cli-anything-jumpserver

name: "cli-anything-jumpserver" description: Stateful CLI harness for JumpServer bastion host management. Supports asset, user, permission, account, session, audit, and operations management via REST API, with both one-shot and interactive REPL modes. version: 0.1.0 category: infrastructure tags:

• jumpserver

• bastion

• pam

• security

• ssh

• cli commands:

• group: auth description: Authentication and session management subcommands:

  • name: login description: Authenticate to JumpServer and store session token options: ["--url", "--username", "--password", "--org", "--insecure"]
  • name: logout description: Clear the current session
  • name: status description: Show current authentication status
  • name: org description: Switch or list organizations options: ["--list"]

• group: asset description: Manage assets (hosts, devices, databases, nodes, platforms, gateways, zones) subcommands:

  • name: list description: List assets of a given type options: ["--type", "--search", "--node", "--platform", "--active/--inactive", "--limit", "--offset"]
  • name: get description: Get details of a specific asset
  • name: create description: Create a new asset options: ["--name", "--address", "--platform", "--type", "--nodes", "--dry-run"]
  • name: update description: Update an existing asset options: ["--name", "--address", "--comment", "--active/--inactive", "--dry-run"]
  • name: delete description: Delete an asset options: ["--force", "--dry-run"]
  • name: node description: Manage asset nodes (tree organization) subcommands:
    • name: list description: List nodes options: ["--tree", "--parent"]
    • name: create description: Create a new node
    • name: delete description: Delete a node
    • name: add-assets description: Add assets to a node
  • name: platform description: Manage asset platforms subcommands:
    • name: list description: List platforms
  • name: gateway description: Manage gateways subcommands:
    • name: list description: List gateways
    • name: test description: Test gateway connectivity
  • name: zone description: Manage zones subcommands:
    • name: list description: List zones

• group: user description: Manage users and user groups subcommands:

  • name: list description: List users options: ["--search", "--source", "--active/--inactive"]
  • name: get description: Get user details
  • name: create description: Create a new user options: ["--name", "--username", "--email", "--password", "--role", "--dry-run"]
  • name: update description: Update a user
  • name: delete description: Delete a user
  • name: reset-password description: Reset a user's password
  • name: unblock description: Unblock a locked user
  • name: profile description: Show current user profile
  • name: my-assets description: List assets the current user can access
  • name: group description: Manage user groups subcommands:
    • name: list description: List user groups
    • name: create description: Create a user group
    • name: members description: List members of a user group

• group: perm description: Manage asset permissions subcommands:

  • name: list description: List asset permissions options: ["--search", "--user", "--active/--inactive"]
  • name: get description: Get permission details
  • name: create description: Create a new asset permission options: ["--name", "--users", "--user-groups", "--assets", "--nodes", "--actions", "--dry-run"]
  • name: update description: Update an asset permission
  • name: delete description: Delete an asset permission
  • name: users description: List users assigned to a permission
  • name: assets description: List assets authorized by a permission

• group: account description: Manage asset accounts and credentials subcommands:

  • name: list description: List asset accounts options: ["--search", "--asset", "--secret-type", "--privileged/--unprivileged"]
  • name: get description: Get account details
  • name: create description: Create a new asset account options: ["--asset", "--username", "--secret-type", "--secret", "--dry-run"]
  • name: update description: Update an asset account
  • name: delete description: Delete an asset account
  • name: secret description: View account secrets/passwords subcommands:
    • name: view description: View an account's password/secret
    • name: history description: View password change history
  • name: template description: Manage account templates subcommands:
    • name: list description: List account templates

• group: session description: Manage terminal sessions and replays subcommands:

  • name: list description: List terminal sessions options: ["--search", "--user", "--asset", "--protocol", "--active/--finished"]
  • name: get description: Get session details
  • name: replay description: Get session replay URL/info
  • name: kill description: Kill an active session
  • name: command description: View session command history subcommands:
    • name: list description: List command records options: ["--session", "--user", "--risk"]
  • name: terminal description: Manage terminal components subcommands:
    • name: list description: List terminal components
    • name: status description: Get terminal component status

• group: audit description: View audit logs subcommands:

  • name: login description: View user login audit logs
  • name: operate description: View resource operation audit logs
  • name: ftp description: View FTP file transfer audit logs
  • name: password description: View password change audit logs
  • name: activity description: View user activity logs

• group: ops description: Manage operations and job execution subcommands:

  • name: job-list description: List execution jobs
  • name: job-log description: Get job execution log
  • name: adhoc-list description: List ad-hoc command executions
  • name: playbook-list description: List Ansible playbooks

• group: system description: Manage system settings subcommands:

  • name: settings description: List system settings
  • name: health description: Check system health
  • name: info description: Show system information

• group: label description: Manage labels subcommands:

  • name: list description: List labels

• group: role description: Manage roles and permissions subcommands:

  • name: list description: List roles
  • name: bindings description: List role bindings

cli-anything-jumpserver

Stateful CLI harness for JumpServer bastion host. Manage assets, users, permissions, accounts, sessions, audits, and more via the JumpServer REST API.

Quick Start

# Install
cd agent-harness && pip install -e .

# Authenticate
cli-anything-jumpserver auth login --url https://jumpserver.example.com --username admin

# List hosts
cli-anything-jumpserver asset list --type host

# Interactive REPL mode
cli-anything-jumpserver --interactive

Agent Usage Guidance

This CLI is designed for AI agent consumption. Key features for agents:

JSON Output Mode

All commands support --output json for machine-parseable output:

cli-anything-jumpserver asset list --type host --output json

Dry Run Mode

All mutation commands support --dry-run to preview without execution:

cli-anything-jumpserver asset create --name test --address 10.0.0.1 --platform 1 --dry-run --output json

Environment Variables

• JUMPSERVER_URL - Default JumpServer URL
• JUMPSERVER_USERNAME - Default username
• JUMPSERVER_PASSWORD - Default password

Typical Agent Workflows

1. Discovery and Inventory

# Check connection
cli-anything-jumpserver auth status --output json

# List all hosts
cli-anything-jumpserver asset list --type host --output json

# Get asset details
cli-anything-jumpserver asset get <ID> --type host --output json

# List all users
cli-anything-jumpserver user list --output json

2. User and Permission Management

# Create user
cli-anything-jumpserver user create --name "New User" --username newuser --email user@example.com --output json --dry-run

# Grant asset access
cli-anything-jumpserver perm create --name "App Access" --users "user1,user2" --assets "asset1,asset2" --output json --dry-run

# Verify permissions
cli-anything-jumpserver perm users <PERM_ID> --output json

3. Security Audit

# Check failed logins
cli-anything-jumpserver audit login --status failed --output json

# Review operations
cli-anything-jumpserver audit operate --action delete --output json

# Check active sessions
cli-anything-jumpserver session list --active --output json

# View command history
cli-anything-jumpserver session command list --risk 5 --output json

4. Session Management

# Monitor active sessions
cli-anything-jumpserver session list --active --output json

# Check terminal health
cli-anything-jumpserver session terminal list --output json
cli-anything-jumpserver session terminal status <TERMINAL_ID> --output json

Output Formats

Exit Codes

File Locations