Query Perplexity.ai from your terminal. Get answers with source citations, structured JSON output, real-time streaming, file attachments, and thread export -- all from a single command.
No install required. Run directly with uvx:
uvx pxcli query "What happened in AI this week?"That's it. You get an answer with source references, directly in your terminal.
For regular use, install the package so pxcli is always available:
uv pip install pxcliBoth pxcli and perplexity-cli work as command names after installation.
Install from source
make setup requires three external tools to be installed first:
| Tool | Purpose | Install |
|---|---|---|
uv |
Python package manager (creates venv, syncs locked deps) | curl -LsSf https://astral.sh/uv/install.sh | sh (see docs) |
gitleaks |
Pre-push secret scanning | brew install gitleaks (alternatives) |
infisical |
Pre-commit secret scanning of uncommitted changes | brew install infisical (docs) |
Then:
git clone https://github.com/jamiemills/perplexity-cli.git
cd perplexity-cli
make setup # venv, deps, lefthook git hooks (requires uv, gitleaks, infisical)
make configure-opencode # reproducible OpenCode plugin/config validation
make test # verify everything works
make setupinstalls the Python virtualenv, locked dependencies, lefthook git hooks, and verifies the CLI builds.make configure-opencodeinstalls the locked npm packages needed by the OpenCode plugins, type-checks them, and validatesopencode.jsoncand registered plugin paths. Both are idempotent — safe to re-run.
pxcli query "What is machine learning?"pxcli auth loginThis connects to Chrome, waits for you to sign in to Perplexity.ai, and saves your session token encrypted locally. See Authentication setup for the full walkthrough.
pxcli query --attach report.pdf "Summarise this document"
pxcli query --model claude46sonnet "Explain Docker"
pxcli query --json "What is Python?" | jq -r '.result.answer'
pxcli threads exportAdd these to your ~/.zshrc (or ~/.bashrc) for quick access:
# Quick question (rich terminal output, no citation markers)
px() { uvx pxcli query --strip-references --format rich "$*"; }
# Get just the commands to run (plain text)
pxc() { uvx pxcli query --strip-references --format plain "$*. Just give me the commands to run on a Mac. Put them on a single line"; }
# JSON answer only
pxj() { uvx pxcli query --json "$*" | jq -r '.result.answer'; }Then:
px "what is the latest version of Python?"
pxc "how can I find what remote branches exist for this repo"
pxj "what is the capital of France?"pxcli can also run as an MCP server for coding agents. It exposes two tools:
perplexity_quick_info: Fast lookups, short explanations, fact checks, and recent info.perplexity_deep_info: Multi-step research, comparisons, timelines, and broader synthesis.
Both tools accept output_format values json, markdown (alias: md), and plain (alias: text).
Each tool returns a structured result with: mode (quick or deep), output_format (the normalised value), answer (plain text), rendered_response (answer rendered in the requested format), references (array of {title, url, snippet}), and reference_count.
- Use
perplexity_quick_infofor current facts, short summaries, and quick validation. - Use
perplexity_deep_infofor broader research, comparisons, timelines, and synthesis across sources. - Use
output_format=jsonwhen another agent step needs structured fields. - Use
output_format=markdownfor readable summaries. - Use
output_format=plainfor compact text and terminal-oriented follow-up work.
Run the MCP server over stdio:
uv run pxcli-mcpRun it from a local checkout without activating the environment:
uv run --directory /path/to/perplexity-cli pxcli-mcpRun it directly from GitHub without cloning:
uvx --from git+https://github.com/jamiemills/perplexity-cli.git pxcli-mcpRun it from PyPI:
uvx --from pxcli pxcli-mcpOr after installing pxcli locally:
pxcli-mcpRun it over Streamable HTTP:
uv run pxcli-mcp --transport streamable-http --host 0.0.0.0 --port 8000This serves the MCP endpoint at http://127.0.0.1:8000/mcp by default. Override the mount path with --mount-path:
uv run pxcli-mcp --transport streamable-http --mount-path /pxcli/mcp
# serves http://127.0.0.1:8000/pxcli/mcpProject-local config for the current repo only:
claude mcp add --transport stdio --scope local perplexity-cli -- \
uv run --directory /path/to/perplexity-cli pxcli-mcpUser-level config for all projects:
claude mcp add --transport stdio --scope user perplexity-cli -- \
uv run --directory /path/to/perplexity-cli pxcli-mcpProject-local HTTP config:
claude mcp add --transport http --scope local perplexity-cli \
http://127.0.0.1:8000/mcpUser-level HTTP config:
claude mcp add --transport http --scope user perplexity-cli \
http://127.0.0.1:8000/mcpProject-local config in .codex/config.toml:
[mcp_servers.perplexity_cli]
command = "uv"
args = ["run", "--directory", "/path/to/perplexity-cli", "pxcli-mcp"]User-level config in ~/.codex/config.toml:
[mcp_servers.perplexity_cli]
command = "uv"
args = ["run", "--directory", "/path/to/perplexity-cli", "pxcli-mcp"]If you prefer the Codex CLI, add the server first and then move the resulting config to the scope you want:
codex mcp add perplexity-cli -- uv run --directory /path/to/perplexity-cli pxcli-mcpProject-local HTTP config in .codex/config.toml:
[mcp_servers.perplexity_cli]
url = "http://127.0.0.1:8000/mcp"User-level HTTP config in ~/.codex/config.toml:
[mcp_servers.perplexity_cli]
url = "http://127.0.0.1:8000/mcp"Project-local config in opencode.json or opencode.jsonc:
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"perplexity_cli": {
"type": "local",
"command": ["uv", "run", "--directory", "/path/to/perplexity-cli", "pxcli-mcp"],
"enabled": true
}
}
}User-level config in ~/.config/opencode/opencode.json:
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"perplexity_cli": {
"type": "local",
"command": ["uv", "run", "--directory", "/path/to/perplexity-cli", "pxcli-mcp"],
"enabled": true
}
}
}Project-local HTTP config:
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"perplexity_cli": {
"type": "remote",
"url": "http://127.0.0.1:8000/mcp",
"enabled": true
}
}
}User-level HTTP config in ~/.config/opencode/opencode.json:
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"perplexity_cli": {
"type": "remote",
"url": "http://127.0.0.1:8000/mcp",
"enabled": true
}
}
}- Use stdio when the MCP server should be launched by the client on demand.
- Use Streamable HTTP when you want to run one long-lived server and let multiple clients connect to it.
- Use project-local config when the MCP server should only be available in this repo.
- Use user-level config when you want the same Perplexity MCP server available in all your projects.
# Rich terminal output (default when interactive)
pxcli query "What is machine learning?"
# Stream the response as it arrives
pxcli query --stream "What is machine learning?"
# Remove citation markers [1], [2] and the references section
pxcli query --strip-references "What is machine learning?"
# Read query from stdin
echo "What is Python?" | pxcli query -
# Set a timeout (seconds)
pxcli query --timeout 120 "Complex research question"The default is rich when stdout is a terminal, or plain when piped.
# Plain text (good for scripts, piping, saving to .txt)
pxcli query --format plain "What is Python?"
# GitHub-flavoured Markdown
pxcli query --format markdown "Explain Docker" > docker.md
# Structured JSON envelope (see JSON output section below)
pxcli query --json "What is Python?"Attach files to provide context for your query. Requires authentication.
# Single file
pxcli query --attach README.md "What is this project?"
# Multiple files (comma-separated)
pxcli query --attach config.json,data.txt "Analyse these files"
# Repeated flag
pxcli query -a file1.txt -a file2.txt "Compare these files"
# Entire directory (recursive)
pxcli query --attach ./docs "Summarise all documentation"
# Inline file path in the query text (auto-detected)
pxcli query "Summarise /path/to/report.md and /tmp/notes.txt"Attachments are scanned and validated before upload:
- Per-file limit: 10 MiB. Larger files are rejected before upload.
- Total limit: 25 MiB across all attachments for a single query.
- Count limit: 25 files per query (including files discovered via directory recursion).
- Inline path detection: absolute Unix paths (
/path/to/file.ext), tilde paths (~/...), and Windows paths (C:\\...) mentioned directly in the query text are auto-attached. - Skipped directories:
.git,.hg,.svn,.venv,venv,node_modules,__pycache__,.mypy_cache,.pytest_cache,.ruff_cache, and any hidden directory (starting with.). - Sensitive files excluded: dotfiles starting with
.envand credential/certificate suffixes (.key,.pem,.p12,.pfx,.crt,.cer,.der,.jks,.p8) are skipped during directory recursion. - Symlinks: always skipped to avoid escaping the directory tree.
These limits protect against accidentally uploading large volumes of source or secret material when attaching a directory. Explicit --attach file paths bypass the suffix/directory filters (the per-file size and count limits still apply).
Choose a specific model for your query:
pxcli query --model gpt54 "What is Python?"
pxcli query -m claude46sonnet "Explain Docker"
# List available models for your subscription tier
pxcli models list
pxcli models list --json | jq '.result.models[].model_id'All flags compose freely:
pxcli query -f plain -S "What is 2+2?"
pxcli query --stream --strip-references "Explain Kubernetes"
pxcli query --format markdown -S "How does DNS work?" > dns.md
pxcli query --json --timeout 60 "Complex analysis question"
pxcli query --json --stream "What is Python?"| Option | Short | Description |
|---|---|---|
--format |
-f |
plain, markdown, rich (default), json |
--json |
Structured JSON envelope output | |
--stream / --no-stream |
-s |
Stream response incrementally |
--strip-references |
-S |
Remove citation markers and references section |
--attach |
-a |
Attach file(s) or directory |
--model |
-m |
Model identifier (see pxcli models list) |
--timeout |
-t |
Request timeout in seconds (default: 60) |
--schema |
Embed JSON Schema in envelope (with --json) |
|
--request-param |
Inject extra key=value into API request (experimental) |
Every command that accepts --json produces a structured envelope on stdout. This makes pxcli straightforward to integrate into scripts, pipelines, and agent workflows.
{
"ok": true,
"command": "pxcli query",
"result": {
"answer": "Python is a high-level programming language...",
"references": [
{
"name": "Python.org",
"url": "https://www.python.org",
"snippet": "Python is a programming language..."
}
]
},
"meta": {
"duration_ms": 1423,
"version": "0.7.1",
"trace_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
"truncated": false
},
"next_actions": [
{
"command": "pxcli query",
"description": "Ask a follow-up question"
}
]
}When ok is false, the envelope contains error details and a suggested fix:
{
"ok": false,
"command": "pxcli query",
"error": {
"code": "authentication_required",
"message": "File attachments require authentication.",
"input": {}
},
"fix": "Run `pxcli auth login` to authenticate.",
"next_actions": [
{ "command": "pxcli auth login", "description": "Authenticate with Perplexity.ai" }
]
}Error codes: authentication_required, permission_denied, rate_limited, network_error, timeout, upstream_schema_error, configuration_error, attachment_error, validation_error, not_found, internal_error.
| Command | .result fields |
|---|---|
query |
{answer, references} |
auth login |
{token_path, cookies_stored} |
auth logout |
{credentials_existed} |
auth status |
{authenticated, token_path, token_age_days, cookies_stored, verified} |
config set |
{key, value} |
config show |
{config_path, save_cookies, debug_mode, env_overrides} |
style set |
{style} |
style show |
{style} |
style clear |
{had_style} |
threads export |
{threads, total, output_path, date_range} |
models list |
{models} |
doctor security |
{storage_backend, token_path, token_permissions, cache_path, cache_permissions, cookies_enabled} |
skill show |
{skill_md} |
# Extract the answer text (use -r so newlines render properly)
pxcli query --json "What is Python?" | jq -r '.result.answer'
# Get reference URLs
pxcli query --json "What is Python?" | jq -r '.result.references[].url'
# Count references
pxcli query --json "What is Python?" | jq '.result.references | length'
# Get timing metadata
pxcli query --json "What is Python?" | jq '.meta.duration_ms'
# Check success
pxcli query --json "What is Python?" | jq '.ok'
# Get suggested next actions
pxcli query --json "What is Python?" | jq -r '.next_actions[].command'Use --json --stream together for structured streaming. Each line is a valid JSON object:
pxcli query --json --stream "What is Python?"{"type": "start", "command": "pxcli query --json --stream", "ts": "2025-05-09T10:00:00+00:00"}
{"type": "chunk", "text": "Python is a", "ts": "2025-05-09T10:00:01+00:00"}
{"type": "chunk", "text": " high-level programming language...", "ts": "2025-05-09T10:00:02+00:00"}
{"type": "result", "ok": true, "command": "...", "result": {...}, "meta": {...}, "next_actions": [...], "ts": "2025-05-09T10:00:03+00:00"}
Event types: start (first line), chunk (incremental content), result (final line with full envelope).
Without --json, --stream produces raw text as it arrives.
Retrieve the full Pydantic-generated schema for all envelope types:
pxcli schema # full schema
pxcli schema | jq '.success_envelope' # success envelope only
pxcli schema | jq '.commands' # per-command result definitions
pxcli schema | jq '.commands["query"]' # query result schemaOr embed the schema inline with any --json response:
pxcli query --json --schema "What is Python?" # adds $schema key to envelopeShell:
# Capture answer in a variable
ANSWER=$(pxcli query --format plain "What is 2+2?")
echo "The answer is: $ANSWER"
# Error handling with exit codes
pxcli query --json "Your question"
rc=$?
case $rc in
0) echo "Success" ;;
4) echo "Auth needed -- run: pxcli auth login" ;;
6) echo "Transient error -- retrying..." && sleep 2 && pxcli query --json "Your question" ;;
*) echo "Failed with exit code $rc" ;;
esac
# Check .ok before processing JSON
response=$(pxcli query --json "Your question")
if echo "$response" | jq -e '.ok' > /dev/null 2>&1; then
echo "$response" | jq -r '.result.answer'
else
echo "$response" | jq -r '.error.message' >&2
echo "$response" | jq -r '.fix' >&2
fiPython:
import json
import subprocess
import sys
result = subprocess.run(
["pxcli", "query", "--json", "What is Python?"],
capture_output=True, text=True,
)
if result.returncode != 0:
print(f"pxcli exited with code {result.returncode}", file=sys.stderr)
sys.exit(result.returncode)
envelope = json.loads(result.stdout)
if not envelope["ok"]:
print(f"Error: {envelope['error']['message']}", file=sys.stderr)
print(f"Fix: {envelope['fix']}", file=sys.stderr)
sys.exit(1)
print(envelope["result"]["answer"])
for ref in envelope["result"]["references"]:
print(f" {ref['name']}: {ref['url']}")Python (NDJSON streaming):
import json
import subprocess
proc = subprocess.Popen(
["pxcli", "query", "--json", "--stream", "What is Python?"],
stdout=subprocess.PIPE, text=True,
)
for line in proc.stdout:
event = json.loads(line)
if event["type"] == "chunk":
print(event["text"], end="", flush=True)
elif event["type"] == "result":
refs = event["result"]["references"]
print(f"\n\n{len(refs)} references found.")
proc.wait()Authentication is optional for basic queries but required for file attachments (--attach), thread export, and model listing.
Download a dedicated Chrome instance (keeps testing separate from your main browser):
npx @puppeteer/browsers install chrome@stableAdd to your ~/.zshrc or ~/.bashrc:
alias chromefortesting='open ~/.local/bin/chrome/mac_arm-*/chrome-mac-arm64/Google\ Chrome\ for\ Testing.app --args "--remote-debugging-port=9222" "about:blank"'Adjust the path for your platform. The mac_arm-* pattern matches the version directory.
# Terminal 1: Start Chrome with debugging enabled
chromefortesting
# Terminal 2: Run authentication
pxcli auth loginThe process connects to Chrome, navigates to Perplexity.ai, waits for you to sign in, extracts your session token, and saves it encrypted to ~/.config/perplexity-cli/token.json.
Once complete, you do not need to authenticate again unless the token expires or you run pxcli auth logout.
If port 9222 is in use, start Chrome with a different port and match it:
pxcli auth login --port 9223pxcli auth status # local check
pxcli auth status --verify # live API verification
pxcli auth status --json # JSON envelope outputpxcli auth logout| Feature | Auth required? |
|---|---|
query (basic) |
No |
query --attach (file attachments) |
Yes |
models list |
Yes |
threads export |
Yes |
auth status |
No (reports unauthenticated state) |
style set/show/clear |
No (local only) |
config set/show |
No (local only) |
doctor security |
No (local only) |
schema |
No |
completion |
No |
skill show |
No |
Set a persistent style prompt that is appended to every query. This controls the tone and format of responses without repeating instructions.
# Set a style
pxcli style set "be brief and concise"
# View the current style
pxcli style show
# Clear the style
pxcli style clearThe style is stored in ~/.config/perplexity-cli/style.json and persists across sessions. All three commands accept --json for structured output.
Export your Perplexity conversation history to CSV. Requires authentication.
# Export all threads
pxcli threads export
# Filter by date range
pxcli threads export --from-date 2025-01-01
pxcli threads export --from-date 2025-01-01 --to-date 2025-12-31
# Custom output file
pxcli threads export --output my-threads.csv
# Bypass local cache
pxcli threads export --force-refresh
# Clear cache before export
pxcli threads export --clear-cache
# JSON envelope output (no CSV is written unless --output is also given)
pxcli threads export --json
pxcli threads export --json | jq '.result.threads[] | .title'
pxcli threads export --json --output my-threads.csv # emit JSON AND write CSVtitle,created_at,url
"How does quantum computing work?",2025-05-08T14:30:00+00:00,https://www.perplexity.ai/search/...
"Best Python testing frameworks",2025-05-07T09:15:00+00:00,https://www.perplexity.ai/search/...Fields: title, created_at (ISO 8601 with timezone), url.
Thread exports are cached locally in encrypted form at ~/.config/perplexity-cli/threads-cache.json. The cache is updated incrementally on each export. Use --force-refresh to bypass the cache or --clear-cache to delete it.
| Option | Short | Description |
|---|---|---|
--from-date |
Start date filter, inclusive (YYYY-MM-DD) | |
--to-date |
End date filter, inclusive (YYYY-MM-DD) | |
--output |
-o |
Output CSV path (default: threads-TIMESTAMP.csv) |
--force-refresh |
Bypass local cache | |
--clear-cache |
Delete cache before export | |
--json |
JSON envelope output; CSV skipped unless --output is given |
|
--schema |
Embed JSON Schema in envelope (with --json) |
Configuration is stored in ~/.config/perplexity-cli/config.json:
{
"version": 1,
"features": {
"save_cookies": false,
"debug_mode": false
}
}# View current configuration
pxcli config show
# Enable cookie storage (saves Cloudflare cookies alongside JWT token)
pxcli config set save_cookies true
# Enable persistent debug logging
pxcli config set debug_mode true
# Disable
pxcli config set save_cookies false
pxcli config set debug_mode falseAfter changing save_cookies, re-authenticate for the change to take effect:
pxcli config set save_cookies true
pxcli auth loginAPI endpoints are configured in ~/.config/perplexity-cli/urls.json (created automatically on first run):
{
"perplexity": {
"base_url": "https://www.perplexity.ai",
"query_endpoint": "https://www.perplexity.ai/rest/sse/perplexity_ask",
"thread_list_endpoint": "https://www.perplexity.ai/rest/thread/list_ask_threads",
"upload_url_endpoint": "https://www.perplexity.ai/rest/uploads/batch_create_upload_urls",
"s3_bucket_url": "https://ppl-ai-file-upload.s3.amazonaws.com/",
"model_config_endpoint": "https://www.perplexity.ai/rest/models/config",
"user_settings_endpoint": "https://www.perplexity.ai/rest/user/settings"
},
"rate_limiting": {
"enabled": true,
"requests_per_period": 20,
"period_seconds": 60
}
}All endpoint fields are full URLs. If Perplexity changes an endpoint, update the relevant field without modifying any code.
Rate limiting applies to thread export requests. Adjust in urls.json:
{
"rate_limiting": {
"enabled": true,
"requests_per_period": 10,
"period_seconds": 60
}
}Set "enabled": false to disable (not recommended).
Environment variables override configuration file settings. Precedence: CLI flags > environment variables > config file > defaults.
| Variable | Description |
|---|---|
PERPLEXITY_BASE_URL |
API base URL |
PERPLEXITY_QUERY_ENDPOINT |
Query endpoint URL |
PERPLEXITY_THREAD_LIST_ENDPOINT |
Thread list endpoint URL |
PERPLEXITY_UPLOAD_URL_ENDPOINT |
Upload-URL endpoint URL |
PERPLEXITY_S3_BUCKET_URL |
S3 bucket URL for uploads |
PERPLEXITY_MODEL_CONFIG_ENDPOINT |
Model config endpoint URL |
PERPLEXITY_USER_SETTINGS_ENDPOINT |
User settings endpoint URL |
PERPLEXITY_CONFIG_DIR |
Override config directory location |
PERPLEXITY_SAVE_COOKIES |
true / false -- override cookie storage |
PERPLEXITY_DEBUG_MODE |
true / false -- override debug mode |
PERPLEXITY_RATE_LIMITING_ENABLED |
true / false |
PERPLEXITY_RATE_LIMITING_RPS |
Requests per period (integer) |
PERPLEXITY_RATE_LIMITING_PERIOD |
Period in seconds (integer) |
XDG_CONFIG_HOME |
XDG base directory for config (default: ~/.config) |
NO_COLOR |
Disable coloured output (any value) |
PXCLI_SESSION_LOG |
Set to true to enable NDJSON session logging to $XDG_DATA_HOME/pxcli/sessions/ (or ~/.local/share/pxcli/sessions/ when XDG_DATA_HOME is unset). One file per session, named <session-id>.ndjson. |
XDG_DATA_HOME |
XDG base directory for session data (default: ~/.local/share) |
Generate tab-completion scripts for commands, subcommands, and options:
# Bash -- add to ~/.bashrc
eval "$(pxcli completion bash)"
# Zsh -- add to ~/.zshrc
eval "$(pxcli completion zsh)"
# Fish
pxcli completion fish | sourcepxcli doctor security
pxcli doctor security --jsonReports storage backend, token file path and permissions, cache file path and permissions, and whether cookie storage is enabled. Useful for verifying that credentials are stored with appropriate restrictions (e.g. 0600).
pxcli auth status --verifyPerforms a live API check to confirm the stored token is valid, beyond simply checking local file state.
pxcli --verbose query "question" # INFO level logging to stderr
pxcli --debug query "question" # DEBUG level logging (HTTP details, timing)
pxcli --log-file /tmp/debug.log query "question" # Log to fileDebug mode can also be enabled persistently:
pxcli config set debug_mode truepxcli includes a built-in skill definition for AI agents and LLM-based toolchains:
pxcli skill show # display the skill definition
pxcli skill show --json # JSON envelope with skill contentThe skill describes how agents can use pxcli as a web search and research tool, including JSON parsing patterns, NDJSON streaming integration, error handling, and workflow examples. The next_actions array in every JSON envelope suggests follow-up commands that agents can chain automatically.
These options apply to all commands:
| Option | Short | Description |
|---|---|---|
--version |
Show version and exit | |
--verbose |
-v |
INFO level logging |
--debug |
-d |
DEBUG level logging (overrides --verbose) |
--log-file PATH |
Log file path (default: ~/.config/perplexity-cli/perplexity-cli.log) |
|
--quiet |
-q |
Suppress non-essential output |
--no-color |
Disable coloured output |
pxcli
|-- query QUERY [OPTIONS] Submit a query
|-- schema Output JSON schema for envelopes
|-- auth
| |-- login [--port PORT] Authenticate via Chrome DevTools
| |-- logout Remove stored credentials
| +-- status [--verify] Check authentication state
|-- config
| |-- set KEY VALUE Set a configuration option
| +-- show Display current configuration
|-- models
| +-- list List available models
|-- style
| |-- set STYLE Set a persistent style prompt
| |-- show View current style
| +-- clear Remove style
|-- threads
| +-- export [OPTIONS] Export thread library to CSV
|-- skill
| +-- show Display agent skill definition
|-- doctor
| +-- security Report credential storage state
+-- completion
|-- bash Generate Bash completion script
|-- zsh Generate Zsh completion script
+-- fish Generate Fish completion script
The auth, config, models, style, threads, skill, and doctor subcommands accept --json and --schema for structured envelope output. completion, schema, and --help do not.
| Code | Meaning |
|---|---|
0 |
Success |
1 |
General failure |
2 |
Usage error (bad arguments, missing input) |
3 |
Not found |
4 |
Authentication required |
5 |
Conflict |
6 |
Transient error (timeout, rate limit -- retry may help) |
7 |
Validation error |
130 |
Interrupted (Ctrl+C) |
For scripting, prefer checking the exit code first. In --json mode, both success and error responses are valid JSON envelopes on stdout -- check the .ok field.
- Tokens encrypted at rest using Fernet symmetric encryption
- Key derived via PBKDF2-HMAC with 100,000 iterations from the system hostname and OS user
- File permissions restricted to owner only (0600)
- Token validity checked on each request, with age warnings after 30 days
- No credentials written to logs
- Cookie storage is opt-in and uses the same encrypted file
This is machine-bound obfuscation rather than OS keychain-backed secret storage. It prevents casual copying between machines but does not protect against other local processes that can already read the token file. If cookie storage is enabled, browser cookies are stored alongside the token and should be treated as sensitive session material.
| Platform | Path |
|---|---|
| Linux / macOS | ~/.config/perplexity-cli/token.json |
| Windows | %APPDATA%\perplexity-cli\token.json |
| Problem | Solution |
|---|---|
| "Not authenticated" | Run pxcli auth login |
| "Failed to decrypt token" | Token was encrypted on a different machine or user. Run pxcli auth login to re-authenticate. |
| Chrome connection fails | Ensure Chrome is running with --remote-debugging-port=9222 and the port matches. |
| Token file has insecure permissions | Delete the file and re-authenticate: rm ~/.config/perplexity-cli/token.json && pxcli auth login |
- Python 3.12 or later
- Google Chrome (for initial authentication only)
Prerequisites: uv, gitleaks, and infisical. All three are verified by make setup.
git clone https://github.com/jamiemills/perplexity-cli.git
cd perplexity-cli
make setup # creates venv, syncs deps, installs lefthook hooks
make configure-opencode # npm ci, plugin type-check, JSONC/config validationThe equivalent manual setup (skipping the prerequisite checks) is:
uv venv && source .venv/bin/activate
uv pip install -e ".[dev]"
uv run lefthook installThe documented safe ordinary test command is make test; it runs pytest in
parallel with fail-fast and applies the live-marker exclusions (property,
hermetic integration, integration, real API, manual, real-user-config, and
fuzz) plus the explicit --ignore core-exclusion manifest (the property and
mutation families) from its recipe. Plain uv run pytest does NOT apply those
exclusions.
make test # safe ordinary test suite
make test-coverage # tests with global + per-module coverage enforcement (>= 85%)
make test-fuzz # fuzz tests (atheris harnesses, linux x86_64 only)
uv run pytest -m security # security tests onlyFor the full quality-gate reference, see QUALITY_GATES.md.
The Makefile is the single source of truth for all lint, test, and build commands.
Both CI (GitHub Actions) and local git hooks (lefthook) delegate to it.
The full catalogue of gates, what each defends against, and where it runs is
documented in QUALITY_GATES.md.
make ci # credential-free CI aggregate: ci-static,
# ci-test-coverage, ci-fuzz-status, pip-audit,
# sonar-reports, ci-property, ci-package, smoke-test
make ci-trusted # make ci plus authenticated Safety
make ci-static # format-check, lint, typecheck-all, bandit,
# vulture, complexity, actionlint
make check # all configured static checks (no tests); which
# analysers run is controlled by CHECK_* toggles
# in quality/gates.conf
make lint # ruff check only
make security # bandit + vulture
make semgrep # custom + reviewed immutable community snapshots
make ratchets # six members: four baseline ratchets (file-size,
# suppressions, suppression-reasons, semgrep-architecture)
# and two whole-tree hard gates (ruff-architecture,
# typecheck-strict-ratchet)
make test # pytest (no coverage, fail-fast)
make test-coverage # pytest with per-module coverage enforcement (>=85%)
make pep20 # PEP 20 (Zen of Python) adherence report (advisory, manual-only)
make build # build wheel and sdistQuality ratchets capture existing structural debt as accepted baselines under
quality/baselines/, then fail only on new or grown findings — so the
failure modes cannot spread while the debt is paid down incrementally. The
latest community Semgrep packs run separately as a scheduled advisory;
blocking scans use the reviewed community rule files whose hashes are
recorded in quality/semgrep-snapshot.json. See
QUALITY_GATES.md for the authoritative catalogue of
gates, where each runs, and how to replicate them.
make pep20 runs a deterministic, offline analyser
(scripts/check_pep20.py) that scores a Python repository against the
nineteen Zen of Python aphorisms and prints a per-aphorism verdict
(Strong / Moderate / Weak / Not-assessable) with file:line evidence. It is
an advisory developer tool, not a gate: it is never wired into CI or the git
hooks, and findings never change its exit code.
make pep20 # report on src/ (default root)
make pep20 PEP20_ARGS="--root src/perplexity_cli" # custom root
make pep20 PEP20_ARGS="--json" # machine-readable JSON
make pep20 PEP20_ARGS="--pr 123 --repo owner/repo" # assess a pull request
# (read-only gh API; line-scoped)
make pep20 PEP20_ARGS="--output build/reports/pep20.md" # write to a fileThree aphorisms (9, 14, 16) are human-judgement calls and are reported as
Not-assessable with rubric prose; the mechanical aphorisms are assessed via
deterministic proxies (complexity, nesting, error handling, docstrings, and
so on). PR mode is read-only by default; --post-comment is an explicit
opt-in that posts the report as a review comment.
Use the release target to bump the version, run CI, commit, tag, and push:
make release V=0.8.0This runs uv lock, the full CI pipeline, commits the version bump, creates a
v0.8.0 tag, and pushes both to origin. The publish-to-pypi workflow then
publishes to PyPI via OIDC trusted publishing.
The tracked release path is make release V=<version>, followed by the tag-driven .github/workflows/publish-to-pypi.yml workflow.
Supported Python versions: 3.12+. CI tests against 3.12, 3.13, and 3.14 on Ubuntu, with compatibility and wheel-smoke lanes on macOS.
- Contributing guide:
CONTRIBUTING.md - Security policy:
SECURITY.md - Licence:
LICENSE - Changelog: GitHub Releases
MIT