DingTalk-Real-AI/dingtalk-workspace-cli

What it solves

DingTalk Workspace CLI (dws) provides a command-line interface to access and manage DingTalk enterprise data. It bridges the gap between human developers and AI agents, allowing them to interact with DingTalk services (like calendars, documents, and contacts) through a terminal rather than a GUI.

How it works

Built in Go, the tool uses OAuth device-flow authentication to securely connect to DingTalk organizations. It provides a structured set of commands for various DingTalk products. For AI agents, it offers structured JSON responses and a built-in "Agent Skill" system (available in mono or multi-product layouts) that allows LLMs to understand the CLI's capabilities and execute tasks via natural language through tools like Claude Code or Cursor.

Who it’s for

• Developers and Power Users: Those who prefer the command line for managing enterprise tasks.
• AI Agent Developers: Those building agents that need to interact with DingTalk enterprise data.
• Enterprise Admins: Admins who need to manage CLI access and authorization for their organization.

Highlights

• AI-Native Design: Includes a schema command to provide agents with a compact, normative view of command contracts and constraints.
• Zero-Trust Security: Implements OAuth device-flow, domain allowlisting, and least-privilege scoping to ensure all actions are audited.
• Multi-Profile Support: Allows users to stay logged in to multiple DingTalk accounts and organizations simultaneously.
• Flexible Output: Supports multiple output formats including table, JSON, and raw text, with a --jq flag for precise data extraction.
• Safe Execution: Features a --dry-run mode to preview requests before they are executed.