ihme
iCloud Hide My Email from the terminal.
One address per signup. Find it later. Deactivate when done.
ihme new github.com # pick from Apple's candidates
ihme list --search github # by label, address, or note
ihme list --sort date:asc # oldest first, to clean up
ihme deactivate # no address: pick one, newest first
ihme share netflix # grant read of that address
ihme export -o backup.csv # your own copy
It works three ways. By hand: run a command, pick an address. From a script: every command takes --json. Through an agent: the built-in assistant runs on your own model key or on a coding agent you already use. It asks before it changes anything in your account.
Needs iCloud+ and an Apple ID with 2FA. Unofficial: ihme uses the same web API as icloud.com. Apple can change it or block it.
Install
macOS on Apple Silicon:
curl -fL https://github.com/lroolle/ihme-cli/releases/latest/download/ihme_macOS_arm64.tar.gz -o ihme.tar.gz
tar -xzf ihme.tar.gz ihme
sudo install -m 755 ihme /usr/local/bin/ihme
macOS Intel, Linux, Windows (arm64, x86-64): releases, with SHA-256 checksums. Go: go install github.com/lroolle/ihme-cli/cmd/ihme@latest.
ihme auth login # Apple ID, password, 2FA. Saves session, not password or code.
ihme list
Signed in, but Hide My Email refuses with Invalid global session? Turn on Allow Data Access. iPhone: Settings > [your name] > iCloud > iCloud.com. Mac: System Settings > [your name] > iCloud > Data Access on iCloud.com. Then run ihme auth login again. FAQ.
Share one inbox
ihme share netflix # prints a key and a link, once
ihme serve # http://127.0.0.1:8025
The key opens one address's mail: INBOX and Junk, last 30 days, as plain text. No other address, no other recipients, nothing loaded from anywhere else. The server reads mail over IMAP with an app-specific password, never your iCloud session. ihme share revoke netflix ends it. Details.