Skip to main content

Quickstart

Start the bundled toolbox, sign in with the default Authentik admin, then use the CLI against the hosted runtime.

1. Start the toolbox stack​

docker compose up --build

This starts Authentik, Postgres, Redis, and open-cli-toolbox. The toolbox serves the admin UI at:

http://127.0.0.1:8765/admin

2. Sign in​

Open /admin and choose Sign in with Authentik.

Default Docker quickstart credentials:

Email: admin@open-cli.local
Password: open-cli-admin

Change the password before using a shared or long-running deployment. For Helm or production-like installs, provide the initial password through a secret instead of using the quickstart default.

3. Add a source, publish, and use it​

In the admin UI:

  1. Open MCP Registry and install a starter server, or open Sources and add an OpenAPI/MCP source manually.
  2. Validate the source, then open Tools and disable anything you do not want exposed.
  3. Open Bundles / Access, link the source to a bundle, assign an Authentik user or group, and publish from Publish.
  4. Open My Tools or Install MCP Client to copy the exact user-facing config.

Then run:

open-cli --runtime http://127.0.0.1:8765 catalog list --format pretty
open-cli --runtime http://127.0.0.1:8765 auth login

The CLI talks to the toolbox runtime. MCP clients can also connect to:

http://127.0.0.1:8765/mcp

Use an Authentik bearer token for /mcp. The UI-generated install page shows the header/config shape for the signed-in user.

Configure the default admin​

For Docker, override the default account with environment variables:

OPEN_CLI_DEFAULT_ADMIN_EMAIL=you@example.com
OPEN_CLI_DEFAULT_ADMIN_PASSWORD='change-me'
docker compose up --build

For Kubernetes, put those values in a Secret and wire them into the Helm values for the toolbox and Authentik pods.