Can I use KeystoneJS as a CLI?

Yes. KosmoKrator exposes a KeystoneJS CLI through kosmo integrations:call and the provider shortcut command. Commands can return JSON for scripts, CI, and coding agents.

Can I expose KeystoneJS through MCP?

Yes. The KosmoKrator MCP gateway can expose selected KeystoneJS tools to clients such as Claude Code, Cursor, Codex, and other MCP-compatible tools.

Where are KeystoneJS credentials stored?

KeystoneJS credentials are configured in KosmoKrator's local integration settings and reused by CLI, Lua, and MCP gateway surfaces.

Can I deny write access for KeystoneJS MCP tools?

Yes. Start the gateway with --write=deny for read-only clients, or use ask/allow only for trusted workspaces.

data

KeystoneJS CLI for CI

Use the KeystoneJS CLI for CI with headless JSON commands, schema discovery, credentials, and permission controls.

7 functions 6 read 1 write Bearer token auth

Submit KeystoneJS feedback View package source

KeystoneJS CLI for CI

Run integration calls from CI jobs with JSON output, explicit credentials, and predictable exit status.

Use this shape when a pipeline needs to read or update an external service. The KeystoneJS CLI uses the same integration registry as the TUI, Lua runtime, and MCP gateway, but returns predictable command output for automation.

Command Shape

# KeystoneJS CLI for CI
kosmokrator integrations:configure keystone --set access_token="$KEYSTONE_ACCESS_TOKEN" --set url="$KEYSTONE_URL" --enable --read allow --write ask --json
kosmo integrations:call keystone.keystone_list_lists '{}' --json

Discovery Before Execution

Agents and scripts can inspect KeystoneJS docs and schemas before choosing a function.

kosmo integrations:docs keystone --json
kosmo integrations:docs keystone.keystone_list_lists --json
kosmo integrations:schema keystone.keystone_list_lists --json
kosmo integrations:search "KeystoneJS" --json
kosmo integrations:list --json

Useful KeystoneJS CLI Functions

Function	Type	Parameters	Description
`keystone.keystone_list_lists`	Read	none	List all available lists (collections) in the KeystoneJS instance. Returns list keys, labels, and metadata.
`keystone.keystone_get_list`	Read	list_key	Get metadata and field schema for a specific KeystoneJS list. Returns field definitions, access control, and display configuration.
`keystone.keystone_list_items`	Read	list_key, take, skip, sort, where, search, fields	List items in a KeystoneJS list with optional filtering, sorting, and pagination. Returns an array of items from the specified list.
`keystone.keystone_get_item`	Read	list_key, id, fields	Retrieve a single item from a KeystoneJS list by its ID.
`keystone.keystone_create_item`	Write	list_key, data	Create a new item in a KeystoneJS list with the provided field values.
`keystone.keystone_list_users`	Read	take, skip, sort, where, search, fields	List users in the KeystoneJS instance with optional filtering, sorting, and pagination.
`keystone.keystone_get_current_user`	Read	fields	Get the profile of the currently authenticated KeystoneJS user. Useful for verifying the connection and understanding user permissions.

Automation Notes

Use --json for machine-readable output.
Keep credentials out of argv by using environment variables or stored KosmoKrator configuration.
Configure read/write policy before unattended runs; use --force only for trusted automation.
Use the MCP gateway instead when the agent needs dynamic tool discovery inside a conversation.

Related KeystoneJS CLI Pages

Cron Jobs KeystoneJS CLI for cron jobs. Shell Scripts KeystoneJS CLI for shell scripts. Headless Automation KeystoneJS CLI for headless automation. Coding Agents KeystoneJS CLI for coding agents.