@bestceo/cli

CIB marketing-intelligence from your terminal. Pipe it into CI, cron, pre-commit hooks, or use it interactively.

Install

# via npm
npm install -g @bestceo/cli

# via curl (requires Node 22+ to be installed first)
curl -fsSL https://best-ceo.com/install.sh | sh

# via Homebrew
brew install cib/tap/cib

Requires Node 22+.

Authenticate

cib login
# → opens device-code flow, prints verification URL + code

Or skip the flow and pass a key directly:

cib login --api-key cib_live_xxx

For CI/Docker, export the env var instead — the CLI never writes tokens to disk:

export CIB_API_KEY=cib_live_xxx

Quick tour

cib analyze https://yoursite.com --watch     # full audit
cib findings                                 # list SEO findings from latest analysis
cib fix list                                 # show fix-able findings
cib fix preview seo-h1-missing --repo you/yours
cib fix apply seo-h1-missing --repo you/yours

cib brief                                    # today's daily brief
cib chat                                     # interactive REPL
cib exec --auto low "summarize my competitors"

cib mcp install --client claude-code         # hook into your AI agent

Command reference

Auth & config

| Command | Description | |---|---| | cib login [--api-key K] | Device-code flow, or save a key directly | | cib logout | Remove key from OS keychain | | cib auth status | Show active auth source (env / keychain / unauthenticated) | | cib config show | Print local config | | cib config set <key> <value> | Set apiBase or format | | cib config unset <key> | Remove a config key | | cib version | Print CLI version | | cib health | Check CIB API health |

Analyze

| Command | Description | |---|---| | cib analyze <url> [--watch] [--json] | Trigger analysis | | cib findings [analysisId] [--severity LEVEL] [--json] | List SEO findings | | cib report <analysisId> | Print the full marketing report | | cib brief [--json] | Today's daily brief |

Fix workflow

| Command | Description | |---|---| | cib fix list [analysisId] [--json] | List fix-able findings | | cib fix preview <findingId> --repo O/R [--json] | Preview Claude-generated fix | | cib fix apply <findingId> --repo O/R [--branch B] [--json] | Open GitHub PR with the fix |

Skills

| Command | Description | |---|---| | cib skill list [--category C] [--json] | List available skills | | cib skill run <skillId> [--params JSON] | Start an async skill job | | cib skill status <jobId> [--json] | Poll a skill job |

Strategy

| Command | Description | |---|---| | cib direction show [--json] | Show strategic direction | | cib direction set [--metric N] [--target T] [--timeframe T] [--posture P] | Update direction |

Competitive + integrations

| Command | Description | |---|---| | cib competitors [--json] | Competitor intel | | cib mentions [--source reddit|hn] [--json] | Recent mentions | | cib integrations [--json] | List connected integrations | | cib connect <provider> | OAuth init (prints URL — complete in browser) |

Headless / agentic

| Command | Description | |---|---| | cib exec <prompt> [--auto low|medium|high] [--json] [--yes-apply] | One-shot agent prompt | | cib chat [message] | Interactive REPL (or one-shot if message given) | | cib resume [--last|--id SID] | Resume a previous chat session | | cib fork <prompt> [--last|--id SID] | Fork a session with a new prompt | | cib mcp install --client claude-code|droid|cursor|codex | Hook into an AI agent | | cib autopilot enable|status|disable | Opt into --auto high on this machine |

Auth sources

Priority (first match wins):

1. CIB_API_KEY environment variable
2. OS keychain (macOS Keychain / Windows Credential Manager / Linux libsecret)
3. Unauthenticated (every command will prompt you to cib login)

The CLI never writes tokens to disk. If keytar can't access the OS keychain (common on headless Linux without libsecret), cib login refuses to persist and instructs you to set CIB_API_KEY.

Autonomy levels

| --auto | What it does | |---|---| | low (default) | Read-only. No PR creation, no skill execution, no writes. | | medium | Opens PRs, runs skills. No auto-merge. | | high | Full autopilot — auto-merge fix PRs, apply writes. Requires cib autopilot enable first + --yes-apply or CIB_AUTOPILOT=1. |

Sessions

Every interactive chat writes a JSONL transcript to ~/.cib/sessions/<uuid>.jsonl.

cib chat                              # starts a new session
cib resume --last                     # continue the most recent
cib resume --id 6a1b2c3d              # continue a specific one
cib fork --last "what if we pivot?"   # branch from the most recent

Sessions stay local — no transcripts are sent to CIB except when you run a chat turn.

Config

Location: ~/.cib/config.json (mode 0600)

{
  "apiBase": "https://best-ceo.com",
  "format": "pretty",
  "autopilot": { "enabled": true, "enabledAt": "2026-04-23T12:00:00Z", "hostname": "ayt-mbp" }
}

Never contains secrets. Secrets live in the OS keychain or CIB_API_KEY.

Docs

• MCP quickstart: docs/mcp/README.md
• CIB platform: best-ceo.com