neo-cli

neo-cli is the command-line client for neomilkshake services and requires an authorized account.

Install it for your platform, then use the quick-start commands to authenticate.

stable releasev1.0.17seq 18

issued2026-08-05

platformslinux-amd64 / windows-amd64

dashboardplannednot available yet

linux-amd64 / 7.5 MBsha256 020b4cb4736c3526b592390c989bdece94f496ca6f1e7574498088707a30595e

windows-amd64 / 7.9 MBsha256 94b1f6b63162915a5a061e9f59e9a51a83c5163193b50a58e93170ea5f6b0c14

Install the client

bash / linux

curl -fsSL https://cli.neomilkshake.com/neo-cli.sh | sh

# verifies size and SHA-256 from the signed release, publishes a versioned generation, then exits
# installs under ~/.config/neo-cli/client
# links ~/.local/bin/neo-cli and warns when it is not on PATH

download installer sha-256

powershell / windows

# complete the publisher-trust step below first
New-Item -ItemType Directory -Force "$HOME\bin" | Out-Null
Invoke-WebRequest https://cli.neomilkshake.com/neo-cli.ps1 -OutFile "$HOME\bin\neo-cli.ps1"

# first use installs and verifies the signed Authenticode executable

download launcher sha-256

windows publisher trust / required

Complete this explicit Current User trust step before first use.These commands download the reviewed installer and public certificates, verify the installer script against the pinned SHA-256 shown here, then install only the exact root and code-signing publisher identities enforced by that script. Windows may ask you to confirm trust for the private root. Do not disable Authenticode verification.

$TrustDir = Join-Path $HOME 'Downloads\neomilkshake-trust'
New-Item -ItemType Directory -Force $TrustDir | Out-Null
Invoke-WebRequest -UseBasicParsing https://cli.neomilkshake.com/windows-trust/install-authenticode-trust.ps1 -OutFile "$TrustDir\install-authenticode-trust.ps1"
Invoke-WebRequest -UseBasicParsing https://cli.neomilkshake.com/windows-trust/root-ca.cer -OutFile "$TrustDir\root-ca.cer"
Invoke-WebRequest -UseBasicParsing https://cli.neomilkshake.com/windows-trust/production-publisher.cer -OutFile "$TrustDir\production-publisher.cer"
$ExpectedInstaller = 'F319E94BA53397822FF039E473353E1E9AA96C22AF5C257DC10700DAC787EB21'
if ((Get-FileHash "$TrustDir\install-authenticode-trust.ps1").Hash -ne $ExpectedInstaller) { throw 'Trust installer SHA-256 mismatch' }
powershell -NoProfile -ExecutionPolicy Bypass `
  -File "$TrustDir\install-authenticode-trust.ps1" `
  -RootCertificate "$TrustDir\root-ca.cer" `
  -PublisherCertificate "$TrustDir\production-publisher.cer"

download trust installer download root certificate download publisher certificate

installer sha-256: F319E94BA53397822FF039E473353E1E9AA96C22AF5C257DC10700DAC787EB21
root sha-256: 07EF52D210A7AF3013231A1F678778E8F0C055B3CD1FFE5E076661DD63939836
publisher sha-256: 50FCB6C85FD87040D158009DEC5E846E10A35C5803ED00922D0C259DE4889C03

Quick start

01neo-cli login

Authenticate

Open the device-login URL and approve this terminal.

02neo-cli whoami

Inspect identity

Confirm the active identity and token scopes.

03neo-cli service list

Discover

List services available to the current token.

04neo-cli --help

Get help

Help resolves dynamically after login.

Shell completion

bashsource <(neo-cli completion bash)
zshsource <(neo-cli completion zsh)
fishneo-cli completion fish | source
powershell& "$HOME/bin/neo-cli.ps1" completion | Out-String | Invoke-Expression

Add the matching command to your shell profile. On Windows the completion hook calls the launcher.

Stay current

update-check compares the running version with the server minimum and latest release. update downloads, verifies, and installs an available release.

neo-cli update-checkcompare

neo-cli updateinstall

Identity and recovery

Login and enrollment

login authorizes this client. Compiled clients can use device enroll --name NAME for a durable root device credential. Use --user LABEL to keep local identities separate; labels are local, not account selectors.

Installation locations

Linux generations live under ~/.config/neo-cli/client with ~/.local/bin/neo-cli linked to the current generation. The installer never edits profiles and warns when that bin directory is missing from PATH. Windows keeps the launcher at $HOME\bin\neo-cli.ps1.

Recover or remove

Re-run the Linux installer to recover its generation. On Windows, download the current launcher and run & "$HOME\bin\neo-cli.ps1" --reinstall; this Authenticode-verifies and selects the current client without removing credentials. Remove the Linux link and client directory, or the Windows launcher and its installed client directory, to uninstall. Reinstalling does not bypass login, enrollment, or publisher trust.

$ neo-cli