ihme-cli AGENTS.md

Repository instructions for ihme-cli, a terminal tool for managing Apple's iCloud Hide My Email addresses. It covers installation, Apple login, two-factor authentication, and session checks.

In plain words
What is it for?
Use them when changing or testing commands that create, list, search, edit, deactivate, reactivate, delete, or export Hide My Email addresses.
Why use it?
They give a coding agent the project's purpose and the setup details needed to work with a tool that requires Apple's account authentication.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/lroolle/ihme-cli/agents-md
Clone the repo
git clone --depth 1 https://github.com/lroolle/ihme-cli

Made for: Codex, OpenCode.

Per session 1,493 This file is loaded in full into every session.
When invoked 1,493 The same file — it is already loaded in full.
Security scan B 2 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01493 $0.01493
Opus 5 $0.00746 $0.00746
Sonnet 5 $0.00299 $0.00299
Haiku 4.5 $0.00149 $0.00149

Measured 2d ago against content hash 5f43c1463a30, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

ihme-cli AGENTS.md scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

curl -sL https://github.com/lroolle/ihme-cli/releases/latest/download/ihme_macOS_arm64.tar.gz | tar xz && sudo mv ihme /usr/local/bin/

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -sL https://github.com/lroolle/ihme-cli/releases/latest/download/ihme_macOS_arm64.tar.gz | tar xz && sudo mv ihme /usr/local/bin/
AGENTS.md · 177 lines

How it starts

The opening of the file, as written. The whole thing — 177 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

Coding agent instructions for ihme-cli — iCloud Hide My Email from the terminal.

What this tool does

ihme manages iCloud Hide My Email addresses: create, list, search, edit, deactivate, reactivate, delete, export. It authenticates via Apple's SRP-6a protocol with 2FA support and persists session tokens locally.

Prerequisites

Binary must be installed and authenticated before use:

# Install (macOS ARM)
curl -sL https://github.com/lroolle/ihme-cli/releases/latest/download/ihme_macOS_arm64.tar.gz | tar xz && sudo mv ihme /usr/local/bin/

# Install (macOS Intel)
curl -sL https://github.com/lroolle/ihme-cli/releases/latest/download/ihme_macOS_x86_64.tar.gz | tar xz && sudo mv ihme /usr/local/bin/

# Install (Linux x86_64)
curl -sL https://github.com/lroolle/ihme-cli/releases/latest/download/ihme_linux_x86_64.tar.gz | tar xz && sudo mv ihme /usr/local/bin/

# Install (Go)
go install github.com/lroolle/ihme-cli/cmd/ihme@latest

Authentication is interactive (requires human input for Apple ID + 2FA):

ihme auth login

Check session before running commands:

ihme auth status --json
# {"loggedIn":true,"appleId":"...","expired":false,...}

If exit code is 2, the user must run ihme auth login interactively.

Commands

All commands support --json for structured output and --jq <expr> for filtering.

List and search

ihme list --json                          # all addresses
ihme list --search netflix --json         # search label, address, or note
ihme list --active --json                 # only active
ihme list --inactive --json               # only inactive
ihme list --tag dev --json                # filter by tag
ihme list --sort label --json             # sort by: label, date, label:desc, date:asc
ihme list --json --jq '.addresses[0:5]'   # first 5
ihme list --json --jq '.count'            # total count

Create (two-step flow)

# Step 1: generate candidates (does NOT reserve)
ihme new github.com --json
# {"candidates":["[email protected]","[email protected]","[email protected]"],"hint":"ihme new github.com --address <address> --json","label":"github.com"}

# Step 2: reserve a specific candidate
ihme new github.com --address [email protected] --json
# {anonymousId, label, hme, isActive, ...}

# One-shot (take first candidate, no choice)
ihme new github.com --yes --json

# With tags and note
ihme new github.com --tag dev --note "main account" --json

Read the full file on GitHub · 177 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 177 lines · 1,493 tokens per session scan B 5f43c1463a30

Subscribe to this mod's changes

ihme-cli AGENTS.md is an instructions file published in the GitHub repository lroolle/ihme-cli (2 stars, last pushed 9d ago), licensed MIT. It adds 1,493 tokens to every session, about $0.0075 per session on Opus 5. A static security scan graded it B with 2 findings (asks for root, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.