ihme

ihme — iCloud Hide My Email CLI

Setup

Prefer the local checkout when available, so agents use the newest CLI changes:

# From the root of an ihme-cli checkout
make install

make install builds ihme and copies it to $GOPATH/bin/ihme, or to ~/go/bin/ihme when $GOPATH is unset. Make sure that directory is on PATH.

If the checkout is unavailable, install a release:

# macOS (Apple Silicon)
curl -sL https://github.com/lroolle/ihme-cli/releases/latest/download/ihme_macOS_arm64.tar.gz | tar xz && sudo mv ihme /usr/local/bin/

# macOS (Intel)
curl -sL https://github.com/lroolle/ihme-cli/releases/latest/download/ihme_macOS_x86_64.tar.gz | tar xz && sudo mv ihme /usr/local/bin/

# Linux
curl -sL https://github.com/lroolle/ihme-cli/releases/latest/download/ihme_linux_x86_64.tar.gz | tar xz && sudo mv ihme /usr/local/bin/

# Or via Go
go install github.com/lroolle/ihme-cli/cmd/ihme@latest

First run requires ihme auth login (interactive — Apple ID + 2FA).

Session lookup uses IHME_SESSION_PATH when set; otherwise it reads $XDG_CONFIG_HOME/ihme/session.json, falling back to ~/.config/ihme/session.json.

ihme auth status --json first reads the local session file, then checks whether that session can currently access iCloud. It includes Apple's /validate payload as rawResponse. Use ihme auth status --local --json only when you want the local file/timestamp check without a network request. --verbose only logs method, URL, status, and size. Current /validate success responses are account-info payloads with dsInfo and webservices; they may omit a success boolean.

JSON response shapes

list --json     → {"addresses":[{anonymousId,label,hme,isActive,createTimestamp,note,...}],"count":N,"hints":{...}}
view --json     → {"result":{anonymousId,label,hme,forwardToEmail,isActive,...},"hints":{...}}
new --json      → {"candidates":["[email protected]",...],"label":"...","preferences":["..."],"hint":"ihme new <label> --address <addr>"}
                  (preferences: the user's standing preferences, present only when any are recorded)
new -y --json   → {anonymousId,label,hme,isActive,...}
forward --json  → {"forwardTo":"...","available":[...],"hint":"ihme forward set <email>"}
auth status     → {"loggedIn":true,"appleId":"...","expired":false,"canAccessICloud":true,"rawResponse":{...},...}
deactivate      → {"status":"deactivated","hme":"...","id":"...","hints":{...}}
reactivate      → {"status":"reactivated","hme":"...","id":"...","hint":"..."}