CLI reference
View as Markdowninsecur is experimental and prelaunch. There is no public sign-up yet, and the hosted service is not approved for valuable production secrets. Local Mode runs the development loop with no account.
insecur agent
Agent harness attribution and child sessions
insecur agent [options] [command]
insecur agent status
Report agent readiness, resolved context, capabilities, and exact next actions
insecur agent status [options]
insecur agent setup
Install or verify project-local agent instructions and scan hooks
insecur agent setup [options]
| Option | Description |
|---|---|
--harness <name> |
agent harness: codex or claude (required) |
--mode <mode> |
scan hook mode: advisory or strict (default: advisory) |
--dry-run |
report the files that would change |
--check |
exit 7 when managed agent setup has drifted |
insecur agent shell
Run a command in a deny-by-default child environment with a derived agent session
insecur agent shell [options]
| Option | Description |
|---|---|
--allow <capabilities> |
comma-separated task capabilities: secrets:list, secrets:set, run, operations:cancel |
--ttl <seconds> |
derived session lifetime from 60 to 86400 seconds |
insecur agent env
Print metadata-only shell exports for a separately launched agent harness
insecur agent env [options]
| Option | Description |
|---|---|
--allow <capabilities> |
comma-separated task capabilities: secrets:list, secrets:set, run, operations:cancel |
--ttl <seconds> |
derived session lifetime from 60 to 86400 seconds |
insecur agent register
Register a structural agent session for audit attribution
insecur agent register [options]