Skip to navigation

Daemon commands

The daemon is a long-running local HTTPS proxy that runs on your machine and transparently routes outbound API calls through the Passport Proxy. It lets external clients like curl, scripts, and SDKs use Passport without any code changes — configure your HTTP client to use http://127.0.0.1:10144 as its proxy, and the daemon handles the rest.

On macOS, the daemon auto-starts on sign-in using launchd. On Windows, the daemon also auto-starts on sign-in. On Linux, start it manually with passport daemon start.

For a live view of daemon activity, see View the terminal dashboard.

passport daemon install

Install the daemon and configure it to start automatically on sign in. On macOS, this installs LaunchAgents and sets HTTPS_PROXY so external clients pick it up without manual export commands.

passport setup installs and starts the daemon automatically. Use this command only if you need to reinstall after running passport daemon uninstall.

Usage

passport daemon install [options]

Options

--port <port>
Defaults to 10144

Port for the daemon to listen on.

--write-to <rcfile>

Append the shell-init snippet to an rcfile as a fallback for interactive shells.

--no-launchctl-env

Skip the env LaunchAgent and rely entirely on the rcfile. Advanced use only.

--skip-vpn-check

Skip the VPN connectivity check performed at install time.

--binary <path>

Absolute path to the passport binary. Defaults to the current binary.

passport daemon uninstall

Remove the LaunchAgents and unset the launchctl environment variables.

Usage

passport daemon uninstall [options]

Options

--strip-shell-init <rcfile>

Remove the sentinel-bracketed block from the specified rcfile.

passport daemon start

Start the daemon. By default, the daemon runs as a detached background process.

Usage

passport daemon start [options]

Options

--port <port>
Defaults to 10144

Port for the daemon to listen on.

--foreground

Run in the current process without detaching.

--insecure-proxy-hostname

Skip the outer TLS hostname check on the upstream handshake. The certificate chain is still validated.

passport daemon stop

Stop the running daemon.

Usage

passport daemon stop

passport daemon restart

Stop and restart the daemon.

Usage

passport daemon restart [options]

Options

--port <port>
Defaults to 10144

Port for the daemon to listen on after restart.

passport daemon status

Report the daemon’s running state, certificate expiration, and upstream reachability. For more information, see Check the daemon.

Usage

passport daemon status [options]

Options

--json

Emit raw JSON instead of formatted text.

passport daemon logs

Tail the daemon’s log file.

Usage

passport daemon logs [options]

Options

-f, --follow

Keep streaming new lines as they’re written.

-n, --lines <n>
Defaults to 100

Number of most recent lines to print first.

--level <level>

Only show lines at or above this level. Accepts debug, info, warn, or error.

--json

Emit raw JSON lines instead of formatted text.