Syteca ACB CLI Reference

The Syteca ACB CLI is a command-line wrapper around the ACB REST API — bundled with the ACB service install — for scripting common operations without writing HTTP calls directly. Useful for PowerShell automation, Windows Scheduled Tasks, and ad-hoc operations during deployment.

NOT AVAILABLE IN SAAS. ACB and its CLI are on-premises only.

Location

The CLI is installed alongside the ACB service:

C:\Program Files (x86)\Ekran System\Ekran System Application Credentials Broker\Console\SytecaACBConsole.exe

Both the binary name SytecaACBConsole.exe and the path containing Ekran System Application Credentials Broker are literal legacy system identifiers — preserve exactly in scripts.

General usage

SytecaACBConsole.exe <command> [parameters]

All commands require:

The ACB service URL — typically https://<hostname>/SytecaACB (or https://<hostname>/EkranACB for pre-1.2 installs).
A Refresh Token (passed as a parameter or via environment variable).

The CLI handles the Refresh Token → Access Token exchange internally — you don’t call get_access_token separately.

Commands

The CLI exposes commands that mirror the major API endpoints. Each command typically returns JSON to stdout (and a non-zero exit code on error).

Command	Mirrors API endpoint	Description
`GetSecretCredentials`	`GET /api/secrets/{id}/password`	Retrieve the password (and SSH key, if applicable) of a secret.
`GetSecret`	`GET /api/secrets/{id}`	Retrieve secret details (no password).
`AddSecret`	`POST /api/secrets`	Create a new secret.
`UpdateSecret`	`PATCH /api/secrets/{id}`	Update an existing secret.
`DeleteSecret`	`DELETE /api/secrets/{id}`	Delete a secret.
`RotateSecretPassword`	`POST /api/secrets/{id}/rotate-secret-password`	Trigger password rotation.
`ForceCheckIn`	`POST /api/secrets/{id}/force-checkin`	Force check-in for a checked-out secret.
`GetFolder`	`GET /api/folders/{id}`	Retrieve folder details.
`AddFolder`	`POST /api/folders`	Create a new folder.
`UpdateFolder`	`PATCH /api/folders/{id}`	Update an existing folder.
`DeleteFolder`	`DELETE /api/folders/{id}`	Delete a folder.
`BulkAdd`	`POST /api/bulk/add-secrets-and-folders`	Create multiple secrets and folders in one call.

Exact command-line syntax (parameter names, JSON file vs inline arguments, output format) is documented inline by the CLI itself — run SytecaACBConsole.exe <command> --help for the canonical usage. Output format and parameter shape may evolve across ACB versions.

Common scripting patterns

Retrieve a secret from a PowerShell script

$json = & 'C:\Program Files (x86)\Ekran System\Ekran System Application Credentials Broker\Console\SytecaACBConsole.exe' `
  GetSecretCredentials `
  --url "https://acb.example.com/SytecaACB" `
  --refresh-token $env:ACB_REFRESH_TOKEN `
  --secret-id 1234

$credentials = $json | ConvertFrom-Json
$user = $credentials.login
$pwd = $credentials.password

Bulk-create secrets from a Windows Scheduled Task

Schedule SytecaACBConsole.exe BulkAdd --url ... --refresh-token ... --input C:\secrets.json to run on a recurring schedule, with the JSON payload prepared by an upstream pipeline.

Never embed the Refresh Token in script files committed to source control. Use Windows credentials manager, environment variables provisioned by your secrets vault, or pull the token from a higher-tier secrets store at script start.

API reference

Underlying REST endpoints the CLI wraps.

Install

Where the CLI gets installed.

Set up user account

Generate the Refresh Token the CLI requires.

Bulk add

The most common CLI scripting target.

Overview

Application Credentials Broker

Data Connector API

SSO & LDAP

SIEM & Ticketing systems

Syteca ACB CLI Reference

Location

General usage

Commands

Common scripting patterns

Retrieve a secret from a PowerShell script

Bulk-create secrets from a Windows Scheduled Task

API reference

Install

Set up user account

Bulk add

​Location

​General usage

​Commands

​Common scripting patterns

​Retrieve a secret from a PowerShell script

​Bulk-create secrets from a Windows Scheduled Task

​Related

API reference

Install

Set up user account

Bulk add

Location

General usage

Commands

Common scripting patterns

Retrieve a secret from a PowerShell script

Bulk-create secrets from a Windows Scheduled Task

Related