
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@marrowid/cli
Advanced tools
Command-line client for Marrow hosted API ingest, query, and usage workflows
The Marrow CLI is a hosted API client for the public account workflow. It keeps the surface small: configure a key, ingest a source, check job status, query evidence, and manage keys.
npm view @marrowid/cli version
npm install -g @marrowid/cli
marrow --help
Continue only after the version lookup returns a version. If the package is not available to your registry yet, wait for access before running the install command.
The package installs the marrow command and requires Node.js 20 or newer. If
your shell cannot find marrow after a global install, check that your npm
global bin directory is on PATH:
npm config get prefix
You can still run the installed package through npm:
npm exec -- marrow --help
Before continuing, verify the three discovery commands work:
marrow --help
marrow api --help
marrow api configure --help
Create an account at console.marrow.id, copy the one-time API key from the console, and store it locally:
marrow api configure
marrow api config
The hosted API endpoint is https://api.marrow.id by default. Use
--api-base-url or MARROW_API_BASE_URL only when Marrow support gives you a
different endpoint.
api configure writes ~/.marrow/config.json with file mode 0600. The CLI
reports whether a key exists, but never prints the stored key back. Paste the
console API key into the hidden prompt. For non-interactive automation, set
MARROW_API_KEY for that one setup command only.
Set MARROW_CONFIG_PATH=/path/to/config.json for isolated test or CI runs that
must not read or write your normal ~/.marrow/config.json.
Preview a public URL before writing anything:
marrow api ingest-url --dry-run --dated-at 2026-05-16 https://example.com/my-bio
Queue the live ingest when the preview looks right:
marrow api ingest-url \
--dated-at 2026-05-16 \
https://example.com/my-bio
For a local Markdown, text, PDF, HTML, or JSON file:
marrow api ingest-file --dry-run --dated-at 2026-05-16 ./source.md
marrow api ingest-file --dated-at 2026-05-16 ./source.md
Live ingest requires a source date. Use the authored, published, or otherwise source-relevant date for the material.
If the file is writing you authored in your own voice, add --style-sample to
the dry run and live ingest commands. Do not use that flag for third-party
articles, interviews, transcripts, scraped pages, or material written by
someone else.
Ingest commands print a short human-readable status by default. Add --json
only when an integration needs the structured API response.
Queued ingest appears in the recent jobs list. Poll until the job reaches
succeeded, failed, or quarantined:
marrow api ingest-jobs --limit 5
marrow api ingest-job <job_id>
Use --json on the live ingest command when an integration needs the returned
job id for marrow api ingest-job <job_id>.
After an ingest succeeds, ask one concrete evidence question:
marrow api query "What evidence supports my current work?" --limit 5 --evidence-limit 3
The default output is a compact extractive answer with numbered citations and
source excerpts. It is not a generated chat answer. Add --json only when an
integration needs the structured API response.
Check credits and request limits from the CLI:
marrow api usage
The default output is human-readable and shows remaining credits, daily limits,
monthly limits, and UTC reset dates. Add --json only when an integration needs
the structured /v1/account/usage response.
List keys, create a replacement, or revoke an old key:
marrow api api-keys
marrow api create-api-key --name "Laptop CLI"
marrow api revoke-api-key <api_key_id>
marrow api rotate-api-key <api_key_id>
marrow api delete-api-key <api_key_id>
Self-created keys are limited to hosted account setup, ingest, and query scopes.
Use marrow api usage or the console Usage tab to check credits and quotas. Use
the API keys tab to manage keys.
FAQs
Marrow CLI and local MCP for carrying context across apps and agents.
The npm package @marrowid/cli receives a total of 45 weekly downloads. As such, @marrowid/cli popularity was classified as not popular.
We found that @marrowid/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.