# venos

The venos CLI wires your AI clients (Claude Code, Codex, Cursor, Cline, Aider,
Windsurf, Zed, JetBrains, and more) to your venos security gateway in one
command. After it runs, every tool call your AI agents make is classified,
policy-checked, and recorded — with no change to how your developers work.

Closed-source, free to install. Access to a gateway is provisioned by venos: the
CLI is inert without a valid API key, so only paying customers can use it.

## Requirements

- Node.js 18 or newer

## 1. Install

```bash
npm i -g venos
```

(Or run it without installing: `npx venos init`.) The bundled security
components ship inside the package — there is nothing else to download.

## 2. Connect your AI clients

```bash
venos init --orchestrator https://gateway.your-org.venos.ai --api-key venos_xxx
```

`venos init` detects the AI clients installed on your machine and wires each one
to the gateway. It is safe to re-run; it only adds what is missing. The API key
(issued to you by venos) is stored in `~/.venos/config.json` and sent on every
request — re-running without `--api-key` keeps the stored key.

Options:

| Flag | Effect |
|---|---|
| `--orchestrator <url>` | Gateway base URL (default `http://127.0.0.1:8788`) |
| `--api-key <key>` | Per-customer API key (`venos_*`) for the hosted gateway |
| `--json` | Emit machine-readable JSON instead of the human summary |
| `--no-telemetry` | Skip the activation ping |
| `--remove` | Undo `init` — remove the venos entry from every wired client and delete `~/.venos/config.json`. Pre-venos backups are preserved. |

## 3. Verify

Run your AI client as usual. Activity appears in the venos dashboard within a
few seconds of the first tool call. If nothing shows up, confirm the
`--orchestrator` URL is reachable and the API key is valid.

## Other commands

```bash
venos help          # show all commands
venos init --remove # disconnect every client
```

## Upgrading

```bash
npm i -g venos@latest
```
