Skip to main content
The MilkStraw CLI (@milkstraw/cli) is a developer-friendly alternative to the web-based Quickstart. Use it to start or maintain your MilkStraw integration without leaving your terminal.
Prerequisites
  • An active MilkStraw AI account
  • The AWS CLI installed and configured
  • AWS credentials with access to your AWS Organization management account
  • The Engineer, Admin, or Owner role to run commands for an organization

​
Configure AWS credentials

Set up credentials using one of:
Verify your credentials are working:

​
Quick start

Run setup to authenticate, setup and deploy the MilkStraw cross role through CloudFormation stacks into your AWS organization:

​
Commands

​
Inventory

​
Commitments

​
Global options

​
Environment variables

​
AWS credential resolution

The CLI uses the AWS SDK for JavaScript v3 credential provider chain. Without --aws-profile, credentials are resolved in this order:
  1. Environment variables: AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN
  2. SSO token cache at ~/.aws/sso/cache
  3. Shared credentials file at ~/.aws/credentials (default profile)
  4. Shared config file at ~/.aws/config
  5. ECS container or EC2 instance metadata
With --aws-profile <name> (or MILKSTRAW_AWS_PROFILE), the SDK skips environment variables and uses the named profile from ~/.aws/config and ~/.aws/credentials.

​
Authentication

Tokens are stored at ~/.config/milkstraw-cli/token. Login uses the OAuth device code flow via your browser. Run milkstraw logout at any time to revoke the token and clear local auth. Tokens expire after 90 days. You can also revoke a token in the app: open Settings > Security, find the token under Access tokens, and click Revoke token.