withfeedback CLI

Command-line client for withfeedback.com: testimonials, feedback moderation, CSV imports, surveys, NPS, widgets, and quota usage — from your terminal or CI.

Install

pip install withfeedback
# or run without installing:
uvx withfeedback --help

The console command is withfeedback.

Quick start with a personal access token (PAT)

Good for CI and quick scripting:

1. Log in at your withfeedback.com instance and open Account → API Tokens (/accounts/tokens/).

2. Create a token with the scopes you need (see the table below).

3. Either export it per-shell:

   export WITHFEEDBACK_TOKEN=spd_abc123...
   withfeedback testimonials list --team <TEAM_ID> --project <PROJECT_ID>
   

   or persist it in the OS keychain:

   withfeedback login --token spd_abc123...
   

API access requires a plan that includes the API/CLI/MCP feature (Pro and above).

Login via OAuth2 device flow (interactive)

withfeedback login

No flags needed against withfeedback.com — the CLI defaults to the official public client id 7yQMsnY2Is2f5tCuwwgItoQu3fRkEX2wnzIRj0Vh (public by design — device-flow clients carry no secret). For a self-hosted instance pass your own client:

withfeedback login --client-id <CLIENT_ID>       # or WITHFEEDBACK_CLIENT_ID

What happens:

1. The CLI calls POST /o/device-authorization/ and prints a verification URL plus a short code (it also tries to open your browser).
2. You open the URL, enter the code, and approve the requested scopes.
3. The CLI polls POST /o/token/ until you approve, then stores the access and refresh tokens in the OS keychain via keyring (macOS Keychain, Windows Credential Locker, Secret Service/KWallet on Linux) — never in a plaintext file.

When an access token expires, the CLI transparently refreshes it. Refresh tokens rotate on every use; the rotated token replaces the stored one. (Stored PATs are never "refreshed" — if a PAT is rejected, the CLI tells you to create a new one and run withfeedback login --token again.)

withfeedback logout   # remove stored tokens from the keychain

Token resolution precedence for every command: --token flag > WITHFEEDBACK_TOKEN env var > OS keychain.

Commands

withfeedback login [--client-id <ID> | --token <PAT>]
withfeedback logout

withfeedback testimonials list    --team <ID> --project <ID> [--status pending|approved|rejected|spam] [--rating N] [--q text] [--json]
withfeedback testimonials approve <SUBMISSION_ID> --team <ID> [--json]
withfeedback testimonials reject  <SUBMISSION_ID> --team <ID> [--json]
withfeedback testimonials create  --team <ID> --project <ID> --text "..." [--rating N] [--name ..] [--email ..] [--title ..] [--company ..] [--consent] [--tag t]... [--json]

withfeedback import csv FILE --team <ID> --project <ID> --text-col COL [--rating-col COL] [--name-col COL] [--email-col COL] [--consent] [--json]

withfeedback surveys list  --team <ID> --project <ID> [--json]
withfeedback nps summary   --team <ID> --project <ID> [--json]
withfeedback widgets list  --team <ID> --project <ID> [--json]
withfeedback usage         --team <ID> [--json]

Human output is plain text tables. Pass --json for machine-readable output (raw API responses) — errors still go to stderr.

CSV import

withfeedback import csv validates the file locally (header columns, row count), builds the column mapping from your --*-col options, and uploads the file to the server's multipart import endpoint. Rows are processed asynchronously and land as pending submissions; the command prints the batch id and a status URL to poll.

withfeedback import csv reviews.csv \
  --team <TEAM_ID> --project <PROJECT_ID> \
  --text-col "Testimonial" --rating-col "Stars" \
  --name-col "Author" --email-col "Email" --consent

Pass --consent only when display consent was actually collected for these rows.

Required scopes per command

Exit codes

On API errors the API's error detail is printed to stderr.

Environment variables

On the first request of a run the CLI checks GET /.well-known/speedpy.json once and warns (never fails) when the manifest is unreachable or the API is older than the minimum this client expects.

Development

uv run --with pytest --with httpx --with click --with keyring pytest packages/withfeedback-cli/