agi exec for CI
Run any task non-interactively and stream typed JSON events. Every tool call, fallback, and turn usage arrives as machine-readable JSONL your pipeline can parse.
Capabilities
Run any task non-interactively and stream typed JSON events. Every tool call, fallback, and turn usage arrives as machine-readable JSONL your pipeline can parse.
Every session persists with a turn-by-turn journal. Continue with agi resume. Branch with agi fork. Fork any past turn into a new named session.
Tool execution runs inside macOS Seatbelt or Linux bubblewrap. Opting out is loud: the TUI shows a red “no sandbox” indicator whenever sandboxing is off.
Lifecycle hooks fire across the session. /skills lists every discovered skill. Custom slash commands are plain markdown files in your project or home directory.
Connect MCP servers over stdio, SSE, or Streamable HTTP with optional OAuth. Or expose agi itself to any MCP client with agi mcp-server.
Pass a comma-separated model list and the CLI fails over on rate limits, network errors, and stream disconnects. A visible banner and a JSON event fire on each switch.
The TUI status line shows session tokens, credits and context usage. Credit totals are computed from the session cost ledger.
agi migrate imports your settings from Claude Code, and imported commands and prompts are recognized where they already live.
Subcommands
Every subcommand below ships in the agi binary. Short aliases where it counts: e for exec, a for apply.
| exec | Run a task non-interactively |
| review | Non-interactive code review |
| apply | Apply latest diff as a git patch |
| sandbox | Run a command inside a sandbox |
| mcp-server | Run as an MCP server (stdio) |
| app-server | Run the app server for IDE integration |
| resume | Continue a previous session |
| fork | Fork a previous session |
| session | Inspect or branch sessions |
| plugin | Manage plugins |
| history | Browse session history |
| login | Sign in to a provider or configure BYOK |
| auth-status | Show auth status for every provider |
| init | Initialize ~/.agiworkforce/ |
| onboarding | Re-run the first-run onboarding |
Sandbox
On Linux the sandbox is bubblewrap. On macOS it's Seatbelt. Tool execution runs under OS-level sandboxing by default. Riskier actions ask for explicit approval. Turning the sandbox off is a visible, deliberate choice.
Trust modes
Local, BYOK, and AGI Cloud stay separate in the CLI too. /privacy-mode shows the active trust boundary. A Local session only continues elsewhere when you explicitly ask.
Local
Point agi at Ollama or LM Studio and work entirely on your machine.
BYOK
Run agi login <provider>, such as agi login anthropic, and paste your key. A bare agi login signs in to your AGI account instead.
AGI Cloud
Cloud execution from the CLI is public alpha, part of the higher paid plans, and still fails closed without an explicit route.
Coming soon
The agi binary is built for macOS, Linux, and Windows. Its installer checks each release’s signature and checksum before it installs anything, and the download page shows which platforms a signed release covers.
AGI CLI
Resumable sessions, sandboxed execution, and AGI managed cloud in public alpha, included with Pro, Max 5x, Max 20x, Team, and Enterprise.