VPN Pink logo

VPN Pink Terminal & CLI →

VPN Pink CLI for macOS

Prefer a graphical interface? Open the app page.

Connect your Mac to VPN Pink from the terminal. Choose the simple WireGuard CLI or the Full CLI with WireGuard and IKEv2/IPsec. Both are operated only through the terminal and have no graphical interface.

WireGuard CLI · macOS

A compact terminal client for WireGuard users. Run it directly without installing the CLI.

  • No CLI installation required
  • Terminal operation only
  • WireGuard connections
  • Sensitive data stored in macOS Keychain
  • Intel Macs
  • Apple Silicon through Rosetta 2
Download WireGuard CLI

View SHA-256 checksums

Download and start

unzip vpn-pink-cli-wireguard-macos-x86_64.zip -d vpn-pink-cli-wireguard-macos-x86_64
cd vpn-pink-cli-wireguard-macos-x86_64
chmod +x vpn-pink-cli
./vpn-pink-cli login
./vpn-pink-cli servers
./vpn-pink-cli connect --server SERVER_ID --protocol wireguard

The WireGuard package supports only WireGuard. Install Full CLI for IKEv2/IPsec. In the standalone package, prefix commands with ./vpn-pink-cli.

Full CLI · macOS — WireGuard & IKEv2/IPsec

The complete terminal client supports WireGuard and native macOS IKEv2/IPsec. After one-time installation, use the vpn-pink-cli command. It has no graphical interface.

  • WireGuard and native IKEv2/IPsec
  • No graphical interface
  • Terminal operation only
  • Sensitive data stored in macOS Keychain
  • One-time installation
  • Intel Macs and Apple Silicon through Rosetta 2
Download Full CLI

View SHA-256 checksums

Download and start

unzip vpn-pink-cli-full-macos-x86_64.zip -d vpn-pink-cli-full-macos-x86_64
cd vpn-pink-cli-full-macos-x86_64
./install.sh

Commands

vpn-pink-cli login
vpn-pink-cli servers
vpn-pink-cli connect --server SERVER_ID --protocol ikev2
vpn-pink-cli connect --server SERVER_ID --protocol wireguard
vpn-pink-cli status
vpn-pink-cli disconnect
vpn-pink-cli logout
vpn-pink-cli doctor

Uninstall

./uninstall.sh

Run uninstall.sh from the extracted Full CLI folder. VPN profiles already saved by macOS may need to be removed separately in System Settings.

Replace SERVER_ID with an ID returned by servers for your account. Keep the extracted Full CLI folder to run uninstall.sh later.

The Apple app container in Full CLI has no graphical interface. It provides the signed container with Personal VPN entitlement needed for native macOS IKEv2/IPsec. You continue working only in the terminal.

Requirements

macOS 13 or later, an active VPN Pink account with VPN access, and an Intel Mac or Apple Silicon with Rosetta 2. WireGuard requires wireguard-tools and wireguard-go; Homebrew is recommended for installing these components.

Downloading is free. Using the VPN requires a paid plan.

Choose a plan → 
brew install wireguard-tools wireguard-go

Commands

vpn-pink-cli
vpn-pink-cli help
vpn-pink-cli --help
vpn-pink-cli login
vpn-pink-cli servers
vpn-pink-cli connect
vpn-pink-cli connect --server SERVER_ID --protocol wireguard
vpn-pink-cli connect --server SERVER_ID --protocol ikev2
vpn-pink-cli status
vpn-pink-cli disconnect
vpn-pink-cli logout
vpn-pink-cli doctor

The WireGuard package supports only WireGuard. Install Full CLI for IKEv2/IPsec. In the standalone package, prefix commands with ./vpn-pink-cli.

Security

Credentials are never passed as command arguments. Password input is hidden. Session tokens and private WireGuard keys are stored in macOS Keychain. Private WireGuard keys are never sent to VPN Pink. SHA-256 checksums are provided for both downloads.

Verify SHA-256

shasum -a 256 vpn-pink-cli-wireguard-macos-x86_64.zip
shasum -a 256 vpn-pink-cli-full-macos-x86_64.zip
View SHA-256 checksums