Menu
CLI

reflexio config

View and update server configuration and storage credentials.

Inspect and modify the server-side configuration: extractor settings, LLM models, storage routing, and credentials.

config commands call the backend (GET /api/config, POST /api/set_config, GET /api/my_config). A reachable server is required.

In the open-source local setup, all subcommands apply. Use config show to inspect current settings and config set to patch extractor, LLM, playbook, and evaluation settings directly.


Command: reflexio config show

Print the current server configuration.

Terminal
reflexio config show [--all]
PropTypeDefaultDescription
--all?flagfalseInclude unset optional fields with their defaults. By default, fields that are None / unset are hidden.
Terminal
reflexio config show
reflexio config show --all | jq '.profile_extractor_config'

Command: reflexio config set

Update the server configuration by sending a JSON patch. Exactly one of --data or --file is required.

Terminal
reflexio config set (--data '<json>' | --file <path>)
PropTypeDefaultDescription
--data?strnoneInline JSON patch, or `@path/to/file.json` to read from disk. Mutually exclusive with --file.
--file?pathnonePath to a JSON config file. Mutually exclusive with --data.
Terminal
# Inline patch
reflexio config set --data '{"llm_provider": "openai", "llm_model": "gpt-5"}'

# Load from a file
reflexio config set --file configs/production.json

# Using @path syntax with --data
reflexio config set --data @configs/production.json

Command: reflexio config storage

Show the storage credentials the server has on file for your organization. Calls GET /api/my_config.

Terminal
reflexio config storage [--reveal]
PropTypeDefaultDescription
--reveal?flagfalsePrint the raw credentials instead of the masked summary. Prompts for confirmation first.

The default output masks secrets so it's safe to paste into bug reports. Pass --reveal when copying credentials to a new machine — you'll be asked to confirm before anything unmasked reaches the terminal.


Command: reflexio config pull

Pull server-side storage credentials down to a local .env so your machine can talk to the same backing store directly via the local lib. Currently only Supabase credentials can be pulled.

Terminal
reflexio config pull [--force] [--env-file <path>]
PropTypeDefaultDescription
--force?flagfalseOverwrite existing credential lines in the target file. Without this, pull refuses to clobber an active REFLEXIO_URL / REFLEXIO_API_KEY / SUPABASE_* line.
--env-file?path~/.reflexio/.envTarget .env file to update.

Behavior

  • Refuses to pull non-Supabase storage types.
  • Refuses to overwrite existing active credential lines unless --force is set.
  • Creates the parent directory with 0700 permissions and writes the file with 0600 so the raw credentials never land as world-readable.
  • Also writes REFLEXIO_URL / REFLEXIO_API_KEY so the local lib knows how to identify itself on the next call.
Terminal
# Pull to the default user-level env
reflexio config pull

# Pull to a project-local env, overwriting whatever is there
reflexio config pull --env-file ./.env --force

The written file contains raw Supabase credentials. Treat it like any other secret — do not commit it.