List registered vaults, whether their file exists, whether a password is stored, and whether they are unlocked.
Unlock a vault using the master password from the OS keychain. Takes only a vault name, never a password.
Lock a vault and clear its derived key from memory.
List entries (title, username, URL). Never returns passwords. Supports `query`, `category`, `folder`, `limit`.
Return a full entry including all field values (password, TOTP, etc.) and its attachment list.
Return the password and, if present, the current TOTP code of an entry.
Generate the current TOTP / 2FA one-time code for an entry, with seconds until it rotates.
List an entry's file attachments (name, size, MIME).
Decrypt an attachment; writes it to disk and returns the path (or base64 inline for small files).
List the vaults that use Enpass folder sync and whether the copy in the sync folder is newer.
Create an entry, including custom fields; sensitive values are encrypted the way Enpass does it.
Delete an entry, or move it to the trash, leaving the tombstone Enpass uses so the deletion syncs.
+1 more tools listed on main page