winget install --id KeeperSecurity.CommanderAbout Keeper Commander
Keeper Commander is a command-line and SDK interface to Keeper® Password Manager. Commander can be used to access and control your Keeper vault, perform administrative functions (such as end-user onboarding and data import/export), launch remote sessions, rotate passwords, eliminate hardcoded passwords and more. Keeper Commander is an open source project with contributions from Keeper's engineering team and partners.
What's new in 18.0.10
What's New in 18.0.10 New Features - Vault-style passphrase generation — Added passphrase generation to Commander CLI. - PAM action service map — New pam action service map command to map users to discovered Windows services. - PAM connection AI toggles — pam connection ai now supports --enabled/-e and --session-terminate/-st flags to configure resource-level AI settings. Improvements - PAM graph migration — Service discovery migrated from the user service graph to the PAM graph. Bug Fixes - Fixed KEEPER_SSL_CERT_FILE being ignored for SSL verification in REST, PAM, tunnel HTTP, and DAG connections. - Fixed nsf-mkdir to correctly resolve existing parent folder UIDs in paths instead of treating them as literal names. - Fixed non-owners being able to attach PAM rotation scripts; uploads are now flagged with is_script for server-side owner enforcement. - Fixed OS type detection by lowercasing the value before comparing against "windows". - Fixed mc_transfer_perform to respect the treeKeyTypeId property.
Version history
| Version | Updated | Notes |
|---|---|---|
| 18.0.10 | What's New in 18.0.10 New Features - Vault-style passphrase generation — Added passphrase generation to Commander CLI. - PAM action service map — New pam action service map command to map users to discovered Windows serv... | |
| 18.0.9 | Unknown | New Features - KeeperAI PAM Connection Settings (pam connection ai) New command to manage KeeperAI settings on PAM resources and remote browser instances. Supports show, set, unset, and remove operations for AI configura... |
| 18.0.8 | Unknown | Keeper Commander 18.0.8 PAM: Expanded Database Protocol Support - pam connection edit and pam import now support seven additional database protocols: mariadb, oracle, mongodb, redis, elasticsearch, clickhouse, and dynamo... |
| 18.0.7 | Unknown | Keeper Commander release v18.0.7 Bug fixes - kcm-import --output filename tighten file permissions |
| 18.0.6 | Unknown | Keeper Commander 18.0.6 New Features - Universal Secret Sync — New commands to configure and run synchronization of secrets across networks: - pam universal-sync-config (alias usc) — manage sync configurations with list/... |
| 18.0.5 | Unknown | Keeper Commander 18.0.5 ✨ New Features - Universal Secret Sync — new commands for syncing secrets across providers. - Cloud secret import to Nested Shared Folders — import cloud secrets directly into Nested Shared Folder... |
| 18.0.4 | Unknown | Keeper Commander 18.0.4 Security - Service mode hardening: Restricted cross-API-key usage on GET requests and blocked command injection via line breaks in service-mode payloads. New features - share-folder --roe / list-s... |
| 18.0.3 | Unknown | Keeper Commander release version v18.0.3 Highlights - Added nhi-report for Non-Human Identity reporting. - Added OS-native keychain storage for Commander configuration. - Renamed KeeperDrive CLI commands from the kd-* pr... |
| 18.0.2 | Unknown | Keeper Commander 18.0.2 Features & Enhancements - connect / ssh: confirmation prompt before shell command execution - pam search --device — new flag to look up PAM Gateways and the PAM Configurations bound to them - shar... |
| 18.0.1 | Unknown | Keeper Commander 18.0.1 Breaking changes - Dropped Python 3.7 support. Minimum supported Python is now 3.8 New commands & features SSO / Identity - New sso-cloud command suite for managing Keeper SSO Connect Cloud config... |
| 18.0.0 | Unknown | Keeper Commander 18.0.0 — Release Notes This is a major release headlined by KeeperDrive — a brand-new command suite for managing folders, records, sharing, and permissions through the Keeper API. It also adds KCM/Guacam... |
| 17.2.15 | Unknown | Keeper Commander 17.2.15 — Release Notes PAM bug fixes - Added proper error message when Workflow blocks connection - Increased WebRTC connect timeout to accomodate for ephemeral accounts - Added JIT / Ephemeral suport t... |
| 17.2.13 | Unknown | Keeper Commander release version v17.2.13 PAM Fixes - Fix rotation settings linking to PAM Configuration instead of PAM Directory when directory_uid is provided - Skip email delivery gracefully when email.config_name is... |
| 17.2.12 | Unknown | Release Notes — v17.2.12 New Features - Bulk Legacy Record Conversion — Added convert-all command for converting legacy records in bulk - Secrets Manager Client Revoke — Added command for quick device revocation in secre... |
| 17.2.11 | Unknown | Release Notes — v17.2.11 (April 1, 2026) New Features - Atlassian Onboarding: Added AD user creation via Gateway with support for username templates. - Domain Alias Commands — New commands for managing domain aliases. -... |
| 17.2.10 | Unknown | Keeper Commander release version v17.2.10 New Features - CSPM Integration Type — Added CSPM as a supported integration type for public-api-key - pam action debug command — New pam action debug command that dumps all reco... |
| 17.2.9 | Unknown | Keeper Commander release version v17.2.9 New Features - Implemented teams-app-setup command for Microsoft Teams integration - Added launch_credentials support to pam project import and pam project extend commands - Added... |
| 17.2.8 | Unknown | Keeper Commander release version v17.2.8 New Features - Added --aging flag to compliance report with record aging data (created, last_modified, last_rotation, last_pw_change) - Added --username and --team filters to all... |
| 17.2.7 | Unknown | Keeper Commander release version v17.2.7 New Features - Added JIT (Just-In-Time) and AI features to PAM project import Improvements - Improved Gateway lookup - when missing or not shared, fallback to pam/get_configuratio... |
| 17.2.6 | Unknown | Keeper Commander release version v17.2.6 New Features - supershell: claude-code-like interface for executing commands - CLI search: token-based matching by default (tokens can appear in any order) - Service mode: --self-... |