TCCLI - 腾讯云命令行工具

通过命令行方式管理和操作腾讯云200+云产品资源，支持实例查询、启动、停止、域名解析等功能。

Security Scan

The skill is a coherent instruction-only guide for the Tencent Cloud CLI, but it instructs installing a PyPI package and configuring sensitive credentials while the skill metadata does not declare those credentials—this mismatch and the need to install/run a network package warrant caution.

Purpose & Capability

Name, description, and instructions align: SKILL.md is a usage/cheat-sheet for the Tencent Cloud CLI (tccli) and shows commands for the listed services. Nothing in the instructions attempts unrelated actions.

Instruction Scope

The instructions tell the user/agent to run `pip3 install tccli` and to run `tccli configure set secretId/secretKey` (i.e., to provision cloud credentials) and then run management commands. The instructions do not request reading unrelated system files, but they do cause storage of secrets via the CLI's config (path not documented), which is relevant to user security.

Install Mechanism

There is no formal install spec in the manifest; the SKILL.md advises `pip3 install tccli` (PyPI). Installing from PyPI is common and the README links the official GitHub, but a network install still introduces risk (supply-chain / tampered package) that the user should vet.

Credentials

The SKILL.md requires cloud credentials (secretId and secretKey) to operate, but the skill metadata declares no required environment variables or primary credential. This mismatch (instructions asking for sensitive secrets while metadata doesn't declare them) is an omission that reduces transparency. Requesting these two credentials is appropriate for a cloud CLI, but users must recognize they are sensitive and should apply least privilege.

Persistence & Privilege

The skill is instruction-only and does not request 'always:true' or ask to change other skills or global agent settings. It does imply the CLI will persist credentials in its own config, which is expected behavior for a CLI tool.

What to consider before installing

This appears to be a straightforward guide for the official Tencent Cloud CLI, but before proceeding: (1) verify the tccli package source (PyPI package name and the linked GitHub repo) to ensure it is the official project; (2) prefer creating and using least-privilege credentials or temporary keys rather than root/full-admin keys; (3) confirm where tccli stores credentials on disk (so you can secure or remove them when done); (4) consider installing the CLI in an isolated environment (container or VM) if you are unsure; and (5) never paste credentials into public chat or logs. The main concern is the metadata omission of required credentials — likely an oversight but worth confirming with the publisher before installing.

通过命令行管理腾讯云资源

---

简介

TCCLI（Tencent Cloud Command Line Interface）是腾讯云官方提供的命令行工具，支持管理 200+ 云产品。

---

安装

pip3 install tccli

配置

# 配置密钥（只需一次）
tccli configure set secretId <your-secret-id>
tccli configure set secretKey <your-secret-key>
tccli configure set region ap-guangzhou

---

常用服务速查

云服务器 (CVM)

操作	命令
查看实例列表	tccli cvm DescribeInstances
查看实例状态	tccli cvm DescribeInstancesStatus
查看可用区	tccli cvm DescribeZones
查看地域	tccli cvm DescribeRegions
查看镜像	tccli cvm DescribeImages
启动实例	tccli cvm StartInstances --InstanceIds '["ins-xxxxx"]'
停止实例	tccli cvm StopInstances --InstanceIds '["ins-xxxxx"]'
重启实例	tccli cvm RebootInstances --InstanceIds '["ins-xxxxx"]'

轻量应用服务器 (Lighthouse)

操作	命令
查看实例列表	tccli lighthouse DescribeInstances
查看套餐	tccli lighthouse DescribeBundles
查看镜像	tccli lighthouse DescribeBlueprints
查看防火墙规则	tccli lighthouse DescribeFirewallRules
创建防火墙规则	tccli lighthouse CreateFirewallRules --InstanceId ins-xxxxx --FirewallRules '[{"Protocol":"TCP","Port":"80","Action":"ACCEPT"}]'

SSL 证书

操作	命令
查看证书列表	tccli ssl DescribeCertificates
查看证书详情	tccli ssl DescribeCertificate --CertificateId xxx
下载证书	tccli ssl DownloadCertificate --CertificateId xxx
部署证书	tccli ssl DeployCertificateInstance ...

DNSPod (域名解析)

操作	命令
查看域名列表	tccli dnspod DescribeDomainList
查看域名详情	tccli dnspod DescribeDomain --Domain example.com
查看记录列表	tccli dnspod DescribeRecordList --Domain example.com
创建记录	tccli dnspod CreateRecord --Domain example.com --RecordType A --RecordLine 默认 --Value 1.2.3.4

私有网络 (VPC)

操作	命令
查看 VPC 列表	tccli vpc DescribeVpcs
查看子网列表	tccli vpc DescribeSubnets
查看安全组	tccli vpc DescribeSecurityGroups
查看安全组规则	tccli vpc DescribeSecurityGroupPolicies --SecurityGroupId sg-xxxxx

域名注册

操作	命令
查看域名列表	tccli domain DescribeDomainNameList
检查域名	tccli domain CheckDomain --DomainName example.com
查看价格	tccli domain DescribeDomainPriceList

云监控 (Monitor)

操作	命令
查看指标数据	tccli monitor GetMonitorData
查看告警策略	tccli monitor DescribeAlarmPolicies

---

输出格式

# JSON 格式（默认）
tccli cvm DescribeInstances

# 表格格式
tccli cvm DescribeInstances --output table

# 文本格式
tccli cvm DescribeInstances --output text

---

帮助命令

# 查看所有服务
tccli help

# 查看服务详情
tccli cvm help
tccli ssl help
tccli lighthouse help

# 查看具体接口
tccli cvm DescribeInstances help

---

常用参数

参数	说明	示例
--Region	指定地域	--Region ap-shanghai
--output	输出格式	--output table
--filter	过滤结果	--filter 'Instances[0].InstanceId'
--cli-unfold-argument	展开参数	用于复杂嵌套参数

---

使用示例

获取第一个实例的公网 IP

tccli cvm DescribeInstances --filter 'Instances[0].PublicIpAddresses[0]'

查看所有运行中的实例

tccli cvm DescribeInstances --Filters '[{"Name":"instance-state","Values":["RUNNING"]}]'

批量查询多个实例

tccli cvm DescribeInstances --InstanceIds '["ins-xxx1","ins-xxx2"]' --output table

---

完整服务列表

TCCLI 支持 200+ 云服务，常用包括：

服务代码	服务名称
cvm	云服务器
lighthouse	轻量应用服务器
vpc	私有网络
ssl	SSL 证书
dnspod	DNS 解析
domain	域名注册
cdn	内容分发网络
cls	日志服务
cos	对象存储
monitor	云监控
cam	访问管理
cdb	云数据库 MySQL
redis	云数据库 Redis
mongodb	云数据库 MongoDB
tke	容器服务
scf	云函数

---

参考文档

• TCCLI 官方文档
• TCCLI GitHub