Configuration
The full config.json schema, every environment variable, and precedence rules.
atomic-agent is the single command-line tool for running the agent, serving it over HTTP, scheduling background work, managing local models and skills, and inspecting what happened after the fact. This page lists every command and every flag.
If you just want to start chatting, run atomic-agent with no arguments β it opens the terminal UI.
atomic-agent [command] [flags]There are 10 top-level commands. Running atomic-agent with no command opens the TUI.
| Command | What it does |
|---|---|
run | Interactive chat loop on stdin/stdout |
tui | Full terminal UI (default when no command is given) |
serve | Start the OpenAI-compatible HTTP server |
task | Manage the durable task queue (schedule, list, run) |
trace | Inspect, export, and replay recorded sessions |
skill | Install, list, and toggle skills |
models | Manage local llama.cpp models and GPU devices |
config | Read or write config.json |
repl | Minimal debug REPL |
import | Migrate sessions and tasks from Hermes or OpenClaw |
Exit codes: 0 success Β· 1 runtime or logic error Β· 2 bad arguments.
flowchart TD
A["atomic-agent [command]"] --> B{command}
B -->|none| TUI["tui"]
B -->|run| RUN["interactive chat loop"]
B -->|serve| SRV["HTTP server + approval bus"]
B -->|task| TSK["TaskStore / TaskRunner"]
B -->|trace| TRC["trace files (NDJSON)"]
B -->|skill| SK["skill install / toggle"]
B -->|models| MD["managed llama.cpp daemon"]
B -->|config| CF["config.json"]
B -->|import| IM["Hermes / OpenClaw migration"]
RUN --> RT["runtime.runTurn"]
SRV --> RT
TSK --> RT
Starts the agent in a plain stdin/stdout chat loop. Type a message, press Enter, and the agent runs a turn and prints its reply. Diagnostics go to stderr; the assistantβs reply goes to stdout.
atomic-agent run [--cwd DIR] [--max-steps N] [--no-approval]| Flag | Default | Description |
|---|---|---|
--cwd DIR | current directory | Working directory the agent resolves relative paths against and scopes the session to. |
--max-steps N | config.agent.maxSteps (25) | Maximum LLM steps per turn before the loop stops with max_steps. |
--no-approval | off | Force approval level 5 (approve everything) for this process. See the caution below. |
At the default approval level (1), dangerous tools pause and prompt you over stdin. Approval is serial: a long-running approval blocks later ones in the same turn.
The stdin prompt takes four answers, not two:
| Answer | Effect |
|---|---|
y | Approve this one call. |
s | Approve, and allow this whole category (file writes, HTTP, shellβ¦) for the rest of the session. |
a | Approve, and allow this shell command shape for the rest of the session. |
N | Deny. Anything that is not y, yes, s, or a is a refusal. |
s and a only appear when the request is grantable. Writes to the agentβs own trust config (config.json, .env) are never grantable β those requests only ever offer y/N, because a silent write there could raise the ladder for the next boot.
Launches the full React/Ink terminal interface: chat plus tabs for tasks, skills, memory, MCP, providers, local models, and Telegram. This is what runs when you type atomic-agent with no command.
atomic-agent tui [--cwd DIR] [--max-steps N] [--no-approval] [--skip-llama-setup]| Flag | Default | Description |
|---|---|---|
--cwd / --working-dir DIR | current directory | Working directory for the session. |
--max-steps N | config.agent.maxSteps (25) | Max LLM steps per turn. |
--no-approval | off | Force approval level 5 (approve everything). In the TUI, approvals otherwise appear as a modal. |
--skip-llama-setup | off | Skip the first-run model setup wizard. Also settable via ATOMIC_AGENT_TUI_SKIP_LLAMA_SETUP=1. |
Inside the TUI, slash commands drive everything: /help, /new, /clear, /abort, /quit, /theme, plus panel switches like /tasks, /skills, /memory, /mcp, /llm, /models, /telegram, and /import. Sessions are created lazily on your first message, so opening the TUI just to glance at settings does not litter the session store.
Starts a Node HTTP server exposing an OpenAI-compatible chat API plus Atomic Agent management endpoints. Listens until SIGINT (Ctrl-C).
atomic-agent serve [--host H] [--port P] [--cwd DIR] [--api-key K] [--no-approval]| Flag | Default | Description |
|---|---|---|
--host H | 127.0.0.1 | Address to bind. |
--port P | 8787 | Port to listen on. |
--cwd DIR | current directory | Working directory for sessions. |
--api-key K | ATOMIC_AGENT_API_KEY env var | Bearer token required on authenticated routes. If both are omitted, auth is disabled. |
--no-approval | off | Force approval level 5 (approve everything) for all requests. |
Authenticated routes expect an Authorization: Bearer <token> header. Two routes are intentionally public so OpenAI SDKs can probe them before sending a key: GET /health and GET /v1/models.
serve| Method & path | Purpose |
|---|---|
POST /v1/chat/completions | OpenAI-compatible chat, streaming or sync. |
POST /v1/chat/completions/{id}/cancel | Abort a streaming completion by id. |
GET /v1/models | Model catalog (public, single atomic-agent entry). |
GET /health | Liveness probe (public). |
GET /api/capabilities | Runtime wiring summary. |
GET|PATCH /api/config | Read or merge-write user config. |
GET /api/skills, GET /api/skills/{name} | List / inspect skills. |
POST /api/skills/install, /api/skills/uninstall | Manage skills. |
GET /api/sessions, GET|DELETE /api/sessions/{id} | List / fetch / delete sessions. |
POST /api/approval/resolve | Resolve a pending approval. |
GET /api/events | SSE stream of approval requests (replays pending on connect). |
POST|GET /api/tasks, GET|DELETE /api/tasks/{id} | Task CRUD. |
POST /api/tasks/{id}/run, POST /api/tasks/drain | Trigger task execution. |
POST /api/webhooks/{name} | Webhook ingress, materialized as a task. |
Custom headers: X-Atomic-Session-Id (request/response) pins the session; X-Atomic-Completion-Id is returned for streaming; X-Atomic-Extensions opts into named SSE events (e.g. tool_progress) instead of the strict OpenAI subset; X-Webhook-Secret authenticates webhook posts.
Schedule deferred or recurring agent turns. Tasks persist to SQLite and survive restarts. Reads (list, show) use the task store directly; create for recurring schedules and run boot the full runtime.
atomic-agent task list [--session ID] [--status CSV] [--limit N]atomic-agent task show <id>atomic-agent task create [--session ID] --message TEXT [--at MS | --cron EXPR | --every SEC] [--tz IANA] [--notify telegram] [--max-attempts N] [--max-steps N]atomic-agent task cancel <id>atomic-agent task run <id> | --all-pending [--session ID]atomic-agent task tick [--limit N]| Subcommand | Notes |
|---|---|
list | Filter by --session, comma-separated --status, and --limit. |
show <id> | Print one task record. |
create | --message is required. Pick at most one schedule: --at (epoch ms one-shot), --cron (cron expression), or --every (interval in seconds). --tz sets the IANA timezone and is only valid together with --cron β passing it with --at, --every, or no schedule at all is an error. --notify telegram pings you over the Telegram channel when the task finishes; telegram is the only accepted value. |
cancel <id> | Idempotent cancel. |
run <id> / --all-pending | Execute now, applying retry backoff between attempts. |
tick [--limit N] | One-shot drain of all due tasks, then exit. Good for cron-style ops. |
Traces are append-only NDJSON files, one per session, capturing turns, steps, prompts, LLM completions, and tool calls. The trace command reads and replays them.
atomic-agent trace list [--limit N]atomic-agent trace show <sessionId> [--step N] [--raw]atomic-agent trace export <sessionId> [--format ndjson|json]atomic-agent trace replay <sessionId> [--step N]| Subcommand | Notes |
|---|---|
list | Recent trace summaries. |
show <sessionId> | Human-readable chronology. --step N isolates one step; --raw prints unformatted lines. |
export <sessionId> | Dump as ndjson (default) or json. |
replay <sessionId> | Rebuild the stable prefix with current tools/skills/capabilities and compare hashes to detect prompt drift. --step N isolates a step. Exits 0 if no drift, 2 if drift is detected. |
Skills are folders (a SKILL.md plus optional scripts) that extend the agent with reusable playbooks.
atomic-agent skill install <path|owner/repo[/path]|@owner/slug> [--force] [--acknowledge-risk]atomic-agent skill uninstall <name>atomic-agent skill listatomic-agent skill show <name>atomic-agent skill enable <name>atomic-agent skill disable <name>atomic-agent skill browse [--source owner/repo]atomic-agent skill search <query>atomic-agent skill tap list | add <owner/repo> | remove <owner/repo>| Subcommand | Notes |
|---|---|
install <target> | Install from three kinds of source: a local directory path, a GitHub skill hub tap (owner/repo or owner/repo/path), or ClawHub (@owner/slug). --force overwrites an existing skill of the same name. --acknowledge-risk confirms you accept a remote skill flagged as suspicious by the install scan β without it, a flagged skill is refused. |
uninstall <name> | Remove a global skill. |
list | Show all skills with enabled/disabled state and source. |
show <name> | Print the SKILL.md body. |
enable / disable <name> | Toggle visibility by mutating skills.disabled in config.json. Disabled skills stay on disk but are invisible to the model. |
browse [--source owner/repo] | List installable skills from ClawHub plus every configured GitHub tap. --source narrows it to a single tap. |
search <query> | Search ClawHub and the configured taps by keyword. |
tap list|add|remove | Manage the GitHub repositories browse and search read from. Mutates skills.taps in config.json. Ships with anthropics/skills, openai/skills, and vercel-labs/agent-skills. |
Manage the managed-mode local inference daemon: download backends and GGUF models, start/stop the server, and pick GPU devices. Most subcommands require config.localModels.mode = "managed".
atomic-agent models list | status | devicesatomic-agent models pull <id> | use <id> | remove <id>atomic-agent models start | stop | updateatomic-agent models use-device <auto|cpu|Vulkan0>atomic-agent models list-embeddingsatomic-agent models pull-embedding <id>atomic-agent models use-embedding <id> | --disable| Group | Subcommands |
|---|---|
| Chat models | list, pull <id>, use <id>, remove <id>, status, update |
| Daemon | start, stop |
| GPU | devices, use-device <auto|cpu|Vulkan0> |
| Embeddings | list-embeddings, pull-embedding <id>, use-embedding <id> / --disable |
Read or replace the user config file at <stateDir>/config.json.
atomic-agent config getatomic-agent config set '<json>'get prints the whole config file as JSON.set '<json>' replaces the entire file with the JSON you pass.atomic-agent replA minimal scaffold REPL for debugging. Not a substitute for run or tui.
Migrate conversations and scheduled tasks from a legacy agent into Atomic Agent. Imported sessions are prefixed (hermes: / openclaw:) so they never collide with native ones.
atomic-agent import hermes [--source DIR] [--preset default|full] [--include a,b] [--exclude a,b] [--migrate-secrets] [--limit N] [--overwrite] [--dry-run] [--yes]--source defaults to ~/.hermes (or HERMES_STATE_DIR).--preset selects what to import (default = sessions + cron). --include / --exclude adjust it.--migrate-secrets is the only way to copy secrets, and is limited to an allowlist (OPENROUTER_API_KEY, AIMLAPI_API_KEY). Secrets are never part of a preset.atomic-agent import openclaw [--source DIR] [--agent NAME] [--include a,b] [--exclude a,b] [--limit N] [--overwrite] [--dry-run] [--yes]--source defaults to ~/.openclaw (or OPENCLAW_STATE_DIR).--agent picks which agentβs sessions to import (default main).--include / --exclude adjust what is imported (sessions, cron), same as for Hermes.| Flag | Description |
|---|---|
--limit N | Cap the number of sessions processed (-1 = no limit). |
--overwrite | Overwrite a differing destination instead of flagging it as a conflict. |
--dry-run | Preview only β reconciliation runs but nothing is written. |
--yes | Skip the interactive confirmation. |
The CLI reads these at bootstrap. They override the config file for operational and bootstrap values (the file wins for user-facing settings like model and log level).
| Variable | Purpose |
|---|---|
ATOMIC_AGENT_STATE_DIR | Root for state: config.json, traces, tasks.sqlite, memory, skills. Defaults to ~/.atomic-agent. |
ATOMIC_AGENT_LLAMA_API_KEY | Bearer token for llama-server (optional). |
ATOMIC_AGENT_LLAMA_MAX_TOKENS | Max new tokens per completion (default 4096, clamped 64β131072). |
ATOMIC_AGENT_API_KEY | Bearer token for the serve HTTP API (fallback when --api-key is omitted). |
ATOMIC_AGENT_RG_PATH | Override the bundled ripgrep binary path. |
ATOMIC_AGENT_BROWSER_CHANNEL | chrome | msedge | chromium (default chrome). |
ATOMIC_AGENT_BROWSER_EXECUTABLE_PATH | Explicit Chromium binary path (overrides auto-detect). |
ATOMIC_AGENT_BROWSER_HEADLESS | 1 for headless mode (default 0). |
ATOMIC_AGENT_BROWSER_NO_SANDBOX | 1 to pass --no-sandbox (containers/CI only). |
ATOMIC_AGENT_BROWSER_CDP_URL | Attach to an existing browser via Chrome DevTools Protocol. |
ATOMIC_AGENT_DEBUG_ARGV | 1 logs process.argv to stderr. |
ATOMIC_AGENT_UPDATE_CHECK_ON_STARTUP | Check for a newer release at startup (default true). |
The task queue is configured only through environment variables β there is no tasks block in config.json.
| Variable | Default | Purpose |
|---|---|---|
ATOMIC_AGENT_TASKS_ENABLED | true | Master switch for the durable task queue. |
ATOMIC_AGENT_TASKS_MAX_ATTEMPTS | 3 | Default retry budget per task. |
ATOMIC_AGENT_TASKS_RUN_ON_CREATE | true | Run a task immediately when it is created with no schedule. |
ATOMIC_AGENT_TASKS_SCHEDULER_ENABLED | true | Run the long-lived background scheduler. |
ATOMIC_AGENT_TASKS_SCHEDULER_TICK_MS | 5000 | Scheduler poll interval. |
ATOMIC_AGENT_TASKS_MIN_INTERVAL_MS | 1000 | Floor on --every intervals. |
There are many more ATOMIC_AGENT_* tuning vars for the agent loop, tasks, and memory β see the Configuration reference for the full list.
These live in <stateDir>/config.json and back the flags above. Edit them with atomic-agent config set (which replaces the whole file β see above) or the TUI.
| Key | Default | Description |
|---|---|---|
localModels.mode | external | managed runs the daemon; external expects a llama-server you run yourself. models use <id> flips this to managed. |
localModels.url | http://127.0.0.1:8080 | HTTP URL for the llama-server API. |
localModels.managed.modelId | null | Active model id in managed mode. Nothing is active until you pull a model. |
localModels.managed.port | 19091 | Port for the managed chat daemon (embeddings use 19092). |
localModels.completionMaxTokens | 8192 | Max new tokens per completion. |
agent.maxSteps | 25 | Default max steps per turn (overridden by --max-steps). |
agent.tokenBudget | 3000 | Max prompt tokens per turn. |
agent.toolTimeoutMs | 60000 | Tool execution timeout. |
agent.approvalLevel | 1 | Approval ladder, 1β5. See below. --no-approval forces 5 for one process. |
log.level | info | debug | info | warn | error. |
agent.approvalLevel replaced the old boolean agent.approvalRequired in schema v37. It is a 1β5 ladder and each level is cumulative β it stops asking about everything the level below it stopped asking about.
| Level | Name | Stops asking about |
|---|---|---|
1 | paranoid | Nothing β every gated action asks first. This is the default. |
2 | workspace | File writes, edits, and patches strictly inside the session working directory. |
3 | home | Adds file writes anywhere under your home directory, moves to Trash, archive extraction, and HTTP requests. |
4 | operator | Adds guarded shell commands, skill scripts, and process kills. |
5 | full trust | Everything, including browser navigation to non-web URLs and writes to the agentβs own trust config. |
Hardline shell-guard rules sit outside the ladder and block at every level.
Configuration
The full config.json schema, every environment variable, and precedence rules.
HTTP API
Request/response shapes for serve, including streaming chat completions and the approval SSE stream.
Tasks & scheduling
Schedule syntax (--at / --cron / --every), retry behavior, and session binding.
Skills
The SKILL.md format, script allowlisting, and the approval gate for skill.run_script.