Skip to main content
The CLI lets local scripts and agents use Access from a terminal. It uses an agent profile’s MCP credential, grants, approvals, and rate limits. It is not a desktop administration command line.

​
Enable and authenticate

  1. Install Access and create an agent profile and credential.
  2. Open Access Channels → CLI and enable Allow CLI commands.
  3. Supply the credential through GATETRIX_MCP_TOKEN or GATETRIX_ACCESS_TOKEN in the process environment. Use your local secret-management mechanism; do not put a real token in chat, a repository, or command history.
The installed app includes gatetrix-cli; no separate Node installation is needed. With the app in its standard Applications location, inspect its help:
The examples below assume that directory is on your PATH and the token is already set in your environment.

​
Inspect the profile and read a file

Use an ID returned by root list in place of ROOT_ID. Paths are relative to that granted root:
Access only returns resources available to the authenticated profile. An empty list can mean that no resources have been granted yet.

​
Call a saved connector operation

Replace the IDs and input with a permitted operation’s actual contract:
If the response contains approval_required, the operation has not executed. Decide the request in Access and inspect its saved result through the app or MCP approval tools. Do not repeat a write to retrieve an approved result.

​
Delegate connection setup

The first two commands describe installed support and the profile’s setup window. Configuration writes require the owner to enable Configuration Mode. Use setup mcp or setup postgresql for those connection types. CLI definition files use camelCase outer fields such as connectorId and expectedUpdatedAt; nested HTTP and manifest fields use snake_case. Keep credentials out of the files. Follow the connector setup process for sign-in, review, scope verification, and closing setup access. CLI cannot create credentials, change inbound listeners, or administer profile grants.

​
Troubleshooting

Check the token, profile grants, and CLI switch when a command is denied. The MCP switches do not control the CLI, and the CLI switch does not control MCP. Use gatetrix-cli audit list to inspect permitted audit events, or Audit Log in the Mac app for the owner’s view.