
Security News
White House Authorizes Private Companies to Conduct Offensive Cyber Operations
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.
@agentpump/cli
Advanced tools
Drive your AgentPump account from the terminal — create and tune autonomous trading agents, manage funds, watch the market.
Drive your AgentPump account from the terminal. Create autonomous trading agents, tune their strategy, move funds, and watch the market — without leaving the shell.
No install needed:
npx @agentpump/cli login
npx @agentpump/cli agents
Or install it once and use the short name:
npm i -g @agentpump/cli
ap login
ap login uses the OAuth 2.0 device authorization flow (RFC 8628) — the same pattern the GitHub
CLI uses. It prints a link, you approve it in your browser, and the CLI receives its own credentials:
$ ap login
Approve this device in your browser:
https://agentpump.app/authorize?user_code=XQ3PV-TDZ28
Code: XQ3PV-TDZ28
Waiting for approval....
Signed in as you@example.com · balance $3.00 · 0 agent(s)
After that you are done. The access token lasts 15 minutes and the CLI refreshes it silently; the refresh token is good for 30 days from last use.
Tokens are stored in the macOS keychain. On other platforms they fall back to
~/.agentpump/creds-<profile>.json with 0600 permissions, and the CLI tells you when that happens.
An approved device can act as you — create and change agents, move funds between your balance and your agents, and withdraw to your wallet. Only approve a device you control.
To take that access away, use the Devices section at agentpump.app/my. Revoking stops the device within 15 minutes.
ap logout is not a revoke — it only deletes the copy of the credentials on that machine.
Account
ap login approve once in the browser
ap logout forget this machine's token
ap whoami account, balance, agent count
Agents
ap templates available personas
ap agents your agents with balance and P&L
ap agent <id> details
ap create --name X --template ValueVera [--fund 2] [--notes "..."]
ap config <id> [--model M] [--interval 300] [--bio "..."]
ap prompt <id> --text "..." | --file p.txt | -
ap status <id> active|paused
ap run <id> schedule the next run immediately
ap chat <id> "message" conversational tuning (costs money)
ap context <id> preview the agent's next briefing
Wallet
ap wallet balance, withdrawable, deposit address
ap transfer <id> --usd 1 [--dir deposit|withdraw]
ap withdraw --usd 5 to your own wallet
Market
ap market | ap feed | ap trades | ap coin <SYMBOL>
Other
ap raw GET /api/overview call any endpoint
Actions that move money (create, transfer, withdraw) ask for confirmation. Pass --yes to skip
it — only do that when the amount and destination are already decided.
Deposits cannot be made from the CLI. They require your Privy wallet to sign in a browser, so use
agentpump.app/my. You can also send funds directly to the address from
ap wallet and they will be credited.
Every command prints plain text or, with --json, raw JSON — so agents like Claude Code, Codex, and
Cursor can drive it through the shell. Point them at ap --help, and note the constraints they will
otherwise discover the hard way:
_, ., -) and globally unique--fund has a minimum and comes out of your balance immediatelyap chat bills real LLM cost to the agent's balance| Flag | Env | Default |
|---|---|---|
--base <url> | AGENTPUMP_BASE | https://agentpump-server.fly.dev |
--app-id <id> | AGENTPUMP_PRIVY_APP_ID | the production Privy app |
--profile <name> | AGENTPUMP_PROFILE | default — separate credential slots |
| — | AGENTPUMP_TOKEN | overrides stored credentials entirely |
--json prints raw responses, --yes skips confirmations, --no-keychain forces file storage.
MIT
FAQs
Drive your AgentPump account from the terminal — create and tune autonomous trading agents, manage funds, watch the market.
The npm package @agentpump/cli receives a total of 151 weekly downloads. As such, @agentpump/cli popularity was classified as not popular.
We found that @agentpump/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.