linkedin-cli

linkedin is a fast, scriptable, read-only command-line client for LinkedIn's internal Voyager API: search jobs, fetch a job's full detail, look up a company, and resolve a location to a geoId — with machine-first output (JSON/YAML/CSV, -o id, --jq) built for shell pipelines and AI agents.

⚠️ Unofficial API — use at your own risk

This tool drives the same private endpoints the linkedin.com web app calls, authenticated with your own browser session cookies. It is not provided, sanctioned, or supported by LinkedIn, and using it may violate the LinkedIn User Agreement. Automated access can lead to your account being rate-limited, restricted, or banned.

This is the same caveat class as slackctl's xoxc/session auth. To stay on the safe side:

• Use your own account, on your own machine, over a residential IP — never a shared or server IP.
• Keep volume low. Ban-safety is on by default (human-paced 3–15s delays, one request in flight, a ~30/day job-detail cap, and no retry on throttle/soft-block/challenge). Don't defeat it.
• Treat this as a personal job-hunt helper, not a scraper. If LinkedIn soft-blocks you (HTTP 999) or issues a challenge, stop — the CLI will tell you to.

You are responsible for how you use it.

Install

# From source (Go 1.25+)
go install github.com/jjuanrivvera/linkedin-cli/cmd/linkedin@latest

# Or via Homebrew (once released)
brew install jjuanrivvera/linkedin-cli/linkedin-cli

The zero-infra install script (checksum-verified) is the first-class path once a release is tagged:

curl -fsSL https://raw.githubusercontent.com/jjuanrivvera/linkedin-cli/main/install.sh | sh

Authenticate — borrow your browser session

Log in to linkedin.com in Chrome/Brave/Firefox, then hand the CLI your session cookies:

linkedin auth --cookie-from-browser chrome

It extracts the li_at and JSESSIONID cookies for .linkedin.com and stores them in your OS keyring (AES-256-GCM encrypted-file fallback on headless hosts, keyed by LINKEDIN_KEYRING_PASSWORD).

Headless? Pass them directly or via env:

export LI_AT='AQED...'
export JSESSIONID='"ajax:1234567890"'   # NOTE: the quotes are part of the value
linkedin jobs search --keywords go --remote

linkedin auth status shows what's stored; linkedin auth logout removes it.

Usage

# Search — recent remote Go roles as JSON
linkedin jobs search --keywords "golang" --remote --since 7d -o json

# Resolve a location to a geoId, then filter by it
linkedin geo "Bogota, Colombia"                       # → 90009706
linkedin jobs search --keywords backend --location "Bogota, Colombia" --limit 50

# Filter by job type / experience (LinkedIn codes) and page through results
linkedin jobs search --keywords sre --job-type F,C --experience 3,4 --all -o id

# One job's trustworthy detail (workRemoteAllowed, listedAt, applyMethod, description)
linkedin jobs get 4012345678 -o json
linkedin jobs get 4012345678 --jq '.description.text'

# A company by its slug (universalName)
linkedin company get stripe --jq '.name'

# See the exact request without sending it
linkedin jobs search --keywords go --remote --since 24h --dry-run

Flags that matter

Output & agents

One renderer serves every command: table (default, colored only on a TTY; honors NO_COLOR), json, yaml, csv (formula-injection-safe), and -o id (one id per line, xargs-friendly). A global --jq slices any response.

• MCP server: linkedin mcp exposes the read commands as annotated MCP tools for an AI host.
• Agent guard: linkedin agent guard --host claude-code|codex|opencode emits safety config from the live command tree (this is a read-only CLI, so it allows reads and blocks alias set; any future write/destructive command is hard-blocked automatically).

Schema drift

LinkedIn rotates Voyager's decorationId version suffixes, its collection variants, and its $type names without notice. Every such string is isolated in internal/voyager/schema.go ("these drift; bump here"), $type is matched by substring, and a search that returns zero recognizable job entities surfaces a clear "schema moved — check schema.go" error instead of a silent empty result.

Doctor

linkedin doctor          # local checks only (no LinkedIn request)
linkedin doctor --live   # + ONE low-risk, UNAUTHENTICATED geo-typeahead probe

Development

make verify is the gate (fmt, vet, lint, gosec, govulncheck, tests, ≥80% coverage, spec-check, spec-completeness, dod-check). Everything is tested against httptest fakes — no test ever hits LinkedIn. See AGENTS.md and DECISIONS.md.

License

MIT. Not affiliated with, endorsed by, or connected to LinkedIn Corporation.