retyc/retyc-cli repository overview

⁠Retyc CLI

⁠What is Retyc?

Retyc⁠ is a European sovereign file-sharing platform with end-to-end post-quantum encryption. Data stays in Europe, GDPR-compliant by design.

retyc-cli lets you integrate Retyc transfers and datarooms into your scripts, pipelines, and workflows - no browser required.

⁠Installation

⁠Pre-compiled binaries (recommended)

Download the binary for your platform from the latest release⁠.

⁠With go install

go install -tags prod github.com/retyc/retyc-cli@latest

⁠From source

git clone https://github.com/retyc/retyc-cli.git
cd retyc-cli
go build -tags prod -ldflags "-X github.com/retyc/retyc-cli/cmd.Version=$(git describe --tags --always)" -o retyc .

⁠With Docker

# Docker Hub
docker pull retyc/retyc-cli:latest
# GitHub Container Registry
docker pull ghcr.io/retyc/retyc-cli:latest

⁠Quick start

# 1. Authenticate (opens a browser tab, no password stored)
retyc auth login

# 2. Send a file
retyc transfer create report.pdf

# 3. List your transfers
retyc transfer ls

# 4. Download a transfer
retyc transfer download <transfer-id>

⁠Security

• Authentication: OIDC device flow (no password ever stored locally)
• File data + metadata: end-to-end encrypted with AGE⁠ post-quantum hybrid keys
• Private key caching (Linux only): the decrypted AGE identity is stored in the kernel session keyring and is never written to disk. It is scoped to the current terminal session, isolated from other users and sessions, and uses a sliding TTL (default: 60 seconds). Each access refreshes the expiration timer.
• Transport: TLS enforced by default

⁠MCP Server

retyc-cli runs as a Model Context Protocol⁠ server — connect it to your AI agent and control Retyc in plain language:

Quick setup with Claude Code:

# Use read -s to avoid storing the passphrase in shell history
read -rs RETYC_KEY_PASSPHRASE
claude mcp add --transport stdio retyc --env RETYC_KEY_PASSPHRASE="$RETYC_KEY_PASSPHRASE" -- /path/to/retyc mcp serve

Full integration guide (Claude Desktop, Cursor, Windsurf, example prompts): doc/mcp.md⁠

Claude Desktop extension (MCPB): each release ships a retyc-<version>.mcpb bundle — double-click to install in Claude Desktop, no terminal needed. See doc/mcpb.md⁠.

⁠WebDAV Server

retyc-cli also runs as a local WebDAV server — mount your datarooms as a network drive in Finder, Windows Explorer or any WebDAV client and browse, open, upload, rename and delete files with the same end-to-end encryption. Files are encrypted and decrypted locally; the servers never see plaintext.

read -rs RETYC_KEY_PASSPHRASE
export RETYC_KEY_PASSPHRASE

retyc webdav serve            # → http://localhost:8888  (datarooms under /dataroom)

Full guide (mounting on macOS/Windows/Linux, authentication, limitations): doc/webdav.md⁠.

⁠Privacy Policy

This software (CLI and MCP server) embeds the entire encryption layer: file contents and metadata are encrypted locally (post-quantum AGE) before transmission, and its only network endpoint is the Retyc API — Retyc servers never see plaintext. In MCP mode, tool responses return decrypted metadata (filenames, sizes, member lists) to your MCP client; file contents are never included in responses (see SECURITY.md⁠). Full policy: https://retyc.com/legal/data-policy⁠

⁠Documentation

⁠Development

# Run in dev mode
go run . --help

# Run tests
go test -race ./...

# Production build
go build -tags prod -ldflags "-X github.com/retyc/retyc-cli/cmd.Version=v0.1.0" -o retyc .

⁠License

MIT⁠ - © Retyc / TripleStack SAS