dashboard
CommandOpen the subscribetome dashboard to view and manage API keys and subscriptions
@matterhornsoInstall CommandSecurity
Command
/revoke
Mark a subscribetome-managed API key as revoked
> /plugin marketplace add matterhornso/subscribetome> /plugin install stm@subscribetome
Command definition
revoke.mddescription: Mark a subscribetome-managed API key as revoked
Ask the user which key to revoke — the tool and label. If they are unsure, run `stm list` to show the available placeholders.
Then run `stm revoke <tool> <label>` in a Bash command.
Tell the user this sets a `revoked` status flag in subscribetome (the PreToolUse hook will refuse to inject a revoked key). It does **not** call the provider's API to rotate or delete the key — do that in the provider's own dashboard.
Ships withstm
Your API keys in the OS keychain. Your AI coding agent uses them — without ever seeing them. The model writes {{stm:openai:default}}. The real key is swapped in at the moment the command runs.
Stars on GitHub
Momentum
- stars in total
- 4
Other commands on stm.
@matterhornsoInstall Commandimport
CommandScan .env files for existing API keys to import into subscribetome
@matterhornsoInstall Commandinventory
CommandShow the subscribetome inventory — API keys, subscriptions, and monthly spend
@matterhornsoInstall Commandteams
CommandCreate an STM team or join one, guided end-to-end via stm teams quickstart
@matterhornsoInstall CommandMore commands from other plugins.
audit
CommandAudit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…
@trailofbitsInstall Commandagt-check
CommandCheck text against AGT prompt-injection, context-poisoning, and MCP threat detectors.
@microsoftInstall Commandarsenal
CommandShow which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…
@awarexoneInstall Command