CLI reference

macOS and Linux, Intel and ARM. One static binary, checked against the published SHA256SUMS and installed to ~/.stridee/bin — never a sudo prompt. If that directory is not on your PATH, the installer prints the line to add. Set STRIDEE_INSTALL_DIR to put it somewhere else.

Then sign this machine in and start forwarding deliveries.

Prints a code and opens the console. Approve it there — check the code matches your terminal — and this machine is signed in.

There is no token. The CLI generates an Ed25519 keypair, sends only the public half, and your approval registers that half as a signing key on your account, listed under Keys as Made by the Stridee CLI. The private half stays in ~/.config/stridee/config.json, readable only by you — treat it like an SSH key.

Options

Deletes the key stridee login registered and forgets it locally. If the revoke cannot reach Stridee, this machine is signed out anyway and the command names the key to delete under Keys in the console.

Prints the account and the key this machine signs with.

Opens a signed connection to Stridee and becomes one more webhook endpoint on your account for as long as it runs. Every event your account emits is POSTed to your local server exactly as production receives it: the same sealed envelope and the same webhook-id, webhook-timestamp and webhook-signature headers. No tunnel, and nothing on your machine is exposed.

The CLI never decrypts anything, so your handler's own verify and decrypt code is what runs. On first use it makes a webhook key for this machine and writes the private half as PKCS#8 PEM, the format the console downloads, to ~/.config/stridee/. Pass --key to seal to a key your handler already loads instead.

Each delivery prints one line once Stridee has judged your handler's answer. Decrypted means it returned 2xx with the delivery's nonce in the body, which only something holding the private key can do.

Your production endpoints keep receiving deliveries while you listen: the listener gets a copy.

Options

The same event the console's test button sends, delivered only to your listeners — never to production endpoints. Prints how each listener's handler answered.

Prints the link and, in a terminal, opens it in your browser when you press Enter. The place to get unstuck: a delivery that won't decrypt, an error you can't place, a page of the docs that's wrong.

Prints the link to the platform's public feedback board and, in a terminal, opens it in your browser when you press Enter. The place for anything the API, the console or the CLI doesn't do yet.

Downloads the latest build for this machine from download.stridee.com, checks it against the published SHA256SUMS, and replaces this binary with it. Pass --version to install a specific release instead, including an older one.

Other commands check for a newer release about once a day and say so when they finish; they never install anything. Set STRIDEE_NO_UPDATE_CHECK=1 to stop the check. A stridee built with cargo is updated with cargo.

Options