diff --git a/cli/cmd/smcli/main.go b/cli/cmd/smcli/main.go
index ed36dd5..af447ac 100644
--- a/cli/cmd/smcli/main.go
+++ b/cli/cmd/smcli/main.go
@@ -251,6 +251,15 @@ func cmdEnv(name string) error {
 		v := strings.ReplaceAll(f.Value, "'", "'\\''")
 		fmt.Printf("export %s='%s'\n", f.Name, v)
 	}
+	if len(pc.URIs) > 0 {
+		fmt.Printf("export URI='%s'\n", pc.URIs[0])
+	}
+	if pc.Login.Username != "" {
+		fmt.Printf("export USERNAME='%s'\n", pc.Login.Username)
+	}
+	if pc.Login.Password != "" {
+		fmt.Printf("export PASSWORD='%s'\n", pc.Login.Password)
+	}
 	return nil
 }
 
@@ -537,3 +546,5 @@ func cmdConvert(name string) error {
 	fmt.Printf("converted: %s (user=%v pass=%v uris=%d fields=%d)\n", name, username != "", password != "", len(uris), len(rest))
 	return nil
 }
+
+func urisOf(pc *PlainCipher) []string { return pc.URIs }
diff --git a/cli/cmd/smcli/model.go b/cli/cmd/smcli/model.go
index ea46012..d1a7e6e 100644
--- a/cli/cmd/smcli/model.go
+++ b/cli/cmd/smcli/model.go
@@ -90,7 +90,8 @@ type PlainCipher struct {
 		Username string `json:"username"`
 		Password string `json:"password"`
 	} `json:"login"`
-	FolderID string `json:"folderId"`
+	FolderID string   `json:"folderId"`
+	URIs     []string `json:"uris"`
 }
 
 // DecryptCipher converts a raw sync cipher into PlainCipher.
@@ -132,6 +133,18 @@ func DecryptCipher(userKey []byte, raw []byte) (*PlainCipher, error) {
 		if cr.Login.Password != nil {
 			pc.Login.Password, _ = decStr(userKey, ck, cr.Login.Password)
 		}
+		for _, u := range cr.Login.URIs {
+			var um map[string]any
+			um, _ = u.(map[string]any)
+			if um != nil {
+				if us, ok := um["uri"].(string); ok {
+					v, err := decStr(userKey, ck, &us)
+					if err == nil {
+						pc.URIs = append(pc.URIs, v)
+					}
+				}
+			}
+		}
 	}
 	return pc, nil
 }
diff --git a/cli/smcli b/cli/smcli
index cf1af7c..80e42cc 100755
Binary files a/cli/smcli and b/cli/smcli differ
diff --git a/docker/compose.yaml b/docker/compose.yaml
index 36b4499..8c1b13f 100644
--- a/docker/compose.yaml
+++ b/docker/compose.yaml
@@ -10,13 +10,13 @@
 name: knel-secretsmanager
 services:
   smcli:
-    image: git.knownelement.com/knel/knel-secretsmanager-cli@sha256:a0482ad7ebbfed58e0662fa99fc1ac9416d2542058db7df02907a9fe7f9e21e7
+    image: git.knownelement.com/knel/knel-secretsmanager-cli@sha256:554de767afbf80ca2db772edda350200b741c211495dda3fde96c6496a7a13cc
     container_name: ukrrs-secretsmgr-cli
     restart: unless-stopped
     entrypoint: ["sleep", "infinity"]
     init: true
     env_file:
-      - path: /home/reachableceo/.creds/smcli.env
+      - path: ./smcli.env
         required: false
     environment:
       SM_STATE_DIR: /data/state
diff --git a/docker/smcli.env b/docker/smcli.env
new file mode 100644
index 0000000..0e7a966
--- /dev/null
+++ b/docker/smcli.env
@@ -0,0 +1,3 @@
+SM_SERVER=https://pwvault.turnsys.com
+SM_EMAIL=coo@turnsys.com
+SM_STATE_DIR=/data/state