diff --git a/hosts/common/secrets.nix b/hosts/common/secrets.nix
index f9dda063..9e5e34ab 100644
--- a/hosts/common/secrets.nix
+++ b/hosts/common/secrets.nix
@@ -55,6 +55,9 @@
   sops.secrets."router_passwd" = {
     sopsFile = ../../secrets/universal.yaml;
   };
+  sops.secrets."transmission_passwd" = {
+    sopsFile = ../../secrets/universal.yaml;
+  };
   sops.secrets."wg_ovpnd_us_privkey" = {
     sopsFile = ../../secrets/universal.yaml;
   };
diff --git a/pkgs/sane-scripts/default.nix b/pkgs/sane-scripts/default.nix
index 2371f232..44c7e946 100644
--- a/pkgs/sane-scripts/default.nix
+++ b/pkgs/sane-scripts/default.nix
@@ -49,6 +49,7 @@ let
           sops
           sudo
           systemd
+          transmission
           util-linux
           which
         ];
@@ -89,6 +90,7 @@ let
           "cannot:${sops}/bin/sops"
           "cannot:${ssh-to-age}/bin/ssh-to-age"
           "cannot:${systemd}/bin/systemctl"
+          "cannot:${transmission}/bin/transmission-remote"
         ];
       };
     };
diff --git a/pkgs/sane-scripts/src/sane-bt-show b/pkgs/sane-scripts/src/sane-bt-show
new file mode 100755
index 00000000..62db7c85
--- /dev/null
+++ b/pkgs/sane-scripts/src/sane-bt-show
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+endpoint=https://bt.uninsane.org/transmission/rpc
+PASS=$(sudo cat /run/secrets/transmission_passwd)
+
+
+if [ "$#" -eq 0 ]; then
+  # no specific torrents we want to show, so show all of them.
+  # to query specific torrents, note the index and re-invoke this script with that.
+  transmission-remote "$endpoint" --auth "colin:$PASS" --list
+else
+  for id in $@; do
+    transmission-remote "$endpoint" --auth "colin:$PASS" -t "$id" -i
+  done
+fi
diff --git a/secrets/universal.yaml b/secrets/universal.yaml
index be5aad79..2d472a6c 100644
--- a/secrets/universal.yaml
+++ b/secrets/universal.yaml
@@ -12,6 +12,7 @@ wg_ovpnd_ukr_privkey: ENC[AES256_GCM,data:5zfhsZnBk0Kb9Nb/3igsV/fN0ZDjwTAGTKyMLM
 #ENC[AES256_GCM,data:qlF8rpSMUv6Z/YrOTp7WYs0lcpmSIi/r+gCuiw==,iv:cneNp/0av/ttQvnW4JVX9mj3261QFAzkLIzEMwiKwE8=,tag:FFsPUQBsSeImtymawY4eSg==,type:comment]
 router_passwd: ENC[AES256_GCM,data:Tya3Pd75Yu4=,iv:lqi7SavFnymL+uOQXDEzGxgikB6/ckNOBifjhyjXn1Q=,tag:HG3kf6e2g53uNUGI9FXyqQ==,type:str]
 jackett_apikey: ENC[AES256_GCM,data:2oGczau3f/w/5iCx3aft0V/t0tO5zsr5Xi/HQ1koTTo=,iv:33VPT8GYCPPJ2RUBP6yuLep9YX/VMW9Kt3MyQPmZuO0=,tag:TUIbutJKV5e3Kc9INk5VUA==,type:str]
+transmission_passwd: ENC[AES256_GCM,data:wY9kBcfJCvoPc5YXMgrFxBM=,iv:kjHK30mtcJ8O82Ve1Y4YIFVxaNIoWBWUYB2Zmm0fNMY=,tag:5HjjXP2az22PfkahoMEVwA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -90,8 +91,8 @@ sops:
             YmhsY0FaSW5oWVNJMlhUSDRCeWQ4KzAKaQp321XYtAZ98f4QMl5PxivAYm6VMF43
             wCThiQgvYAP59jvVDTZngvfWAD5PyWVVvMNbjHGvAzK5WnsTPmxlsg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-01-20T06:57:29Z"
-    mac: ENC[AES256_GCM,data:J/yLlcmlX6st/d6c8eL/6DKZiHAELb0/zj+5qOjoE2uAgTTFnojaP4ssrmt7BaLQF1MQNnvkchvuwRv+dAVTXkuYPuDWS3YriAKQIXUx9sHIEoY6Aqa37eBwUNUBuxoR6FvfOGtXrIZuS0f7hZr+ddBZgCSBBE54yeH68Va1tZk=,iv:Y/T8qykrqRVQ8eMkNH2DZa6XoGd5nL18h/2SJucVAD8=,tag:OwZfOyLc29c1bJJIA9IW3Q==,type:str]
+    lastmodified: "2023-03-22T22:24:25Z"
+    mac: ENC[AES256_GCM,data:JJiPwkMCchOAgQ8p6Xnkpov/SJWDuhIzbHCxhEkqQeiFqpTzGPb9RayWElnGyMeyPpM/CVFfqiRhX96RX2q8+8Bp9uPMfKbt+xt521Wo/JnC3QiwChV72gswjNLYzwZx0kNhjCkoVhjITsv7S02XHV8ky1WpBA/JuvBtQcfZZbg=,iv:QwLN4ZNJIyt0XbvbuqB227WgrfkyX3u/gqdNuUYhbq0=,tag:+vwDS62V+GRrw4nDRBgoWA==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.7.3