How can I pass a password in when using URLs as the source and destination for a transfer?

Passwords can be passed in to SFXCL.exe directly.

Download from remote host:

SFXCL sftp://[<user>[:<password>]@]<host address>[:<port>]/<source path> <destination path>

Upload to remote host:

SFXCL <source path> sftp://[<user>[:<password>]@]<host address>[:<port>]/<destination path>

So for instance, the following would be a valid command line:

SFXCL sftp://username:password@someplace.net/pub c:\temp

If the password has to contain the "@" character (for example, when you are logging on as anonymous), you must enter it as the HEX equivalent (%40) or else SFXCL will not accept it:

SFXCL ftp://anonymous:guest%40domain.com@ftp.vandyke.com/pub/crt/ntcrt342.exe c:\temp