Skip to content
 
 
 
Cloud.Red Tooling

Your BIG-IP fleet,
on the command line.

Stop hunting through portals. SSH into any device, push a config, or open a web console with a single command. SSO-secured. AI-ready. Installs in under 2 minutes.

Under 2 minInstall time
 
ZeroDependencies
 
6 platformsLinux · macOS · Windows
 
 
 
Terminal — crcli
# SSH any device by hostname
$ crcli devices ssh bigip-prod-01
Connected to bigip-prod-01 (10.1.1.50)
 
# Pull configs from an entire HA pair
$ crcli devicegroups pull prod-ha /config/bigip.conf -o ./configs/
✓ bigip-prod-01_bigip.conf (24.3 KB)
✓ bigip-prod-02_bigip.conf (24.1 KB)
 
# Run a script across multiple groups
$ crcli devicegroups ssh prod-ha dr-ha -S ./check.sh --group
[bigip-prod-01] All pools healthy
[bigip-dr-01] pool_web: 1 member down
 
# Open the web console
$ crcli devices web bigip-prod-01
Opening TMUI in browser...
 
See the Difference

Six clicks become one line.

Without crcli

Open the customer portal
Find the device by name or UUID
Click the SSH or web button
Wait for the session to spawn
Repeat for every device
→

With crcli

# SSH any device by hostname$ crcli devices ssh bigip-prod-01
# Pull a config to your laptop$ crcli devices pull bigip-prod-01 /config/bigip.conf
# Open the web UI$ crcli devices web bigip-prod-01
Why crcli

Three reasons your team will never go back to the portal.

01
One Command, Zero Clicks

Every fleet operation — SSH, file transfer, web console, iControl REST — is a single command. Use hostnames, not UUIDs. Run scripts across multiple device groups simultaneously with output grouped per device.

  • crcli devicegroups ssh prod-ha dr-ha -S ./check.sh --group
  • crcli devicegroups pull prod-ha /config/bigip.conf -o ./configs/
  • crcli ssh   ← interactive fuzzy-search device selector
 
▶ 60s: Fleet ops in one line
 
▶ 60s: SSO from the terminal
02
SSO from the Terminal

OAuth 2.0 device flow. Your token goes straight into the OS keychain — never written to disk in plaintext. Auto-refreshes. Full RBAC enforcement. Every action logged with the authenticated user's identity.

  • crcli auth login   ← browser SSO, token → keychain
  • crcli auth status   ← verify auth + expiry
  • RBAC: View for reading, Write for changes, Admin for accounts
03
AI-Ready: Built-in MCP Server

The industry's first MCP-enabled F5 fleet manager. Claude, Cursor, or any AI assistant can list devices, run scripts, pull configs, and query metrics — using hostnames, secured by the same SSO and RBAC. Nobody else has this.

  • "Run tmsh show ltm pool recursive on all groups and summarize"
  • "Pull configs from active and standby in prod-ha and diff them"
  • "Generate a qkview on each device in prod-ha"
 
▶ 60s: AI meets your F5 fleet
 
What's Inside

Everything your team needs.

🔍
Hostname Resolution
No more UUID hunting. Use hostnames everywhere.
⚡
HA Pair as One
Target active, standby, or both with a single flag.
📦
Bulk File Transfer
Push or pull files across a group simultaneously.
🎯
Interactive Selector
Searchable device picker with fuzzy search.
🔫
iControl REST Proxy
Authenticated session, ready for your scripts.
🤖
MCP Server
For Claude, Cursor, and any AI assistant.
⌨
Shell Completions
Bash and Zsh completions out of the box.
🔄
Self-Update
One command to check and apply updates.
Download

One binary. Zero dependencies.

Download the binary for your platform and drop it in your PATH.

admin.cloud.red/downloads/crcli/<os>/<arch>/
Get Started

Up and running in under 2 minutes.

1

Download the Binary

One static binary. No runtime. No package manager required.

Linux macOS Windows
2

Point It at Your Tenant

Your tenant name is the subdomain of your Cloud Red portal URL.

$ crcli setup <your-tenant>
3

Authenticate via SSO

Browser opens. Complete your login. Token stored in keychain. Done.

$ crcli auth login
 
WorldTech IT · Cloud.Red

20 minutes. That's all we need.

See crcli running against a live fleet. No slides. No pitch deck. Just a terminal and your questions.

Book Your 20-Minute Demo