CLI command reference¶
Generated from python -m keprix.keprix_cli.main.
Top-level help¶
usage: keprix [-h] [--version] [-z PROMPT] [-m MODEL] [--provider PROVIDER]
[-t TOOLSETS] [--resume SESSION] [--continue [SESSION_NAME]]
[--worktree] [--accept-hooks] [--skills SKILLS] [--yolo]
[--pass-session-id] [--ignore-user-config] [--ignore-rules]
[--safe-mode] [--tui] [--cli] [--dev]
{chat,model,fallback,secrets,migrate,gateway,proxy,lsp,setup,postinstall,whatsapp,whatsapp-cloud,slack,send,login,logout,auth,status,cron,webhook,portal,kanban,hooks,doctor,readiness,configure,health,proposals,approve,reject,repair,rollback,sdk,slash,coding,opportunity,mutation,research,builder,ingest,crm-ingest,crm-migrate,crm-funnel,document-vault,outreach-scheduler,agent-os,vault,upgrade,integrations,upstream,scout,channel-shield,email-shield,product,sidecar,ops,incident,forensics,audit,policy,language,agent-app,security,dump,debug,backup,usage,checkpoints,import,config,pairing,skills,bundles,plugins,curator,memory,tools,computer-use,mcp,sessions,insights,claw,version,update,uninstall,acp,profile,completion,dashboard,desktop,gui,logs,prompt-size}
...
Keprix - AI assistant with tool-calling capabilities
positional arguments:
{chat,model,fallback,secrets,migrate,gateway,proxy,lsp,setup,postinstall,whatsapp,whatsapp-cloud,slack,send,login,logout,auth,status,cron,webhook,portal,kanban,hooks,doctor,readiness,configure,health,proposals,approve,reject,repair,rollback,sdk,slash,coding,opportunity,mutation,research,builder,ingest,crm-ingest,crm-migrate,crm-funnel,document-vault,outreach-scheduler,agent-os,vault,upgrade,integrations,upstream,scout,channel-shield,email-shield,product,sidecar,ops,incident,forensics,audit,policy,language,agent-app,security,dump,debug,backup,usage,checkpoints,import,config,pairing,skills,bundles,plugins,curator,memory,tools,computer-use,mcp,sessions,insights,claw,version,update,uninstall,acp,profile,completion,dashboard,desktop,gui,logs,prompt-size}
Command to run
chat Interactive chat with the agent
model Select default model and provider
fallback Manage fallback providers (tried when the primary
model fails)
secrets Manage external secret sources (Bitwarden Secrets
Manager)
migrate Migrate configuration for retired models or deprecated
settings
gateway Messaging gateway management
proxy Credential injection proxy and OAuth upstream proxy
lsp Language Server Protocol management
setup Interactive setup wizard
postinstall Bootstrap non-Python deps for pip installs (node,
browser, ripgrep, ffmpeg)
whatsapp Set up WhatsApp integration
whatsapp-cloud Set up WhatsApp Business Cloud API integration
slack Slack integration helpers (manifest generation, etc.)
send Send a message to a configured platform (scripts, cron
jobs, CI).
login Authenticate with an inference provider
logout Clear authentication for an inference provider
auth Manage pooled provider credentials
status Show status of all components
cron Cron job management
webhook Manage dynamic webhook subscriptions
portal Set up Nous Portal (login, model pick, Tool Gateway);
see also `portal info`
kanban Multi-profile collaboration board (tasks, links,
comments)
hooks Inspect and manage shell-script hooks
doctor Check configuration and dependencies
readiness Market, upgrade, and recovery readiness report
configure Run environment discovery (first-run wizard)
health Show current component health status
proposals List pending config optimization proposals
approve Apply a config proposal after review
reject Dismiss a config proposal
repair Manually trigger auto-repair for all components
rollback Roll back a specific env var to its previous value
sdk Manage App Foundation SDK registrations
slash List and run slash commands
coding SWE-agent-style issue-to-patch runner
opportunity Opportunity Engine: discover and validate market
opportunities
mutation Manage synthesized tools and mutation queue
research Research workspace projects and YAML playbooks
builder Project builder and monorepo manager
ingest Ingest external media and artifacts
crm-ingest Canonical CRM lead spreadsheet import/export
crm-migrate Migrate CRM/outreach SQLite into Postgres (dry-run or
apply)
crm-funnel CRM funnel orchestrator, next-best-action, and channel
journey
document-vault Document Vault inventory, flags, and adapter registry
outreach-scheduler Durable outreach campaign sequence scheduler (claim-
lease ticks)
agent-os Agent OS utilities
vault Initialize and validate local markdown vaults
upgrade Safe, guided Keprix upgrades for products (check,
plan, dry-run, execute)
integrations Manage optional integrations
upstream Monitor Hermes upstream releases and manage feature
adoption
scout Scout connectivity and integration tests
channel-shield Channel Shield doctor, adapters, and fixture E2E
email-shield Alias for channel-shield (email-focused)
product Product sidecar provision, registry, Scout register,
and conformance
sidecar Keprix Universal Sidecar: manifest, pair, invoke,
jobs, conformance
ops Security operations runbook and reports
incident Incident response commands
forensics Forensic snapshot and chain-of-custody tools
audit Audit chain verification
policy Show or set operator-owned policy profiles
language Detect, translate, and transcribe text
agent-app Portable agent apps: validate, run, eval, and bundle
security Supply-chain audit (OSV.dev) for venv, plugins, and
MCP servers
dump Dump setup summary for support/debugging
debug Debug tools; upload logs and system info for support
backup Back up Keprix home directory to a zip file
usage LLM token usage and cost analytics
checkpoints Inspect / prune / clear ~/.keprix/checkpoints/
import Restore a Keprix backup from a zip file
config View and edit configuration
pairing Manage DM pairing codes for user authorization
skills Search, install, configure, and manage skills
bundles Create, list, and manage skill bundles (aliases for
multiple skills)
plugins Manage plugins; install, update, remove, list
curator Background skill maintenance (curator); status, run,
pause, pin
memory Configure external memory provider
tools Configure which tools are enabled per platform
computer-use Manage the Computer Use (cua-driver) backend (macOS)
mcp Manage MCP servers and run Keprix as an MCP server
sessions Manage session history (list, rename, export, prune,
delete)
insights Show usage insights and analytics
claw OpenClaw migration tools
version Show version information
update Update Keprix to the latest version
uninstall Uninstall Keprix
acp Run Keprix as an ACP (Agent Client Protocol) server
profile Manage profiles; multiple isolated Keprix instances
completion Print shell completion script (bash, zsh, or fish)
dashboard Start the web UI dashboard
desktop (gui) Build and launch the native desktop app
logs View and filter Keprix log files
prompt-size Show a byte breakdown of the system prompt + tool
schemas
options:
-h, --help show this help message and exit
--version, -V Show version and exit
-z PROMPT, --oneshot PROMPT
One-shot mode: send a single prompt and print ONLY the
final response text to stdout. No banner, no spinner,
no tool previews, no session_id line. Tools, memory,
rules, and AGENTS.md in the CWD are loaded as normal;
approvals are auto-bypassed. Intended for scripts /
pipes.
-m MODEL, --model MODEL
Model override for this invocation (e.g.
anthropic/claude-sonnet-4.6). Applies to -z/--oneshot
and --tui. Also settable via KEPRIX_INFERENCE_MODEL
env var.
--provider PROVIDER Provider override for this invocation (e.g.
openrouter, anthropic). Applies to -z/--oneshot and
--tui. The persistent provider lives in config.yaml
under model.provider; use `keprix setup` or edit the
file to change it.
-t TOOLSETS, --toolsets TOOLSETS
Comma-separated toolsets to enable for this
invocation. Applies to -z/--oneshot and --tui.
--resume SESSION, -r SESSION
Resume a previous session by ID or title
--continue [SESSION_NAME], -c [SESSION_NAME]
Resume a session by name, or the most recent if no
name given
--worktree, -w Run in an isolated git worktree (for parallel agents)
--accept-hooks Auto-approve any unseen shell hooks declared in
config.yaml without a TTY prompt. Equivalent to
KEPRIX_ACCEPT_HOOKS=1 or hooks_auto_accept: true in
config.yaml. Use on CI / headless runs that can't
prompt.
--skills SKILLS, -s SKILLS
Preload one or more skills for the session (repeat
flag or comma-separate)
--yolo Bypass all dangerous command approval prompts (use at
your own risk)
--pass-session-id Include the session ID in the agent's system prompt
--ignore-user-config Ignore ~/.keprix/config.yaml and fall back to built-in
defaults (credentials in .env are still loaded)
--ignore-rules Skip auto-injection of AGENTS.md, SOUL.md,
.cursorrules, memory, and preloaded skills
--safe-mode Troubleshooting mode: disable ALL customizations;
user config, AGENTS.md/memory injection, plugins, and
MCP servers (implies --ignore-user-config and
--ignore-rules)
--tui Launch the modern TUI instead of the classic REPL
--cli Force the classic prompt_toolkit REPL (overrides
display.interface=tui)
--dev With --tui: run TypeScript sources via tsx (skip dist
build)
Examples:
keprix Start interactive chat
keprix chat -q "Hello" Single query mode
keprix --tui Launch the modern TUI (or set display.interface: tui)
keprix --cli Force the classic REPL (overrides display.interface: tui)
keprix -c Resume the most recent session
keprix -c "my project" Resume a session by name (latest in lineage)
keprix --resume <session_id> Resume a specific session by ID
keprix setup Run setup wizard
keprix logout Clear stored authentication
keprix auth add <provider> Add a pooled credential
keprix auth list List pooled credentials
keprix auth remove <p> <t> Remove pooled credential by index, id, or label
keprix auth reset <provider> Clear exhaustion status for a provider
keprix model Select default model
keprix fallback [list] Show fallback provider chain
keprix fallback add Add a fallback provider (same picker as `keprix model`)
keprix fallback remove Remove a fallback provider from the chain
keprix config View configuration
keprix config edit Edit config in $EDITOR
keprix config set model gpt-4 Set a config value
keprix gateway Run messaging gateway
keprix -s keprix-dev,github-auth
keprix -w Start in isolated git worktree
keprix gateway install Install gateway background service
keprix sessions list List past sessions
keprix sessions browse Interactive session picker
keprix sessions rename ID T Rename/title a session
keprix logs View agent.log (last 50 lines)
keprix logs -f Follow agent.log in real time
keprix logs errors View errors.log
keprix logs --since 1h Lines from the last hour
keprix debug share Upload debug report for support
keprix update Update to latest version
keprix dashboard Start web UI dashboard (port 9119)
keprix dashboard --stop Stop running dashboard processes
keprix dashboard --status List running dashboard processes
For more help on a command:
keprix <command> --help
Subcommands¶
| Command | Help excerpt |
|---|---|
chat | [-s SKILLS] [--provider PROVIDER] [-v] [-Q] |
model | [--inference-url INFERENCE_URL] [--client-id CLIENT_ID] |
fallback | See CLI help |
secrets | See CLI help |
migrate | See CLI help |
gateway | {run,start,stop,restart,status,install,uninstall,list,setup,migrate-legacy} |
proxy | {setup,start,stop,status,doctor,env,migrate-vault,migrate,verify,vault-purge,fallback,rotate,route,oauth} |
lsp | See CLI help |
setup | setup model|tts|terminal|gateway|tools|agent |
postinstall | See CLI help |
whatsapp | See CLI help |
whatsapp-cloud | See CLI help |
slack | See CLI help |
send | [message] |
login | [--portal-url PORTAL_URL] [--inference-url INFERENCE_URL] |
logout | See CLI help |
auth | See CLI help |
status | See CLI help |
cron | {list,create,add,edit,pause,resume,run,remove,rm,delete,status,tick} |
webhook | See CLI help |
portal | See CLI help |
kanban | {init,boards,create,swarm,list,ls,show,assign,reclaim,reassign,diagnostics,diag,link,unlink,claim,comment,complete,edit,block,schedule,unblock,promote,archive,tail,dispatch,daemon,watch,stats,notify-s |
hooks | See CLI help |
doctor | See CLI help |
readiness | [--category {market,upgrade,recovery,all}] |
configure | See CLI help |
health | See CLI help |
proposals | See CLI help |
approve | See CLI help |
reject | See CLI help |
repair | See CLI help |
rollback | See CLI help |
sdk | See CLI help |
slash | See CLI help |
coding | See CLI help |
opportunity | See CLI help |
mutation | {list,approve,reject,rollback,synthesize,stats,code} |
research | See CLI help |
builder | {list,analyse,build,scaffold,status,logs,deploy} ... |
ingest | See CLI help |
crm-ingest | See CLI help |
crm-migrate | [--outreach-sqlite OUTREACH_SQLITE] [--no-backup] |
crm-funnel | See CLI help |
document-vault | See CLI help |
outreach-scheduler | See CLI help |
agent-os | {maturity,connections,hello,workflow,milestones,playbook,guardrails} |
vault | {list-packs,init,validate,doctor,migrate-workspace,render-template,audit,ensure-default} |
upgrade | [--skip-tests] [--step] [--to VERSION] [--list-prompts] |
integrations | See CLI help |
upstream | {check,list,review,decide,adopt,complete,work-package,diff,report,cron-install,sync-registry} |
scout | {ping,test-signal,test-command,status,integration-test,signals,suspend,quarantine,block-egress,set-sandbox} |
channel-shield | See CLI help |
email-shield | See CLI help |
product | {register,list,provision,plan,status,upgrade,rollback,disable,remove,conformance} |
sidecar | {init,validate,diff,explain,doctor,plan,apply,export-redacted,start,quickstart,pair,capabilities,invoke,job,watch,send-event,verify-webhook,connector-test,conformance} |
ops | {daily-check,report,compliance,compliance-sync,policy-review,capacity,drill,cron-install} |
incident | {declare,snapshot,rotate-creds,seal-vault,lockdown,post-mortem,list} |
forensics | See CLI help |
audit | See CLI help |
policy | See CLI help |
language | See CLI help |
agent-app | {list,create,catalog,validate,install,run,eval,bundle} |
security | See CLI help |
dump | See CLI help |
debug | See CLI help |
backup | backup- |
usage | usage: keprix usage [-h] {summary,breakdown,export} ... |
checkpoints | See CLI help |
import | See CLI help |
config | See CLI help |
pairing | See CLI help |
skills | {browse,search,install,inspect,list,check,update,audit,uninstall,reset,opt-out,opt-in,repair-official,publish,snapshot,tap,config} |
bundles | See CLI help |
plugins | {install,update,remove,rm,uninstall,list,ls,enable,disable} |
curator | {status,run,pause,resume,pin,unpin,restore,list-archived,archive,prune,backup,rollback} |
memory | See CLI help |
tools | toolsets use plain names (e.g. web, memory). MCP tools use server:tool |
computer-use | See CLI help |
mcp | {serve,add,remove,rm,list,ls,test,configure,config,login,picker,catalog,install} |
sessions | {list,export,delete,prune,optimize,repair,stats,rename,browse} |
insights | See CLI help |
claw | See CLI help |
version | See CLI help |
update | updates.pre_update_backup) |
uninstall | See CLI help |
acp | [--setup-browser] [--yes] |
profile | {list,use,create,delete,describe,show,alias,rename,export,import,install,update,info} |
completion | See CLI help |
dashboard | [--insecure] [--skip-build] [--isolated] [--stop] |
desktop | [--ignore-existing] [--keprix-root KEPRIX_ROOT] |
gui | [--ignore-existing] [--keprix-root KEPRIX_ROOT] |
logs | [--since TIME] [--component NAME] |
prompt-size | See CLI help |