Configuration

Environment variables

Variable	Purpose
BREACHLINE_API_KEY	A bl_live_ key for non-interactive sign-in. Used when no stored sign-in exists.
BREACHLINE_API_BASE	Advanced. Override the LLM gateway base URL (default https://api.breachline.io/api/v1/llm/v1). Your key is sent to this host. Leave unset in normal use.
BREACHLINE_VERSION	Installer only: pin the release to install.
BREACHLINE_INSTALL_DIR	Installer only: where to install the binary.

Security

Treat BREACHLINE_API_BASE like a credential setting. The CLI refuses a non-HTTPS base URL for its tool endpoints (a loopback address is allowed for local development), but it does not check the LLM gateway base: if BREACHLINE_API_BASE is set to an http:// URL or to a host you do not control, your key is sent there. Leave it unset unless you have a specific reason, never set it to plain http:// outside your own machine, and check it in shared shells and CI.

Configuration files

File	Scope	Contents
~/.config/breachline/	User	Your settings and user-scope MCP servers.
breachline.json or breachline.jsonc in a project (or its .breachline/ folder)	Project	Project settings.
.mcp.json in a project	Project	Project-scope MCP servers, shared with the repository.

breachline mcp edit --scope user or --scope project opens the right file in $VISUAL or $EDITOR.

Using the CLI in CI

GitHub Actions stepCopy

- name: Retest staging
  env:
    BREACHLINE_API_KEY: ${{ secrets.BREACHLINE_API_KEY }}
  run: |
    curl -fsSL https://dl.breachline.io/install.sh | sh
    export PATH="$HOME/.breachline/bin:$PATH"
    breachline run --format json "Retest the findings fixed in this release on staging.example.com. Scope: staging.example.com only." > breachline-events.jsonl

• Store the key as a masked CI secret, scoped to llm:access and llm:chat.
• --format json prints one JSON event per line, which is easy to archive or parse.
• Pin BREACHLINE_VERSION in CI so runs are reproducible.

Removing local data

breachline auth logout signs out and clears all BreachLine data stored on the machine. breachline uninstall removes the CLI; add --keep-config or --keep-data to keep configuration or sessions, and --dry-run to preview.