self-managed deployment instead of Keeper's built-in key 7, which previously caused every request to fail with key_id -1. The key can be set with server <host> --key-id --public-key, KEEPER_SERVER_PUBLIC_KEY/KEEPER_SERVER_PUBLIC_KEY_ID, or fetched (fingerprint-verified, HTTPS only) from the deployment; server <host> --insecure skips the certificate check for that host.
    • Biometric login: Added roaming FIDO2 passkey support.
    • USS: Dry-run support for USS syncs, showing parsed results before the actual sync is confirmed; new objectStorageBucket USS config setting.
    • pam rbi edit gains --allow-supply-user and --clipboard-buffer-size.
    • drive_redirection_path is now supported in PAM import RDP settings.
    • import/export: New --keepass-password and --keepass-key-file options for KeePass import, and password/key file arguments for import and export (none omits them).
    • CyberArk PAM import can now create users.
    • download membership gains timeout and API page-size limit arguments.
    • pam action saas config --list/--info supports --format json.

    Improvements

    • Generated and manually entered passwords and passphrases are validated against domain-specific policies selected by record URL, across record add/edit, including v3 and NSF records and Unicode passphrases.
    • pam project extend derives resources/users folders and adds folder options.
    • pam project extend uses set_launch_credentials for existing resources and re-asserts the admin credential when no launch credentials are set; corrected --keeper-proxy help text (SSH is supported).
    • pam project export returns parsed JSON in Service Mode.
    • Reporting permission failures are surfaced early and clearly.
    • Invalid KEEPER_RATE_LIMIT values now produce clear errors, and rate limiting no longer fails silently in Service Mode.
    • nsf-mkdir/nsf-rmdir/nsf-rndir return correct Service Mode HTTP status and message field.
    • Clearer wording for accept-transfer results, and a corrected denial message for the deny-workflow encryption change.
    • Added a KeeperAI-closed banner to pam tunnel start.

    Fixes

    • accept-transfer always failed because of an incorrect check on the API result.
    • Fixed incomplete NSF folder access rows (batch size 100 → 20) and denied access entries displaying as grants in tree -v, nsf-get and share reports.
    • Fixed AttributeErrors that masked real failures in record-add and ls.
    • Fixed checkOutBy not populating in single-user check-out mode.
    • Fixed KEPM delete policy accepting unresolved UIDs.
    • Fixed ECDSA key reg
  2. v18.1.8Release 18.1.82026-10-08 · 2026-10-08 19:30 UTC
    查看更新说明

    Features

    • PAM Cloud Azure credential generation can now authenticate via an interactive Microsoft Entra sign-in (OAuth 2.0 authorization code flow with PKCE over a local loopback redirect), so Azure credentials can be generated without ever passing a password or MFA code through Commander.
    • Export and the pam action debug dump command now support Service Mode JSON output, allowing these commands to be driven and consumed programmatically through Service Mode.

    Fixes

    • Fixed inheritance handling when revoking a parent folder's access on nested share folders: converting an inherited grant into a direct one now adds a new recipient-encrypted folder key instead of updating the inherited row, and explicit denials of inherited access are now tracked so a child folder no longer loses its access state or folder key when the parent grant is revoked.
  3. v18.1.7Release 18.1.72026-10-07 · 2026-10-07 16:22 UTC
    查看更新说明

    Security

    • KC-1471: Prevent newline injection in connect command prompts. Control characters are now escaped and shell comments handled, closing a path where an operator with Can Edit on a shared record could hide commands in a confirmation prompt and exfiltrate device credentials without being noticed.
    • KC-1462: Validate record ownership in the audit-log command. Only operator-owned records are now eligible as an export destination, preventing an attacker from hijacking an export by sharing a malicious record with a matching title. Also removes TLS verification bypass from Splunk exports.

    Features

    • KC-1442: Add Classic-to-NSF conversion command, with negative-flow tests and support for skipping records that are already nested-share.
    • DR-1324: Generate and deliver tokens.

    Improvements

    • KC-1461: Limit NSF folder depth on import, with a sibling-flatten fallback and a structure report when limits are exceeded.
    • Improve LoadRecordTypes command: continues past invalid custom record types instead of aborting, with more verbose and color-coded logging.
    • Add filtering while printing inherited and denied-access permissions for folders and records.

    Fixes

    • Fix folder properties mutation bug in the NSF share-folder command.
    • Fix service mode response status.
    • Fix SaaS field check incorrectly flagging non-required blank values.
  4. v18.1.6Release 18.1.62026-09-26 · 2026-09-26 02:46 UTC
    查看更新说明

    Commander 18.1.6

    This release adds new KeeperPAM proxy and import capabilities, strengthens Service Mode and enterprise permission checks, and includes several reliability fixes.

    Highlights

    • Added KeeperRDP and KeeperSSH Proxy support for PAM tunnels, alongside KeeperDB Proxy. pam tunnel start --proxy selects the applicable proxy for the resource; --credential can override the linked credential for RDP/SSH proxy tunnels when the resource permits user-supplied credentials. Proxy-ready messages now appear when the tunnel is connected.

    • Added pam tunnel edit --keeper-proxy on|off|default to configure the applicable proxy for supported resource protocols. Improved tunnel discovery and cleanup across processes, proxy diagnostics, and handling of ephemeral JIT credentials.

    • Added Nested Shared Folder support to CyberArk PAM project imports (--nsf), including imported folders, records, rotation, and PAM configuration. Imports can also match an existing shared folder by UID.

    • Added HashiCorp Vault PAM configuration support through pam config new/edit --environment hashicorp, including Vault URL, token, namespace, mount path, and HashiCorp ID options.

    Security and access controls

    • Service Mode now blocks access to its own configuration records and protects integration configuration records, including SailPoint configuration. App-setup commands are restricted to their respective allowlists, and variable expansion can no longer bypass the SailPoint command guard.

    • Delegated administrators cannot grant or revoke sensitive enterprise privileges that they do not hold. PAM gateway creation and removal now enforce the allow_pam_gateway policy, including through legacy commands.

    • Sensitive typed-record values are masked in record-add and record-update debug and Service Mode API logs.

    Fixes and improvements

    • Fixed stale-revision errors when editing PAM rotation by refreshing the cache first, and restored the gateway name in pam rotation info.
    • Fixed Service Mode background operation and tunneling on Windows.
    • Fixed truncated application_info and account_info fields in JSON/CSV output from epm approval list.
    • Fixed an incorrect “Supported columns” warning for base fields in enterprise-info.
    • Improved enterprise root-node rename and display-name handling, including root-node visibility.
    • Added an optional path-aware mode for keeper-dag edges so edges on different paths are not inadvertently deactivated.

    Full changelog: v18.1.5...18.1.6 (https://github.com/Keeper-Security/Commander/compare/v18.1.5...v18.1.6)

  5. v18.1.5Release 18.1.52026-09-08 · 2026-09-08 22:04 UTC
    查看更新说明

    Commander 18.1.5

    Highlights

    • Added nsf-move to move records and folders within Nested Shared Folders (NSF), including moves to the NSF root.
    • Enhanced CyberArk imports to retain more account and platform metadata, including custom platform properties and LogonDomain-aware usernames.
    • Added support for configuring multiple Google Chat approval spaces.

    Enhancements

    • SaaS PAM plugins can now use a record configuration-field type. Commander validates that the referenced record exists and is in a shared folder available to the gateway.
    • Added input validation for SaaS PAM URL, integer, number, and boolean configuration fields.
    • Active Directory SCIM imports support prefixing --group with + to select that group's direct subgroups.
    • Improved Active Directory SCIM diagnostics for unresolved groups and skipped directory entries.

    Fixes

    • Fixed Nested Shared Folder rename operations when a folder is referenced by name or path.
    • Fixed Service Mode FILEDATA substitutions for Windows paths.

    Security and compatibility

    • Hardened Service Mode by blocking the -- argument separator and legacy commands that could bypass Service Mode restrictions.
    • Added shell-specific validation for SSH, PsPasswd, and Unix password rotation inputs to prevent command injection.

    Full Changelog: https://github.com/Keeper-Security/Commander/compare/v18.1.4...v18.1.5

用户点评

登录用户的真实使用记录，可按版本和硬件筛选
共 0 条

    还没有人点评。第一个说出真实体验的人最有价值。

    README 原文

    未翻译
    在 GitHub 打开

    Keeper Commander Header

    Keeper Commander

    About Keeper Commander

    Keeper Commander is a command-line and terminal UI interface to Keeper® Password Manager and KeeperPAM. Commander can be used to access and control your Keeper vault, perform administrative actions (managing users, teams, roles, SSO, privileged access resources, device approvals, data import/export), launch sessions, rotate passwords, integrate with developer tools, eliminate hardcoded passwords, run as a REST service and more. Keeper Commander is an open source project with contributions from Keeper's engineering team, customers and partners.

    Windows and macOS Binaries

    See the Releases

    Linux / Python using PIP

    python3 -m venv keeper-env
source keeper-env/bin/activate
pip install keepercommander

    Running from Source

    git clone https://github.com/Keeper-Security/Commander
cd Commander
python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txt
pip install -e .
pip install -e '.[email]'

    Starting Commander

    For a list of all available commands:

    keeper help

    To launch the interactive command shell:

    keeper shell

    or for a full terminal vault user interface

    keeper supershell

    Once logged in, check out the this-device command to set up persistent login sessions, logout timer and 2FA frequency. Also check out the biometric register command to enable biometric authentication on supported platforms.

    Documentation

    About Keeper Security

    Keeper Security is the creator of KeeperPAM - the zero-trust and zero-knowledge privileged access management ("PAM") platform for securing and managing access to your critical infrastructure.

    相关项目

    同分类里 star 最高的项目
    对比全部 →
    keepassxc
    keepassxreboot·C++

    跨平台开源密码管理器，兼容 KeePass 数据库格式，把账号密码集中加密保管，支持 YubiKey 等硬件密钥，本地存储不上云。

    密码管理器+4密码管理
    29889+482.0k2.8.02026-11-08 08:46 UTC
    clients
    bitwarden·TypeScript

    Bitwarden 官方客户端集合，覆盖网页、浏览器扩展、桌面和命令行，用一套 TypeScript 代码统一管理密码与凭据。

    密码管理+4密码管理
    14191+182.2kdesktop-v2026.10.42026-11-10 00:19 UTC
    keeweb
    keeweb·HTML

    跨平台免费密码管理器，兼容 KeePass 数据库格式，用浏览器或桌面端统一管理密码，免去多设备同步和格式迁移的麻烦。

    密码管理器+4密码管理
    13036+21.2kv1.18.72026-05-08 03:29 UTC
    KeePassDX
    Kunzisoft·Kotlin

    Android 上的轻量级 KeePass 密码管理器，可在单一加密文件中编辑凭据，并安全地自动填充表单，支持指纹和 Passkey。

    密码管理器+4密码管理
    7647+114324.5.82026-11-01 09:37 UTC