# cpe

> A terminal control plane for the TCL HH515L 5G CPE router. It speaks the
> encrypted JSON-RPC API behind the router's web UI and exposes all 348 of its
> endpoints from a single self-contained binary. Log in once, then read every
> status endpoint, list connected devices, send SMS, toggle wifi, reboot, or
> call any raw API method — from a shell or from an agent. Everything runs
> locally: no server, no cloud, no third party.

Made by Luka Löhr — https://lukaloehr.com

    cpe login      # prompts for the password, never on argv
    cpe status     # router, network, signal, wifi, data usage

SAFETY, UP FRONT — an agent driving this must know three things:

  1. Never put the password on a command line. It would appear in `ps` and in
     shell history. Let `cpe login` prompt.
  2. The router LOCKS THE ACCOUNT after a few failed logins. `cpe login` makes
     exactly one Login call and never retries. On failure, stop — do not guess
     another password.
  3. Every Set* and action endpoint requires --confirm, including through
     `cpe call`. Read-only endpoints never do. `cpe reset` is a factory reset.

This talks to hardware on your own LAN using credentials you already have. It
is not an exploit and it bypasses no authentication. Built for the HH515L
specifically; the endpoint catalog and handshake are that model's.

## Setup

- [Agent setup runbook](https://cpe.lukaloehr.com/setup.txt): written for a coding agent. Confirms the model first, installs, logs in without leaking the password, and asks before anything that writes. Start here.
- [Commands](https://cpe.lukaloehr.com/commands.txt): every command, flag and environment variable.

## Reference

- [The handshake](https://cpe.lukaloehr.com/auth.txt): loginAuthType 7 in full — RSA key exchange, AES-256-CBC, PBKDF2, HMAC-SHA256, and the username obfuscation.
- [Everything in one file](https://cpe.lukaloehr.com/llms-full.txt): all of the above concatenated.

## Source

- [GitHub repository](https://github.com/luka-loehr/cpe): source, tests, endpoint catalog.
- [Releases](https://github.com/luka-loehr/cpe/releases): prebuilt binaries with SHA256SUMS.