Proxies.ai CLI

The Proxies.ai CLI manages proxies, credential vaults, and secure shares from macOS, Linux, and Windows. It authenticates through Logto's OAuth 2.0 Device Authorization Grant and stores rotating tokens in the operating-system credential store.

Install

macOS

# Homebrew (recommended)
brew install vrillabs/cifp/cifp
# or: brew tap vrillabs/cifp && brew install cifp

# or download the binary from GitHub Releases
# Apple Silicon:  cifp_VERSION_darwin_arm64.tar.gz
# Intel:          cifp_VERSION_darwin_amd64.tar.gz
# https://github.com/VrilLabs/cifp-cli/releases

Linux

# Download from GitHub Releases
# amd64:  cifp_VERSION_linux_amd64.tar.gz
# arm64:  cifp_VERSION_linux_arm64.tar.gz
# https://github.com/VrilLabs/cifp-cli/releases

tar xzf cifp_VERSION_linux_amd64.tar.gz
sudo mv cifp /usr/local/bin/

Windows

# Download from GitHub Releases
# cifp_VERSION_windows_amd64.zip
# https://github.com/VrilLabs/cifp-cli/releases

# Extract and add cifp.exe to your PATH

From source (developers)

go install github.com/VrilLabs/cifp-cli@latest

Releases include SHA-256 checksums and SBOMs for supply-chain verification. See the GitHub Releases page for all available versions.

Sign in

cifp login

1. The CLI prints a short code and opens /device.
2. Sign in to Proxies.ai, verify that the code matches, and review requested scopes.
3. Approve access. The waiting CLI receives short-lived access and rotating refresh tokens.

For a remote terminal, run cifp login --no-browser and open the displayed URL on another device.

Proxy commands

cifp proxy list
cifp proxy create demo --region sjc --mode auto-auth
cifp proxy pause <proxy-id>
cifp proxy resume <proxy-id>
cifp proxy delete <proxy-id> --yes
cifp connect <proxy-id>

Vault commands

cifp vault create <proxy-id> "OpenAI production"
printf '%s' "$OPENAI_API_KEY" | cifp vault secret set <vault-id> OPENAI_API_KEY --value-file -
cifp vault service add <vault-id> --template openai
cifp vault service list <vault-id>

Secret values are read from a file or stdin and are never echoed. See Credential Vaults for binding behavior.

Secure-share commands

cifp share create <proxy-id> --expire 5m --uses 1 --vault <vault-id>
cifp share list --proxy <proxy-id>
cifp share url <proxy-id>
cifp share remove <share-id>

See Secure Sharing before distributing a capability URL.

Automation output

Add --json to read commands for stable machine-readable output. Use --profile to isolate credentials for multiple Proxies.ai deployments and --api-url to select a control-plane origin.

Manage authorized terminals

Open CLI settings to review device metadata, last use, scopes, and revoke individual refresh-token sessions.