Skip to main content
The pioneer CLI manages the gateway service and provides maintenance commands for gateway secrets. Use it when:
  • installing the gateway on a server
  • checking gateway health
  • starting or stopping the service
  • updating gateway binaries
  • issuing a token for protocol clients
  • checking keystore status and permissions
  • cleaning orphan MCP secret values
  • rotating the superuser JWT signing material
  • debugging a desktop connection problem

​
Common commands

pioneer status
pioneer start
pioneer stop
pioneer update
pioneer issue-superuser-token
pioneer secrets status
pioneer secrets garbage-collection --dry-run
pioneer secrets rotate-jwt-token superuser
pioneer version
pioneer help

​
JSON output

Several commands support --json: 
pioneer status --json
pioneer start --json
pioneer secrets status --json
pioneer secrets garbage-collection --json
pioneer secrets rotate-jwt-token superuser --json
pioneer version --json
Use JSON output for scripts, health checks, or automation.

​
Production and development binaries

Production binary: 
pioneer
Development binary: 
pioneer-dev
The development binary is built with: 
cargo run -p pioneer-cli --features dev --bin pioneer-dev -- help
Development uses separate config, service name, runtime home, install paths, and default port.

​
Service behavior

pioneer start registers and starts a current-user service. pioneer stop stops and unregisters the service. The service runs as the current OS user.
PlatformService modeNotes
Linuxsystemd --user serviceServer/headless installs require systemd linger. If automatic setup is denied, run sudo loginctl enable-linger "$USER" and start again.
macOSper-user LaunchAgentStarts after user login. It is not a boot-time LaunchDaemon.
Windowscurrent-user Scheduled TaskStarts at user logon. It is not a boot-time Windows Service.
Tool runs execute as the user account running the gateway service.

CLI Commands

See command syntax, flags, and examples.