Phala Cloud Documentation — Confidential AI on TEE

This command is marked as unstable and may change in future releases.

phala cp [options] <source> <destination>

Copy files to/from a CVM via SCP

Argument	Description
`<source>`	Source path (local or cvm-name:path, use :path for phala.toml cvm_id)
`<destination>`	Destination path (local or cvm-name:path, use :path for phala.toml cvm_id)

Option	Description
`-i, --identity <value>`	SSH identity file (private key)
`-p, --port <value>`	SSH port (priority: CLI > phala.toml > 443)
`-g, --gateway <value>`	Gateway domain (priority: CLI > phala.toml > API)
`-r, --recursive`	Recursively copy directories
`-v, --verbose`	Show verbose SCP details
`--dry-run`	Print SCP command without executing

Option	Description
`-h, --help`	Show help information for the current command
`--version`	Show CLI version
`--api-token TOKEN, --api-key TOKEN`	API token for authenticating with Phala Cloud
`-j, --json, --no-json`	Output in JSON format
`--interactive`	Enable interactive mode for commands that support it
`--cvm-id <value>`	CVM identifier (UUID, app_id, instance_id, or name)
`--profile PROFILE`	Temporarily use a different auth profile for this command
`--api-version <value>`	API version to use (e.g. 2025-10-28, 2026-01-21)

phala cp ./local.txt :/root/remote.txt

phala cp ./local.txt app_123:/root/remote.txt

phala cp app_123:/root/remote.txt ./local.txt

phala cp -g dstack-pha-prod7.phala.network -p 16185 ./file.txt app_123:/root/

phala cp -r ./local_dir app_123:/root/remote_dir

phala cp -i ~/.ssh/custom_key app_123:/root/file.txt ./file.txt

phala cp ./local.txt app_123:/root/remote.txt --dry-run