
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
@runloop/rl-cli
Advanced tools
A TUI + CLI for the Runloop.ai platform. Use it as an interactive TUI (Terminal User Interface) with rich UI components, or as a traditional CLI for scripting and automation.
# TUI mode - launches an interactive terminal UI
rli
# CLI mode - perfect for scripts and automation
rli devbox list # Outputs JSON/text
rli devbox create --name my-devbox
rli devbox exec <devbox-id> echo "Hello World"
rli devbox delete <devbox-id>
Install globally via npm or pnpm:
npm install -g @runloop/rl-cli
# or
pnpm add -g @runloop/rl-cli
Configure your API key:
export RUNLOOP_API_KEY=your_api_key_here
Get your API key from https://runloop.ai/settings
rli # Launch the interactive TUI
rli --help # See help information
All commands support --output (-o) for format control:
rli devbox list # Default text output
rli devbox list -o json # JSON output
rli devbox list -o yaml # YAML output
The CLI is organized into command buckets:
d)rli devbox create # Create a new devbox
rli devbox list # List all devboxes
rli devbox delete <id> # Shutdown a devbox
rli devbox exec <id> <command...> # Execute a command in a devbox
rli devbox exec-async <id> <command...> # Execute a command asynchronously on a...
rli devbox upload <id> <file> # Upload a file to a devbox
rli devbox get <id> # Get devbox details
rli devbox get-async <id> <execution-id> # Get status of an async execution
rli devbox suspend <id> # Suspend a devbox
rli devbox resume <id> # Resume a suspended devbox
rli devbox shutdown <id> # Shutdown a devbox
rli devbox ssh <id> # SSH into a devbox
rli devbox scp <src> <dst> # Copy files to/from a devbox using scp...
rli devbox rsync <src> <dst> # Sync files to/from a devbox using rsy...
rli devbox tunnel <id> <ports> # Create a port-forwarding tunnel to a ...
rli devbox read <id> # Read a file from a devbox using the API
rli devbox write <id> # Write a file to a devbox using the API
rli devbox download <id> # Download a file from a devbox
rli devbox send-stdin <id> <execution-id> # Send stdin to a running async execution
rli devbox logs <id> # View devbox logs
snap)rli snapshot list # List all snapshots
rli snapshot create <devbox-id> # Create a snapshot of a devbox
rli snapshot delete <id> # Delete a snapshot
rli snapshot get <id> # Get snapshot details
rli snapshot prune <devbox-id> # Delete old snapshots for a devbox, ke...
rli snapshot status <snapshot-id> # Get snapshot operation status
bp)rli blueprint list # List all blueprints
rli blueprint create # Create a new blueprint
rli blueprint get <name-or-id> # Get blueprint details by name or ID (...
rli blueprint logs <name-or-id> # Get blueprint build logs by name or I...
rli blueprint delete <id> # Delete a blueprint by ID
rli blueprint prune <name> # Delete old blueprint builds, keeping ...
rli blueprint from-dockerfile # Create a blueprint from a Dockerfile ...
obj)rli object list # List objects
rli object get <id> # Get object details
rli object download <id> <path> # Download object to local file
rli object upload <path> # Upload a file as an object
rli object delete <id> # Delete an object (irreversible)
np)rli network-policy list # List network policies
rli network-policy get <id> # Get network policy details
rli network-policy create # Create a new network policy
rli network-policy delete <id> # Delete a network policy
s)rli secret create <name> # Create a new secret. Value can be pip...
rli secret list # List all secrets
rli secret get <name> # Get secret metadata by name
rli secret update <name> # Update a secret value (value from std...
rli secret delete <name> # Delete a secret
gwc)rli gateway-config list # List gateway configurations
rli gateway-config create # Create a new gateway configuration
rli gateway-config get <id> # Get gateway configuration details
rli gateway-config update <id> # Update a gateway configuration
rli gateway-config delete <id> # Delete a gateway configuration
mcpc)rli mcp-config list # List MCP configurations
rli mcp-config create # Create a new MCP configuration
rli mcp-config get <id> # Get MCP configuration details
rli mcp-config update <id> # Update an MCP configuration
rli mcp-config delete <id> # Delete an MCP configuration
rli mcp start # Start the MCP server
rli mcp install # Install Runloop MCP server configurat...
bmj)rli benchmark-job run # Run a benchmark job with one or more ...
rli benchmark-job summary <id> # Get benchmark job summary and results
rli benchmark-job watch <id> # Watch benchmark job progress in real-...
rli benchmark-job list # List benchmark jobs
Runloop includes a Model Context Protocol (MCP) server that allows AI assistants like Claude to interact with your devboxes.
# Install MCP configuration
rli mcp install
# Restart Claude Desktop, then ask Claude:
# "List my devboxes" or "Create a new devbox"
# Stdio mode (for Claude Desktop)
rli mcp start
# HTTP mode (for web/remote access)
rli mcp start --http
rli mcp start --http --port 8080
Documentation:
The TUI supports both light and dark terminal themes and will automatically select the appropriate theme.
# Install dependencies
pnpm install
# Build
pnpm run build
# Watch mode
pnpm run dev
## Contributing
We welcome contributions! Please see [CONTRIBUTING.md](./CONTRIBUTING.md) for guidelines on how to contribute to this project.
## License
MIT
FAQs
Beautiful CLI for the Runloop platform
The npm package @runloop/rl-cli receives a total of 266 weekly downloads. As such, @runloop/rl-cli popularity was classified as not popular.
We found that @runloop/rl-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.