ytm
YouTube Music in the terminal: search, queue, radio and lyrics, with mpv doing the playing.
Overview
YouTube Music has no desktop client that is not a browser. ytm is a small Python CLI and a Textual TUI over three tools that already do the hard parts: ytmusicapi for the catalogue, yt-dlp for stream resolution and mpv for audio.
mpv is the only long-running process. ytm starts it once, idle, with a JSON IPC socket, and every command after that is a stateless message to it. Close the terminal and the music keeps playing. A Lua script inside mpv keeps the queue fed with the station for whatever is playing, so it never runs dry.
Quickstart
pipx install ytm # or: uv tool install ytm / pip install ytm
ytm auth # cookies from a logged-in browser, see Authentication
ytm play "daft punk" # search, play the first hit, radio follows
ytm # the TUI
ytm update # later: newest ytm and yt-dlp, whatever installed it
To hack on it instead:
git clone https://github.com/MaheshBhushan/yt-music-cli.git && cd yt-music-cli
python3 -m venv .venv && source .venv/bin/activate
pip install -e '.[dev]'
[!IMPORTANT]
mpvmust be on yourPATH; pip cannot install it.pacman -S mpv,apt install mpv,brew install mpv, or the installers at https://mpv.io. Node is optional but recommended: yt-dlp uses it to solve YouTube's JavaScript challenges.
Usage
The TUI is ytm with no arguments. Results appear as you type; Enter plays the first one. Every key is listed in the bar at the bottom, and everything is clickable: results, queue rows, playlists, the progress bar, the shortcuts. Your daily mixes (Supermix, Discover Mix, ...) sit below your playlists. In a terminal under 100 columns or 24 rows, such as a tmux pane, the layout collapses to the search box, the queue and the player strip.
| Key | Action |
|---|---|
/ or s |
Focus search |
h |
Hide the search box and results while listening; s, / or h bring them back |
Enter |
Play the selected result, queue entry or playlist |
q u |
Enqueue the selected song at the end / play it next |
space |
Play / pause |
n p |
Next / previous |
← → |
Seek 5 s |
+ - |
Volume (= also raises it). This is the system output volume, so it matches the tray and the media keys; see [audio] control |
a |
Add the selected song to a playlist: a, pick the list with ↑ ↓, a or Enter |
l |
Focus playlists |
r |
Refresh your mixes (a mix keeps the same tracklist until you do) |
Tab |
Cycle panes |
e |
Exit, music keeps playing |
x |
Exit and stop mpv |
One-shot commands talk to the same mpv. Add --json to any of them for machine-readable output.
ytm search "song name" -n 10 # results are numbered
ytm play 3 # a number from the last search, an 11-char video id, or a query
ytm add 4 # enqueue; add --next 4 puts it right after the current song
ytm radio # replace the queue with a station for the current track
ytm mix # list your daily mixes (Supermix, Discover Mix, ...)
ytm mix discover # replace the queue with a mix, matched by substring
ytm status | queue | lyrics | like
ytm pause | resume | toggle | next | prev | stop
ytm seek -10 | seek --to 90 | volume 60 | clear | shuffle
ytm quit # stop mpv entirely
ytm update # upgrade ytm and yt-dlp; --check only reports
The queue never holds a track twice: playing something already queued jumps to it, and radio skips what is there.
Authentication
Search and playback work signed out. Library, playlists, likes and lyrics need your account. Credentials live in ~/.config/ytm/auth.json (mode 0600) and are checked with a live call before being kept. Three ways in:
ytm auth # 1. cookies from a browser you are logged in to (auto-detects)
ytm auth --from-browser firefox # or name one: chrome, chromium, edge, brave, vivaldi, opera, helium, firefox
ytm auth --from-browser helium --profile "Profile 1" # pick a browser profile (default: the one that is logged in)
ytm auth --manual # 2. paste request headers copied from the browser's DevTools
ytm auth --oauth # 3. OAuth device code: for SSH, headless boxes, or Windows without Firefox
Cookies expire after a few weeks; re-run ytm auth when the app says so. OAuth tokens refresh themselves.
From a browser
Log in at https://music.youtube.com, then run ytm auth. It tries each browser in turn and, within a browser, every profile (Chromium's Default, Profile 1, ...; System and Guest profiles are skipped), taking the first with a YouTube session. To read one profile only, name its directory: ytm auth --from-browser helium --profile "Profile 1" (for Firefox, the profile folder name). If none works, the error says why for each browser: not installed, no such profile, cookies could not be decrypted, database locked, no YouTube login, or a network failure while checking the cookies against YouTube Music.
Browser cookies go stale on their own: Google rotates the session tokens in the browser about once a day, and YouTube then treats ytm's copy as signed out. ytm remembers which browser and profile the cookies came from (auth.source.json next to auth.json) and, the first time a request comes back signed out, re-extracts them from that browser and retries, so the TUI recovers without a visit to the terminal. If the browser itself is signed out, the error says so and that the re-extraction failed. Pasted headers and OAuth are never refreshed this way.
If the browser is signed in to more than one Google account, pass ytm auth --authuser 1 (0 is the first account, 1 the second, ...) or set auth.x-goog-authuser in config.toml to make it the default.
[!WARNING] Windows: Chrome, Edge, Brave, Vivaldi and Opera encrypt their cookies with App-Bound Encryption (Chrome 127 and newer), which no other program can read, so
ytm authcannot import from them. Either log in with Firefox and runytm auth --from-browser firefox, or use--manual(works with Chrome) or--oauth.
Manual headers
Works with any browser on any OS, including Chrome on Windows.
- Open https://music.youtube.com logged in, and open DevTools (F12) → Network.
- Filter for
browseand click around in the app until abrowserequest appears. - Right-click it → Copy → Copy request headers.
- Run
ytm auth --manualand paste, then press Enter and Ctrl-D (Ctrl-Z then Enter on Windows).
OAuth
ytm auth --oauth prints a URL and a short code. Open the URL on any device, sign in, enter the code, and ytm stores a token that refreshes itself. YouTube removed ytmusicapi's shared OAuth client in November 2024, so you need your own from Google Cloud once:
- Go to https://console.cloud.google.com/ and create or pick a project.
- APIs & Services → Library: enable YouTube Data API v3.
- APIs & Services → OAuth consent screen: External is fine. Add your own Google account under Test users.
- APIs & Services → Credentials → Create credentials → OAuth client ID. Application type: TVs and Limited Input devices. Name it and create.
- Copy the Client ID and Client secret, then:
ytm auth --oauth --client-id YOUR_CLIENT_ID --client-secret YOUR_CLIENT_SECRET
The flags can also come from YTM_OAUTH_CLIENT_ID / YTM_OAUTH_CLIENT_SECRET, and with neither set ytm prompts for them. They are kept in ~/.config/ytm/oauth_client.json (mode 0600) because every token refresh needs them again. Revoking access in your Google account is reported as expired auth; run ytm auth --oauth again.
OAuth has no browser cookies, so streams always resolve anonymously for OAuth users. Search, library and playback of the normal catalogue are unaffected; private or age-gated tracks are not.
[!NOTE] Streams resolve anonymously by default for everyone. With account cookies, YouTube hands out URLs that require an account-bound proof-of-origin token and then answers 403. Anonymous resolution plays the same catalogue. Set
behaviour.authenticated_streams = trueonly if you need private or age-gated tracks.
Configuration
~/.config/ytm/config.toml. A missing file means these defaults; a partial file overrides only what it names; a bad value is warned about and ignored.
[audio]
control = "system" # "system": the desktop's output volume; "player": mpv's own
volume = 70 # mpv's starting volume, only with control = "player"
device = "auto" # an mpv --audio-device name
[behaviour]
autoplay_radio = true # keep the queue fed with radio
confirm_remote_delete = true
authenticated_streams = false # see the note above
[auth]
x-goog-authuser = "0" # Google account index for browser auth cookies
[ui]
theme = "dark" # or "light"
art = "blocks" # blocks | kitty | sixel | auto | ascii | off
[tui]
queue_column_width = 40 # max PLAYED / UP NEXT column width; 0 = no max
[pot]
enabled = true # proof-of-origin tokens via bgutil-ytdlp-pot-provider
base_url = "http://127.0.0.1:4416"
[keys]
toggle = "space"
next = "n"
prev = "p"
search = "/"
quit = "e"
[update]
check = true # ask PyPI once a day, toast in the TUI when newer
auto = false # true: install it (and fresh yt-dlp) automatically
control = "system" makes the volume in ytm the same one the desktop shows: +/- and ytm volume move the default output through wpctl (PipeWire) or pactl (PulseAudio), and a media key or the tray slider shows up in the TUI. mpv's own volume is held at 100 so the stream is not attenuated twice. Without either tool, or with control = "player", ytm uses mpv's software volume, which only ytm sees.
art = "blocks" draws the cover with coloured half-cell glyphs and works in every terminal, tmux included. kitty and sixel use the terminal's pixel protocol; Sixel is known to freeze the pane in Konsole, which is why it is opt-in.
The proof-of-origin token provider is a yt-dlp plugin installed with ytm. It asks an HTTP service for tokens when YouTube demands one; run docker run -d --name bgutil-provider -p 4416:4416 brainicism/bgutil-ytdlp-pot-provider if you want it, or set enabled = false. Playback works without it for most accounts.
More
- Offline cache.
ytm cache add <video_id>downloads a track into~/.cache/ytm/tracks/;cache rmandcache listmanage it. 2 GB cap, least-recently-played evicted first. - Local playlists live in
~/.local/state/ytm/playlists.jsonand show up next to your YouTube Music playlists in the TUI. - Media keys.
ytmhas no MPRIS of its own; install the mpv-mpris plugin and mpv announces itself to your desktop. - Updating.
ytm updateupgrades ytm and yt-dlp through whatever installed them (pipx,uv tool, or pip), so the new version lands where theytmcommand runs from. The TUI checks PyPI once a day and shows a toast when there is a newer release; setauto = trueunder[update]to have it install without asking. yt-dlp is why this matters: YouTube changes things and yt-dlp follows within days, so a stale copy is the usual cause of sudden "could not resolve" failures. - Windows works over a named pipe to mpv. Cookie import needs Firefox there, see Authentication.
- Logs. mpv writes to
~/.local/state/ytm/mpv.log.
Repository structure
ytm/
cli.py commands and the mpv launch configuration
player.py Player: mpv over JSON IPC
music.py ytmusicapi wrappers, Track
state.py remembered searches and track metadata
auth.py browser cookies, DevTools headers, OAuth
cache.py offline downloads
update.py version check against PyPI, in-place upgrade
mpv/autoplay.lua radio autoplay inside mpv
tui/ Textual app, panes, backend over Player
tests/ pytest; no network and no mpv needed
.github/workflows/ tests on 3.11-3.13; publish to PyPI on a v* tag
pip install -e '.[dev]' && pytest -q
License
MIT, see LICENSE.
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file ytm-0.5.15.tar.gz.
File metadata
- Download URL: ytm-0.5.15.tar.gz
- Upload date:
- Size: 114.0 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
e084f7324542c2c0ece325cf554a0a15940edbc35857b6922e4708a6eb14469d
|
|
| MD5 |
fd87a94f9576967fa793ebe006f6305d
|
|
| BLAKE2b-256 |
67b8a410eaf692c168a157382a312839f2275ddcae147a1b6f69b85545f21d98
|
Provenance
The following attestation bundles were made for ytm-0.5.15.tar.gz:
Publisher:
publish.yml on MaheshBhushan/yt-music-cli
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
ytm-0.5.15.tar.gz -
Subject digest:
e084f7324542c2c0ece325cf554a0a15940edbc35857b6922e4708a6eb14469d - Sigstore transparency entry: 2744040683
- Sigstore integration time:
-
Permalink:
MaheshBhushan/yt-music-cli@1e1ed6f47e288b734adbe6d06791cee99e4a661a -
Branch / Tag:
refs/tags/v0.5.15 - Owner: https://github.com/MaheshBhushan
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@1e1ed6f47e288b734adbe6d06791cee99e4a661a -
Trigger Event:
push
-
Statement type:
File details
Details for the file ytm-0.5.15-py3-none-any.whl.
File metadata
- Download URL: ytm-0.5.15-py3-none-any.whl
- Upload date:
- Size: 76.2 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
ff200279980d9f49146324e5b2d17f5c1a261507d660916b57df0fab0bf39e48
|
|
| MD5 |
843ffdea4528ab0853ec18fd5d450e5d
|
|
| BLAKE2b-256 |
8d3b769cdba0017a9874254f94a7084ca1594ecde09feae62a3378215c48c32b
|
Provenance
The following attestation bundles were made for ytm-0.5.15-py3-none-any.whl:
Publisher:
publish.yml on MaheshBhushan/yt-music-cli
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
ytm-0.5.15-py3-none-any.whl -
Subject digest:
ff200279980d9f49146324e5b2d17f5c1a261507d660916b57df0fab0bf39e48 - Sigstore transparency entry: 2744040737
- Sigstore integration time:
-
Permalink:
MaheshBhushan/yt-music-cli@1e1ed6f47e288b734adbe6d06791cee99e4a661a -
Branch / Tag:
refs/tags/v0.5.15 - Owner: https://github.com/MaheshBhushan
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@1e1ed6f47e288b734adbe6d06791cee99e4a661a -
Trigger Event:
push
-
Statement type: