Skip to main content

CLI Overview

Open source at https://github.com/CloudCruise/cloudcruise-cli. Report bugs via GitHub issues or Discord. The CloudCruise CLI provides a command-line interface for managing workflows, workflow components, and runs. It’s designed for coding agents to diagnose, fix, and verify workflow failures — but works just as well for manual use.

Installation

Or run without installing:

Setup

Log in with your browser — the CLI opens a browser window for OAuth:
This opens a browser window for Google OAuth, then saves tokens to your OS keychain. After login, select the workspace you want to use:

API Key Login

If you have an existing API key, pass it via stdin:
Or set the CLOUDCRUISE_API_KEY environment variable.

Coding Agent Integration

Install skill files so your coding agent has the full CLI and workflow DSL reference:
This copies a CLI usage reference and a complete workflow DSL reference (all node types, XPath best practices, variables, JSONata, error classification) into your project where the agent can discover them.

Quick Start

Error-Fix-Verify Loop

You can use the CLI to fix existing workflow errors. Here’s how a coding agent could sequence CLI commands:
The --debug flag forces every node to capture a page snapshot, which is essential for diagnosing selector issues. Without it, failed runs often lack snapshots.

Workflow Components

Components are reusable groups of nodes that can be pasted into many workflows. Updating a component automatically propagates the change to every workflow that embeds it (--no-propagate to skip). See the Workflow Components concept page for the full model.
Before updating, check what propagation will affect:

Secret Providers (1Password)

If your workspace has a 1Password connection, you can bind a vault entry to a 1Password item instead of storing a username and password. CloudCruise resolves the credentials from 1Password at run time — the secret values are never stored in CloudCruise.
--secret-provider-id and --secret-ref must be passed together. --secret-cache-ttl-seconds is optional — omit it to use the connection’s default. Because provider-backed entries carry no --user-name/--password, no encryption key is required to create or update them.

Commands

Next Steps

  • Explore the Run API for detailed execution options
  • Learn about Vault API for secure credential management
  • Check out Workflow API to manage your workflows
  • Set up Webhooks for event notifications