@pleri/pylon-cli

@pleri/pylon-cli

The pylon command-line client for Pylon — a centralised RBAC + identity service for MCP servers.

Install

npm install -g @pleri/pylon-cli

Or run any command via npx:

npx -p @pleri/pylon-cli pylon login --org-url=https://pylon.acme.internal

Quick start

pylon login --org-url=https://pylon.acme.internal     # first time
pylon whoami                                           # confirm session

After first login the org id is cached; subsequent commands omit the URL:

pylon whoami
pylon role list --app=olam
pylon audit tail --action=role.granted

Commands

Command	Purpose
pylon login	Device-code authentication against your org's Pylon
pylon logout	Clear the session for an org
pylon forget	Remove an org entirely (config + session)
pylon whoami	Show your active session + archetype
pylon use	Switch the default org
pylon app register	Enrol a new MCP (admin only)
pylon app list	List enrolled MCPs
pylon app disable	Disable an MCP — revokes future scoped tokens
pylon role grant	Grant a user role for an MCP
pylon role list	List role grants for an MCP (opaque hashes)
pylon role revoke	Revoke a role
pylon audit tail	Query the audit log

Full reference: docs/CLI.md.

Where things live

Thing	Path
Session JWTs	OS keyring (Keychain / Credential Manager / Secret Service)
Org metadata	~/.pylon/config.yaml
Scoped tokens	In-process memory only (never on disk)

Headless / CI: set PYLON_ORG_URL + PYLON_SESSION_TOKEN env vars instead of using the keyring.

License

MIT