Manage the CLI after installation

Upgrade, pin, uninstall, or update Cortex CLI through automated downloads.

Manage Cortex CLI with a package manager or download script. Use either method in CI/CD pipelines or local environments.

Package managers

macOS and Linux

• Upgrade to the latest version

  brew upgrade cortexcli

• Pin the installed version

  brew pin cortexcli

• Uninstall the CLI

  brew uninstall cortexcli

Windows

• Upgrade to the latest version

  scoop update cortexcli

• Prevent upgrades

  scoop hold cortexcli

• Allow upgrades again

  scoop unhold cortexcli

• Uninstall the CLI

  scoop uninstall cortexcli

Automate binary downloads

Use this script for a manual installation. It downloads the latest release for your operating system and architecture. Replace your existing binary with the downloaded file. On macOS and Linux, make it executable with chmod +x.

crtx_resp=$(curl --fail "<CORTEX_API_URL>/public_api/v1/unified-cli/releases/download-link?os=<OS>&architecture=<ARCH>" \
  -H "x-xdr-auth-id: <AUTH_ID>" \
  -H "Authorization: ${CORTEX_API_KEY}") \
  && crtx_url=$(echo $crtx_resp | jq -r ".signed_url") \
  && crtx_file=$(echo $crtx_resp | jq -r ".file_name") \
  && curl -o $crtx_file $crtx_url

Replace the placeholders

• CORTEX_API_KEY: Your API key
• <CORTEX_API_URL>: Your tenant API base URL
• <AUTH_ID>: Your API key ID value
• <OS>: Your operating system — linux, darwin, or windows
• <ARCH>: Your system architecture — such as amd64 or arm64

For credential configuration options, see Authenticate credentials.

How the script works

The script:

1. Requests a signed download link from Cortex Cloud for the latest release matching your OS and architecture.
2. Uses jq to extract the signed URL and binary filename.
3. Downloads the binary from the signed URL.