
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@stevederico/grok-cli
Advanced tools
Grok CLI is an open-source interactive CLI tool that provides a flexible and powerful interface for AI-assisted workflows.
Supported Providers:
npm i -g @stevederico/grok-cli
export XAI_API_KEY="your_xai_api_key"
grok
export OPENAI_API_KEY="your_openai_api_key"
grok
export ANTHROPIC_API_KEY="your_anthropic_api_key"
grok
export GEMINI_API_KEY="your_gemini_api_key"
grok
# Start Ollama service
ollama serve
# Pull a model (if needed)
ollama pull llama3.2:latest
# Run grok-cli with Ollama
export GROKCLI_PROVIDER=ollama
grok
Grok CLI auto-detects your provider based on which API key is set. To explicitly choose a provider, set GROKCLI_PROVIDER:
export GROKCLI_PROVIDER=anthropic
grok
| Provider | Environment Variable | Description |
|---|---|---|
| General | GROKCLI_PROVIDER | Choose provider: xai, openai, anthropic, google, openrouter, groq, azure, github, ollama, custom |
| XAI (Grok) | XAI_API_KEY | API key for xAI Grok models |
| XAI (Grok) | XAI_MODEL | Specific Grok model to use (default: grok-4-0709) |
| OpenAI | OPENAI_API_KEY | API key for OpenAI models |
| Anthropic | ANTHROPIC_API_KEY | API key for Anthropic Claude models |
GEMINI_API_KEY | API key for Google Gemini models | |
| OpenRouter | OPENROUTER_API_KEY | API key for OpenRouter |
| Groq | GROQ_API_KEY | API key for Groq |
| Azure OpenAI | AZURE_OPENAI_API_KEY | API key for Azure OpenAI |
| Azure OpenAI | AZURE_OPENAI_ENDPOINT | Azure OpenAI endpoint URL |
| GitHub | GITHUB_TOKEN | GitHub token for GitHub Models |
| Custom | CUSTOM_API_KEY | API key for custom endpoint |
| Custom | CUSTOM_BASE_URL | Base URL for custom OpenAI-compatible endpoint |
| Ollama | GROKCLI_OLLAMA_ENDPOINT | Ollama service endpoint (default: http://localhost:11434) |
| Ollama | GROKCLI_OLLAMA_MODEL | Specific Ollama model to use (auto-detected) |
| Ollama | OLLAMA_HOST | Alternative Ollama endpoint (fallback) |
| Debug | DEBUG | Enable verbose logging |
When GROKCLI_PROVIDER is not set, Grok CLI auto-detects based on available API keys in this priority order:
xai > openai > anthropic > google > openrouter > groq > azure > github > custom > ollama
Once the CLI is running, you can start interacting with AI models from your shell.
Start a project from a new directory:
cd new-project
export XAI_API_KEY="your_key"
grok
> Write me a Discord bot that answers questions using a FAQ.md file I will provide
Work with an existing project using Ollama:
git clone https://github.com/stevederico/skateboard
cd skateboard
export GROKCLI_PROVIDER=ollama
grok
> Give me a summary of all of the changes that went in yesterday
Ask a quick question with XAI:
export XAI_API_KEY="your_key"
grok -p "Explain what this code does" < main.js
Use Anthropic for code review:
export ANTHROPIC_API_KEY="your_key"
echo "Review this for bugs" | grok -p "analyze the code"
Head over to the troubleshooting guide if you're having issues.
This project is licensed under the Apache License 2.0 - see the LICENSE file for details.
For details on the terms of service and privacy notice applicable to your use of Grok CLI, see the Terms of Service and Privacy Notice.
This project is not an official product or initiative of xAI or Grok. It is an independent endeavor and is not endorsed, sponsored, or affiliated with xAI or Grok in any way.
FAQs
Grok CLI - Universal LLM CLI
We found that @stevederico/grok-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.