CLI

CLI reference

Install, inspect, configure, and remove the Emfirge MCP client from the terminal.

The package and server

With no subcommand the package runs as an MCP stdio server; with a subcommand it manages your install.

Commands

install wires the server into detected client configs; --privacy avoids the prompt and defaults to strict. status prints wired clients, backend URL, and privacy mode. privacy shows or sets strict, balanced, or off. tokens lists local mappings at ~/.emfirge/tokens.json, which never leaves your machine.

Terminal
npx @emfirge/mcp --help
npx @emfirge/mcp install --privacy=strict
npx @emfirge/mcp status
npx @emfirge/mcp privacy strict
npx @emfirge/mcp tokens

Purge scan data

purge --role-arn <role-arn> deletes local token mappings and server-side scan data for that role. This permanently deletes records and has no undo.

Terminal
npx @emfirge/mcp purge --role-arn arn:aws:iam::<account>:role/<name>

Irreversible

Complete command reference

With no subcommand, the package runs as an MCP stdio server for the AI client; with a subcommand it manages installation. install detects Claude Desktop, Cursor, Kiro, Cline, Continue, and Codex CLI and adds the server to each config it finds. It prompts for privacy unless --privacy is passed; accepted values are strict | balanced | off, defaulting to strict and supporting scripts/CI. uninstall removes the server from all clients.

Terminal
npx @emfirge/mcp install                       # wire into all detected clients
npx @emfirge/mcp install --privacy=balanced    # non-interactive: skip prompt
npx @emfirge/mcp uninstall                      # remove from all clients
npx @emfirge/mcp status                         # wired clients, backend URL, privacy mode
npx @emfirge/mcp privacy                       # show current privacy mode
npx @emfirge/mcp privacy strict|balanced|off   # set privacy mode everywhere
npx @emfirge/mcp tokens                         # list local token mappings
npx @emfirge/mcp purge --role-arn <ARN>         # delete local + server scan data
npx @emfirge/mcp --version                      # print version
npx @emfirge/mcp --help                         # print usage

Status, privacy, tokens, and purge

status prints wired clients, backend URL, and active privacy mode. privacy with no argument prints the current mode; with strict, balanced, or off it updates every wired client. tokens lists local token → real-ID mappings at ~/.emfirge/tokens.json; this file never leaves your machine. purge --role-arn <ARN> deletes the local token map and server-side records for that role permanently, with no undo.

Terminal
npx @emfirge/mcp purge --role-arn <ARN>

Irreversible

Based on the Emfirge MCP and engine source.View source
Documentation