# Install macosvpn with Homebrew

Create Mac OS VPNs programmatically. Version 2.0.0 via Homebrew; verified from local package data.

## Install

```sh
sudo av install brew:macosvpn
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install macosvpn
```

  Evidence: local Homebrew formula metadata

## Package facts

- **Package key:** brew:macosvpn
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/macosvpn>
- **Version:** 2.0.0
- **Source summary:** Create Mac OS VPNs programmatically
- **Homepage:** <https://github.com/halo/macosvpn>
- **Repository:** <https://github.com/halo/macosvpn>
- **Upstream docs:** <https://github.com/halo/macosvpn#readme>
- **License:** MIT
- **Source archive:** <https://github.com/halo/macosvpn/archive/refs/tags/2.0.0.tar.gz>
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- macosvpn (cli)
- macosvpn (alias)

## Install behavior

- Post-install hook: not defined
- Bottle: available on arm64_big_sur, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 2.0.0
- Local data: ok
- Upstream repository: https://github.com/halo/macosvpn
- Upstream latest detected: 2.0.0 (current)
- info: No package-manager update timestamp was available.
## Project history and usage

macosvpn is a Swift command-line tool for creating and deleting macOS VPN network services programmatically. The README documents support for L2TP over IPSec and Cisco IPSec configurations.

### Project history

The official repository was created in July 2014. The README's own history section says the implementation began from research into Apple's networking discussions and practical examples for manipulating VPN configuration, shared secrets, traffic routing, and System Keychain entries.

The project packages that undocumented macOS VPN configuration knowledge into a CLI with create and delete commands. Its README emphasizes that administrator privileges are required because VPN passwords are stored in the System Keychain, and it explicitly chooses sudo over a separate HelperTool.

### Adoption history

macosvpn is distributed through Homebrew according to both the README and the batch input, and the README also points users to compiled GitHub release binaries. Repository metadata captured during this run showed several hundred GitHub stars and dozens of forks, indicating durable adoption among Mac administrators and automation users.

### How it is used

Typical usage is `sudo macosvpn create --l2tp <name> --endpoint <host> --username <user> --password <password> --sharedsecret <secret>` or the Cisco IPSec variant. The README also documents flags such as `--force`, `--split`, disconnect behavior options, repeated arguments for creating multiple VPNs, and `macosvpn delete` for removing one or more services.

### Why package nerds care

macosvpn is significant because VPN profiles are often part of fleet setup, CI test machines, and repeatable laptop provisioning, but macOS historically made this hard to automate with plain shell tools. A Homebrew-installable CLI gives package nerds a way to put VPN setup next to the rest of a bootstrap script.

### Timeline

- 2014: Official GitHub repository created.
- 2017: 0.3.x releases covered macOS High Sierra.
- 2019: 1.0.0 release published for macOS Catalina.
- 2022: 2.0.0 Ventura release published.

### Related projects

- The README mentions Apple's SystemConfiguration preferences, the System Keychain, sudo, Xcode builds, and related helper libraries Moderator and PrettyColors.

### Sources

- <https://api.github.com/repos/halo/macosvpn>
- <https://api.github.com/repos/halo/macosvpn/releases>
- <https://github.com/halo/macosvpn>
- <https://github.com/halo/macosvpn#readme>
- source_facts.package-manager


## Security Notes

narrow executable package without higher-risk signals.

- **Geiger risk:** green / low
- narrow executable package without higher-risk signals


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- macOS: /Library/Preferences/SystemConfiguration/preferences.plist

## Credential files

- macOS: /Library/Keychains/System.keychain
## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** macosvpn
- **Version Scheme:** 0
- **Revision:** 0
- **Requirements:** macos, xcode
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** stable


## Related links

- [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family.
- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider.
- [dsvpn](https://www.automicvault.com/pkg/brew/dsvpn/) - Shares av.db curated category or tags: cli, networking, vpn.
- [edgevpn](https://www.automicvault.com/pkg/brew/edgevpn/) - Shares av.db curated category or tags: cli, networking, vpn.
- [sstp-client](https://www.automicvault.com/pkg/brew/sstp-client/) - Shares av.db curated category or tags: cli, networking, vpn.
- [tinc](https://www.automicvault.com/pkg/brew/tinc/) - Shares av.db curated category or tags: cli, networking, vpn.
- [boringtun](https://www.automicvault.com/pkg/brew/boringtun/) - Shares av.db curated category or tags: cli, networking, vpn.
- [fastd](https://www.automicvault.com/pkg/brew/fastd/) - Shares av.db curated category or tags: cli, networking, vpn.
- [headscale-cli](https://www.automicvault.com/pkg/brew/headscale-cli/) - Shares av.db curated category or tags: cli, networking, vpn.
- [nebula](https://www.automicvault.com/pkg/brew/nebula/) - Shares av.db curated category or tags: cli, networking, vpn.

## Combined YAML source

View the package source record on GitHub. [combined/macosvpn.yml](https://github.com/automic-vault/db/blob/main/combined/macosvpn.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated configuration and credential file locations
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- cross-ecosystem install command graph
