Official command-line interface for Retyc - send transfers and manage datarooms directly from your terminal. With RetycFS, mount your datarooms as a local folder on Linux. Also runs as a local MCP server: connect your AI agent and control Retyc in plain language.
Retyc is a European sovereign file-sharing platform with end-to-end post-quantum encryption. Data stays in Europe, GDPR-compliant by design.
retyc-cli lets you integrate Retyc transfers and datarooms into your scripts, pipelines, and workflows - no browser
required.
Download the binary for your platform from the latest release.
Releases are signed with cosign (keyless). To verify a binary, download it with
retyc_sha256_checksums.txt and retyc_sha256_checksums.txt.sigstore.json, then:
cosign verify-blob \
--certificate-identity 'https://github.com/retyc/retyc-cli/.github/workflows/release.yml@refs/tags/vX.Y.Z' \
--certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
--bundle retyc_sha256_checksums.txt.sigstore.json retyc_sha256_checksums.txt
sha256sum --check --ignore-missing retyc_sha256_checksums.txtThe MCPB bundle has its own .sigstore.json, verified the same way.
Each release ships a .deb package (amd64, arm64) with shell completions for bash, zsh and fish:
curl -fsSLO https://github.com/retyc/retyc-cli/releases/download/vX.Y.Z/retyc_X.Y.Z_amd64.deb
sudo apt install ./retyc_X.Y.Z_amd64.debEach release also ships an .rpm package (x86_64, aarch64):
# Fedora / RHEL / Rocky
sudo dnf install https://github.com/retyc/retyc-cli/releases/download/vX.Y.Z/retyc-X.Y.Z-1.x86_64.rpm
# openSUSE
sudo zypper install https://github.com/retyc/retyc-cli/releases/download/vX.Y.Z/retyc-X.Y.Z-1.x86_64.rpmWith both packages, fuse3, needed by retyc fs mount, is installed as a recommended package.
Example systemd units for retyc fs mount are in /usr/share/doc/retyc/examples/systemd/:
system/ for a server with a machine account, user/ for your own account on a workstation.
go install -tags prod github.com/retyc/retyc-cli@latestgit clone https://github.com/retyc/retyc-cli.git
cd retyc-cli
go build -tags prod -ldflags "-X github.com/retyc/retyc-cli/cmd.Version=$(git describe --tags --always)" -o retyc .# Docker Hub
docker pull retyc/retyc-cli:latest
# GitHub Container Registry
docker pull ghcr.io/retyc/retyc-cli:latest# 1. Authenticate (opens a browser tab, no password stored)
retyc auth login
# 2. Send a file
retyc transfer create report.pdf
# 3. List your transfers
retyc transfer ls
# 4. Download a transfer
retyc transfer download <transfer-id>- Authentication: OIDC device flow (no password ever stored locally)
- File data + metadata: end-to-end encrypted with AGE post-quantum hybrid keys
- Private key caching (Linux only): the decrypted AGE identity is stored in the kernel session keyring and is never written to disk. It is scoped to the current terminal session, isolated from other users and sessions, and uses a sliding TTL (default: 60 seconds). Each access refreshes the expiration timer.
- Transport: TLS enforced by default
retyc-cli runs as a Model Context Protocol server — connect it to your AI agent and
control Retyc in plain language:
"Create a dataroom called 'Release v2', upload ./dist/, and add alice@example.com as editor." "Send all PDFs in ./reports/ to bob@example.com, expire in 7 days." "List my latest transfers and download the most recent one into ~/Downloads/."
Quick setup with Claude Code:
# Use read -s to avoid storing the passphrase in shell history
read -rs RETYC_KEY_PASSPHRASE
claude mcp add --transport stdio retyc --env RETYC_KEY_PASSPHRASE="$RETYC_KEY_PASSPHRASE" -- /path/to/retyc mcp serveFull integration guide (Claude Desktop, Cursor, Windsurf, example prompts): doc/mcp.md
Claude Desktop extension (MCPB): each release ships a retyc-<version>.mcpb bundle —
double-click to install in Claude Desktop, no terminal needed. See doc/mcpb.md.
RetycFS mounts your datarooms as a local folder on Linux. Any program can open, edit
and save the files in it: ls, cp, a file manager, an editor, a script. Files are
encrypted and decrypted locally; the Retyc servers never see plaintext.
mkdir -p ~/retyc
retyc fs mount retyc://<dataroom-id> ~/retyc # one dataroom, the root of ~/retyc
retyc fs mount --all ~/retyc # or every dataroom, one folder eachThe command asks for the key passphrase and stays in the foreground; unmount with Ctrl-C.
Full guide: doc/retycfs.md
| Topic | Link |
|---|---|
| Full commands reference | doc/commands.md |
| RetycFS (mount datarooms as a folder, Linux) | doc/retycfs.md |
| MCP server + tools reference | doc/mcp.md |
| Docker usage | doc/docker.md |
| Claude Desktop bundle (MCPB) | doc/mcpb.md |
| CI / CD integration | doc/ci-cd.md |
| Configuration & env vars | doc/configuration.md |
# Run in dev mode
go run . --help
# Run tests
go test -race ./...
# Production build
go build -tags prod -ldflags "-X github.com/retyc/retyc-cli/cmd.Version=v0.1.0" -o retyc .MIT - © Retyc / TripleStack SAS