kite-cli

Appearance

kite-cliThe Kite Connect API, from your terminal

An unofficial, secure, scriptable CLI for the Zerodha Kite Connect v3 API — credentials in your OS keyring, confirmations on anything that moves money, clean JSON for piping into jq.

Command reference
Safety model
View on GitHub

Safety first

Real orders, real money — so the defaults are conservative. A layered kill switch, per-order value cap, resolved-order confirmation, and unique-tag reconciliation for ambiguous writes.

Read the safety model

Secrets stay secret

Your API secret lives in the OS keyring (or an encrypted file), never in argv or shell history. Access tokens are scrubbed from every log line, error, and stack trace.

Credential storage

Built for scripting

Every command speaks --json, writes data to stdout and everything else to stderr, and returns a meaningful exit code. Rate limits are paced and quotes batched for you.

Scripting & automation

A library too

The same client, rate limiting, response validation, redaction, and error taxonomy are exported for programmatic use, without the CLI.

Library API reference

Unofficial, independent project. Not affiliated with, endorsed by, or sponsored by Zerodha. "Kite" and "Kite Connect" are trademarks of Zerodha Broking Ltd., referenced here only to describe the third-party API this tool works with.

Install ​

bash
npm install -g @pungoyal/kite-cli

Requires Node 22.12 or newer. Full installation and everyday-usage walkthrough lives in the README on GitHub; these pages are the deeper reference behind it.

Try it before you trust it ​

It moves real money, so convince yourself first. Every order command supports --dry-run, which resolves and previews the order — the actual contract, lot size, and computed value — without sending anything to Kite:

bash
kite login
kite holdings
kite orders place NSE:INFY --side BUY --quantity 1 --dry-run

There is no sandbox environment to fall back to — Zerodha's own Kite Connect sandbox is undocumented beyond a login form, so this CLI does not integrate with it (see CHANGELOG). --dry-run and the confirmation preview on every money-moving command are the supported way to rehearse a command before it touches your real account. And because the package is published only from CI via npm Trusted Publishing, you can verify the build provenance yourself with npm audit signatures.

Unofficial, independent project — not affiliated with, endorsed by, or sponsored by Zerodha. Released under the MIT Licence.