Overview
TrustPin CLI is a command-line interface for managing certificate pinning configurations. It provides secure, automated control over your TrustPin projects with support for both cloud-managed keys and bring-your-own-key (BYOK) deployments.
Key Features
- 🔐 Secure Configuration Management - Store API credentials safely with encrypted master password
- 📁 Project Management - List, view, and manage all your TrustPin projects
- 🔑 Certificate Signing - Sign and publish pinning configurations with cloud keys or your own private keys
- 📊 Machine-Readable Output - JSON output for seamless CI/CD integration
- 🔧 Cross-Platform - Native binaries for macOS (Intel & ARM) and Linux (x64 & ARM64)
- 🚀 AWS CLI-style - Familiar command structure and intuitive error handling
Core Capabilities
Authentication
Authenticate using Personal Access Tokens from TrustPin Console . Tokens are user-scoped with access to all projects you have permission to view.
Project Operations
- List all projects in your organizations
- View detailed project information
- Retrieve project configurations in JWS format
- Check published vs unpublished configuration versions
Configuration Signing
Sign certificate pinning configurations using:
- Cloud Keys: Managed by TrustPin, encrypted with your master password
- BYOK: Your own private keys in PEM format (with optional password protection)
Published configurations are live immediately - SDKs use the latest signed version.
Use Cases
Interactive Development
Use human-readable output for quick project inspection and manual configuration signing during development.
CI/CD Automation
Use JSON output with tools like jq to automate certificate pinning deployments in GitHub Actions, GitLab CI, or other pipelines.
Security Compliance
Sign configurations with your own private keys (BYOK) to maintain full control over the signing process while using TrustPin’s CDN infrastructure.
Output Formats
All commands support two output formats:
Human-Readable (Default)
trustpin-cli projects listPerfect for interactive terminal use with colors, progress indicators, and formatted tables.
JSON
trustpin-cli projects list --output jsonMachine-readable format for automation, scripting, and CI/CD integration.
Getting Started
- Install the CLI: Use Homebrew or download directly
- Configure authentication: Run
trustpin-cli configurewith your Personal Access Token - List your projects: View all available projects with
trustpin-cli projects list - Sign configurations: Publish pinning configurations with
trustpin-cli projects sign
See Installation and Commands for detailed instructions.