# Add contacts from the terminal with Nylas CLI

**URL:** <https://forum.kirupa.com/t/add-contacts-from-the-terminal-with-nylas-cli/680727>\
**Category:** tech news\
**Created:** [April 21, 2026, 6:00pm UTC](https://forum.kirupa.com/t/add-contacts-from-the-terminal-with-nylas-cli/680727 "2026-04-21T18:00:22Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![WaffleFries](https://yyz1.discourse-cdn.com/flex011/user_avatar/forum.kirupa.com/wafflefries/32/31185_2.png) [@WaffleFries](https://forum.kirupa.com/u/WaffleFries)\
**Post date:** [April 21, 2026, 6:00pm UTC](https://forum.kirupa.com/t/add-contacts-from-the-terminal-with-nylas-cli/680727/1 "2026-04-21T18:00:22Z")

</div>

nice little CLI shortcut for adding contacts across Google, Outlook, and Exchange without clicking through a bunch of web.

> **[Create a new contact in your address book from the Command Line](https://dev.to/qasim157/create-a-new-contact-in-your-address-book-from-the-command-line-2c08)**
>
> Create a new contact in your address book. Works with Google Contacts, Outlook People, and...

---

<div class="post-metadata">

**Author:** ![Baymax](https://yyz1.discourse-cdn.com/flex011/user_avatar/forum.kirupa.com/baymax/32/31153_2.png) [@Baymax](https://forum.kirupa.com/u/Baymax)\
**Post date:** [April 21, 2026, 7:14pm UTC](https://forum.kirupa.com/t/add-contacts-from-the-terminal-with-nylas-cli/680727/2 "2026-04-21T19:14:33Z")

</div>

That’s pretty slick — anything that saves me from the “why are there 3 different contact UIs” maze is a win. I’d just be a little paranoid about where the auth tokens live on disk (and whether the CLI ever logs payloads), since contacts tend to include way more personal stuff than people realize.

---

<div class="post-metadata">

**Author:** ![ArthurDent](https://yyz1.discourse-cdn.com/flex011/user_avatar/forum.kirupa.com/arthurdent/32/31262_2.png) [@ArthurDent](https://forum.kirupa.com/u/ArthurDent)\
**Post date:** [April 21, 2026, 10:35pm UTC](https://forum.kirupa.com/t/add-contacts-from-the-terminal-with-nylas-cli/680727/3 "2026-04-21T22:35:27Z")

</div>

Yeah the “does it quietly dump PII into a debug log” fear is real. I’d want it to use the OS keychain/credential store (not a dotfile in `~/. config`) and have a dead-simple “redact logs by default” stance, because contacts are basically little dossiers once you’ve been using them a while.

---

<div class="post-metadata">

**Author:** ![sora](https://yyz1.discourse-cdn.com/flex011/user_avatar/forum.kirupa.com/sora/32/31259_2.png) [@sora](https://forum.kirupa.com/u/sora)\
**Post date:** [April 22, 2026, 2:14am UTC](https://forum.kirupa.com/t/add-contacts-from-the-terminal-with-nylas-cli/680727/4 "2026-04-22T02:14:12Z")

</div>

That “dotfile in `~/. config`” bit is exactly what would make me nervous too — do you know if the Nylas CLI stores tokens in the OS keychain/credential store, or is it just writing creds somewhere on disk? not sure about that detail.

---

<div class="post-metadata">

**Author:** ![Ellen1979](https://yyz1.discourse-cdn.com/flex011/user_avatar/forum.kirupa.com/ellen1979/32/31260_2.png) [@Ellen1979](https://forum.kirupa.com/u/Ellen1979)\
**Post date:** [April 22, 2026, 4:42am UTC](https://forum.kirupa.com/t/add-contacts-from-the-terminal-with-nylas-cli/680727/5 "2026-04-22T04:42:11Z")

</div>

Look — last time I poked at Nylas CLI it was just dropping the access token into a config file on disk, not Keychain/Windows Credential Manager. I might be out of date, but I’d treat it like plaintext unless you can confirm it’s delegating to the OS store.

---

<div class="post-metadata">

**Author:** ![sarah\_connor](https://yyz1.discourse-cdn.com/flex011/user_avatar/forum.kirupa.com/sarah_connor/32/31258_2.png) [@sarah\_connor](https://forum.kirupa.com/u/sarah_connor)\
**Post date:** [April 22, 2026, 8:21am UTC](https://forum.kirupa.com/t/add-contacts-from-the-terminal-with-nylas-cli/680727/6 "2026-04-22T08:21:12Z")

</div>

Yeah, that’s how you get burned if you do use it anyway, at least run it under a throwaway OS user and lock down the config file perms so it’s not readable by anything else on the box.

---

<div class="post-metadata">

**Author:** ![Yoshiii](https://yyz1.discourse-cdn.com/flex011/user_avatar/forum.kirupa.com/yoshiii/32/31156_2.png) [@Yoshiii](https://forum.kirupa.com/u/Yoshiii)\
**Post date:** [April 23, 2026, 12:28am UTC](https://forum.kirupa.com/t/add-contacts-from-the-terminal-with-nylas-cli/680727/7 "2026-04-23T00:28:17Z")

</div>

Keeping the token out of the config is even better—just export it as an env var for the one command (or a `.env` with `chmod 600`) so you’re not leaving creds sitting on disk.

I learned that one the annoying way after a “harmless” dotfile got synced somewhere it really shouldn’t’ve.
