cli

README

certimate-cli

English | 简体中文

Command-line interface for Certimate SSL certificate management.

Features

• Agent-Native Design: Built for AI agents (Claude Code, OpenClaw, etc.) with SKILL.md integrations
• Workflow management: list, view, and execute certificate workflows
• Certificate management: view and download SSL certificates in multiple formats
• Access management: create, edit, and delete provider credentials
• Multiple output formats: JSON (default) and table output
• Profile support: manage multiple server configurations

Installation

From Source

go install github.com/certimate-go/cli@latest

From Binary

Download the latest release from GitHub Releases.

Using Homebrew

brew install certimate-go/tap/certimate

Quick Start

1. Configure Connection

certimate config set --server http://127.0.0.1:8090 --token YOUR_API_TOKEN

Obtain an API token from PocketBase admin UI:

1. Open PocketBase admin dashboard (e.g., http://127.0.0.1:8090/_/)
2. Go to Collections > _superusers > select a superuser
3. Click "Impersonate" dropdown to generate a nonrenewable auth token

Note: PocketBase uses superuser impersonation tokens instead of traditional API keys. See PocketBase Authentication docs for details.

2. List Workflows

certimate workflow list

3. Execute a Workflow

# Fire-and-forget
certimate workflow run WORKFLOW_ID

# Wait for completion
certimate workflow run WORKFLOW_ID --wait

4. List Certificates

certimate certificate list

# With table output
certimate certificate list --output table

Commands

Configuration

# Set configuration
certimate config set --server URL --token TOKEN [--profile NAME]

# View current configuration
certimate config get

# Show current profile
certimate config current

# List all profiles
certimate config list

Workflows

# List workflows
certimate workflow list [--filter EXPR] [--limit N]

# Get workflow details
certimate workflow get WORKFLOW_ID

# Execute workflow
certimate workflow run WORKFLOW_ID [--wait] [--timeout SECONDS]

# Cancel running workflow
certimate workflow cancel WORKFLOW_ID RUN_ID

# List execution history
certimate workflow runs WORKFLOW_ID [--limit N]

Certificates

# List certificates
certimate certificate list [--filter EXPR] [--limit N]

# Get certificate details
certimate certificate get CERTIFICATE_ID

# Download certificate
certimate certificate download CERTIFICATE_ID --format PEM|PFX|JKS [--output FILE]

Access Credentials

# List access credentials
certimate access list [--reveal]

# Get access details
certimate access get ACCESS_ID [--reveal]

# Create new access credential
certimate access create --name NAME --provider PROVIDER --config JSON

# Edit access credential
certimate access edit ACCESS_ID --name NAME --config JSON

# Delete access credential
certimate access delete ACCESS_ID

Other Commands

# Show version
certimate version

# Generate shell completion
certimate completion bash|zsh|fish

Global Flags

Flag	Description
--config	Config file path (default ~/.config/certimate-cli/config.yaml)
--debug	Enable debug output
-o, --output	Output format: json or table (default json)
--profile	Configuration profile (default default)

Output Formats

All commands support JSON (default) and table output:

# JSON output (default)
certimate workflow list

# Table output
certimate workflow list --output table

Environment Variables

Variable	Description
CERTIMATE_CLI_TOKEN	API token (overrides config file)
CERTIMATE_CLI_SERVER	Server URL (overrides config file)
CERTIMATE_CLI_CONFIG_DIR	Custom config directory

Exit Codes

Code	Meaning
0	Success
1	General error
2	Invalid arguments
3	Authentication error
4	Network error
5	Not found

AI Agent Skills

Certimate CLI is designed for AI agents first. It ships with Agent Skills (SKILL.md files) that enable seamless integration with various AI agent frameworks:

• Claude Code - Anthropic's CLI agent
• OpenClaw - Open-source agent framework
• Any Claw-compatible agent - Skills use standard metadata format

Available Skills

Skill	Description
ctm-shared	Common patterns, authentication, and CLI setup
ctm-workflow	Certificate workflow operations (list, run, cancel)
ctm-workflow-create	Create and configure new workflows
ctm-certificate	Certificate viewing and downloading
ctm-access	Provider credential management

Installation

Claude Code

# Install all skills at once
npx skills add https://github.com/certimate-go/cli

# Or pick only what you need
npx skills add https://github.com/certimate-go/cli/tree/main/skills/ctm-workflow

OpenClaw / Other Claw-Compatible Agents

Skills include openclaw metadata for automatic discovery:

metadata:
  openclaw:
    category: "devops"
    requires:
      bins: ["certimate"]

Simply clone or symlink the skills directory to your agent's skills path.

Manual Installation

cp -r skills/* ~/.claude/skills/

Why Agent Skills?

• Zero learning curve: AI agents understand CLI capabilities instantly
• Type-safe operations: Skills document exact command syntax and outputs
• Error handling: Built-in troubleshooting patterns for common issues
• Multi-format output: JSON by default for machine parsing, table for humans

Development

# Build
make build

# Install locally
make install

# Run tests
make test

# Build for all platforms
make build-all

# Generate shell completion
make completion

License

MIT License

Related Projects

• Certimate - SSL certificate management system