mg CLI

mg is the command-line interface for Moftgate Center. It is a single static binary for macOS, Linux, and Windows that talks to your Center over its API. Anything you do in the console — listing devices, triaging alerts, running scripts, tracking runs — is available as a command.

mg is designed for two audiences at once: operators who prefer the terminal, and AI agents that drive the same commands through a generated SKILL.md file.

mg auth login
mg device list --group Servers --limit 3
mg alert list --severity critical

Profiles let one mg binary talk to multiple Centers — your production Center, a staging environment, or a customer tenant. Each profile stores a URL and its own credentials.

mg --version
mg profile create prod https://center.example.local
mg profile use prod
mg profile list
mg profile delete staging

1. 1
   Point a profile at your Center

   Run mg profile create <name> <url> to register the Center URL, then select it with mg profile use <name>. Multiple profiles let you switch between production, staging, or customer tenants.

2. 2
   Log in through the browser

   mg auth login opens a browser approval flow. After you approve, a token is issued to the CLI and stored locally under the active profile.

3. 3
   Verify the session

   mg auth status shows the active session and the organization the token belongs to.

4. 4
   Log out when done

   mg auth logout revokes the token on the Center and deletes the local credentials for the profile.

mg auth login
mg auth status
mg auth logout

Every script execution — ad-hoc or saved — produces a run. Runs are the audit trail for what was executed, where, and with what result.

mg run list --status failed
mg run inspect r-9042
mg run retry r-9042 --yes

List commands print a colored, human-readable table by default. Pass -o json for machine-readable output, or --jq to project fields directly — jq output implies JSON. mg device export produces CSV.

mg device list -o json
mg device list --jq '.list[] | {id, hostname, status}'
mg device list --limit all --jq '.list | length'

mg ships with a built-in skill generator. SKILL.md teaches coding agents — Claude Code, Codex, Gemini, and others that read the .agents/skills convention — how to authenticate, which commands exist, and which flags to use.

mg skill install            # user level: ~/.agents/skills/moftgate/SKILL.md
mg skill install --project  # repo level: ./.agents/skills/moftgate/SKILL.md
mg skill describe script run

• Tokens are issued per profile through the browser approval flow and revoked with mg auth logout.
• Write operations (alert resolve, script run, run cancel/retry) require write scope on the issuing user.
• Risky operations ask for interactive confirmation; --yes skips the prompt for CI and automation.
• For on-premises Centers with self-signed certificates, pass --ca-bundle <path> instead of disabling verification.
• --insecure disables TLS verification entirely. It exists for development — never point it at a production Center.