DingTalk Workspace CLI

DingTalk Workspace CLI (dws) is an officially open-sourced, cross-platform command-line tool from DingTalk that brings the entire DingTalk enterprise platform to the terminal. Built with Go, it covers 163 commands across 14 products — from contacts and calendar to AI Tables, documents, and meeting minutes. It is designed equally for human operators and AI agent workflows, with structured JSON output, built-in Agent Skills, and smart input correction for LLM-generated commands.

• AI-native design — structured JSON responses, --dry-run previews, --jq filtering, and --yes flags make it ready for autonomous agent pipelines out of the box.
• Agent Skills system — ships a complete skills/ directory with a master skill, per-product references, intent guides, error codes, and 13 ready-made Python scripts for common multi-step workflows; integrates with Claude Code, Cursor, and other AI tools.
• Schema introspection — use dws schema to dynamically discover all available products and tool parameter schemas without pre-built knowledge.
• Smart input correction — built-in pipeline normalizes camelCase/snake_case/UPPER flag names, splits sticky arguments, fuzzy-matches typos, and normalizes boolean/number/date/enum values — correcting common AI model mistakes automatically.
• Raw API access — dws api calls any DingTalk OpenAPI directly with automatic token acquisition, refresh, and dual-form (api.dingtalk.com / oapi.dingtalk.com) auto-detection.
• Security by design — PBKDF2 + AES-256-GCM encrypted token storage keyed by device MAC address, domain allowlisting, path traversal protection, CRLF injection blocking, Unicode spoofing filtering, and full-chain audit through DingTalk Open Platform.
• 14 product areas — Contact, Chat/IM, Calendar, Todo, Approval, Attendance, Ding, Report, AI Tables, Doc, Drive, Minutes, Mail, and raw API — with video conferencing, AI apps, and wiki coming soon.
• Self-upgrade — built-in dws upgrade with SHA256 integrity verification, atomic two-phase apply, automatic backup, and rollback support.
• Enterprise admin controls — OAuth device-flow auth, least-privilege scoping, allowlist gating, and full call-chain audit logs accessible in real time.
• Cross-platform installation — install via shell script, PowerShell, npm, or pre-built binary for macOS, Linux, and Windows (amd64/arm64).