Pull environment variables

curl --fail-with-body --silent --show-error --get \ "https://api.getkato.io/cli/v1/env/pull" \ -H "Authorization: Bearer $KATO_API_KEY" \ --data-urlencode "recordId=$KATO_RECORD_ID" \ --data-urlencode "env=development"

Read the decrypted variables and dotenv representation for one environment. Use a developer access key. This endpoint is part of the CLI API, with its own response format and rate limit. Required scopes: env:read. The key owner must still be a workspace owner or administrator. Missing scope or admin access returns 403; an unavailable or differently pinned project returns 404. An unknown environment returns 404. The response contains plaintext secrets; keep it out of logs and browser clients. The example only contains a non-secret label.

Parameters

string

required

Nonempty project record ID. Must match the key’s project pin, if set.

string

required

1–40 characters; letters, numbers, hyphens, or underscores, starting with a letter or number. Names are trimmed.

Response

200 — Top-level environment, snapshot version, vars string map, and serialized dotenv string.

{
  "environment": "development",
  "version": 1,
  "vars": {
    "PUBLIC_LABEL": "Northlane"
  },
  "dotenv": "PUBLIC_LABEL=Northlane\n"
}

curl --fail-with-body --silent --show-error --get \
  "https://api.getkato.io/cli/v1/env/pull" \
  -H "Authorization: Bearer $KATO_API_KEY" \
  --data-urlencode "recordId=$KATO_RECORD_ID" \
  --data-urlencode "env=development"

API Reference

Developer identity

Objects and records

Tasks

Webhooks

CLI API

Raycast API

Raycast identity and discovery

Raycast tasks

Raycast records

Raycast meetings and activity

Raycast notifications

OAuth

Pull environment variables

Parameters

Response

​Parameters

​Response

Parameters

Response