--- title: Ping CLI description: Overview of Ping CLI, a command-line tool for scripting and automating Ping identity configuration in agentic development and CI/CD pipelines. component: build-with-ai page_id: build-with-ai:pingcli:overview canonical_url: https://developer.pingidentity.com/build-with-ai/pingcli/overview.html llms_txt: https://developer.pingidentity.com/build-with-ai/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md revdate: June 18, 2026 section_ids: role-in-the-ai-first-stack: Role in the AI-first stack deployment-contexts: Deployment contexts development-and-sandbox: Development and sandbox cicd-and-production: CI/CD and production agent-skills-for-ping-cli: Agent Skills for Ping CLI get-started: Get started full-documentation: Full documentation --- # Ping CLI [icon: circle-check, set=far]PingOne [icon: circle-check, set=far]DaVinci [icon: circle-check, set=far]Authorize [icon: circle-check, set=far]Credentials [icon: circle-check, set=far]MFA [icon: circle-check, set=far]Protect [icon: circle-check, set=far]Verify [icon: circle-check, set=far]PingFederate Ping CLI is a cross-platform command-line tool for performing AI-first headless identity operations against Ping Identity services. It's the workflow execution layer: the piece that lets AI agents and developers automate, script, and promote identity configuration without opening a browser console. Where MCP servers give your AI agent interactive, natural language access to Ping Identity platforms, Ping CLI handles repeatable, scriptable operations: running commands in CI/CD pipelines, promoting configuration across environments, and automating tasks that happen outside of an IDE session. Ping CLI plays two distinct roles in agentic workflows depending on the environment: * In **development and sandbox** environments, it gives agent harnesses a direct interface to Ping Identity platform APIs when MCP is not available, enabling rapid prototyping with full CLI-managed authentication. * In **production** environments, the agent uses Ping CLI to export configuration from a development environment, creates a pull request against a config-as-code repository, and initiates the GitOps promotion workflow. The agent can then drive that workflow — triggering runs, monitoring status, and retrying failures. The pipeline itself invokes Ping CLI to apply configuration deterministically to the target environment. The agent never calls production APIs directly; the pipeline is the governance gate. ## Role in the AI-first stack | Layer | Tool | Context | | ------------------------- | ---------------------------------- | -------------------------------------------------------------------- | | Discovery | Agent-ready docs and `llms.txt` | All environments | | Domain expertise | Agent Skills | All environments | | Interactive configuration | AIC MCP Server, DaVinci MCP Server | IDE sessions with MCP host available | | Workflow execution | **Ping CLI**, Terraform | Sandbox (direct); production (export → GitOps PR → pipeline applies) | ![pingcli-deployment-contexts](https://kroki.io/plantuml/svg/eNqdksFq3DAQhu9-isG5JJRkySE95BBwvQkshHYhPRaKIo2dIbJGyLKbtPS5eu-TdaT17prsQqBjbCzp0z-_ZtQ_k_MqqA40d54duvgQXy1CQB2Vay0W_Q4x2KjBxq_4EitLreuEBi0fDDOqCoF_1Gw5wMlVjtlivc3ySennNvDgzITe5TiKcjAYJqzKMcPWIqRaPNS7Ss8RcK5W55hBnzniMWv17ce31FxnKSGuCqWjDMtqBVUrzktQPaj0V-zqCeXNd1iTa6G-X2VAWyoKv3EH5RJHtOxzbRfwoJx55JcSfhWwbxGUSeCLw2_u9AMMjkYMvbLQYxhJY3-Wdf2lwfFw2x2KbxVxwzSJ-T3Lvw5sBh2JHZyOpKBeLerl2YGBPC3n8GjJbbQ0afM_Lr1kfNfmFpIccH5-M9u2m9kwcpZc8TyXSivvtEOOCtdgKPUCqvUKlBYb_Z5o3iNysmuIgdoWg_SnY0ep5QuQ5J1ci6Jw8oVHjpE74GbXBaNGcprg7x9QQ3ziQD8xDXSQg7pIyvZCdY1KkyIWkwX5laJR81qgM-CO6U9Vz_cN2Oea9RCfEPzUnAtZ3jYKlPeWEsApydTpi738P1wnY0g=) ## Deployment contexts ### Development and sandbox In development and sandbox environments, an agent harness can use Ping CLI commands directly as tools. The CLI manages authentication to Ping Identity platform APIs, so the agent inherits whatever authorization has been granted to it, and can invoke commands without holding credentials directly. This pattern supports rapid prototyping and is suitable for environments that are not subject to strict governance requirements. Refer to [Using Ping CLI in development environments](agentic-development.html) for authentication delegation patterns, OAuth client recommendations for headless harnesses, and example operations. ### CI/CD and production In production environments, Ping CLI is used alongside, or as an alternative to Terraform to feed configuration into a CI/CD pipeline. The agent triggers and monitors the pipeline; the pipeline applies changes to production after a review gate. The agent never holds production credentials, nor is it directly interacting with the live production instance configuration. Refer to [Ping CLI with CI/CD pipelines](cicd-and-production.html) for the full governance model, config-as-code patterns, and a worked example. ## Agent Skills for Ping CLI Ping CLI ships with its own [Agent Skills](https://agentskills.io) support. Installing a Ping CLI skill gives your AI coding assistant direct knowledge of available commands, subcommands, flags, and service connectors, so it can construct valid CLI invocations without trial and error. | | | | - | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | The Agent Skills for Ping CLI are designed to be used for specific use cases relating to the CLI and are not included with the Ping Identity [agent plugins](../agent-skills/overview.html). | You can install the "Ping CLI usage" skill, designed to reduce the need for agents to request and interpret `--help` output: ```console pingcli agent-skills install pingcli-usage ``` After installation, your agent can reason about Ping CLI commands in context, alongside any active MCP tools or SDK skills. ## Get started [icon: rocket, set=fas, size=3x] #### [Install Ping CLI](https://developer.pingidentity.com/pingcli/latest/using_pingcli/getting-started.html) Install Ping CLI and connect to your first Ping Identity service. The getting started guide walks you through installation, authentication, and your first command. ## Full documentation The complete Ping CLI reference (installation, service connections, configuration profiles, command reference, and more) lives in the Ping CLI docs. [Ping CLI documentation](https://developer.pingidentity.com/pingcli)