Run Veirox the way
your team works.

CLI

Get the binary

Pick a package manager — Homebrew, Scoop, curl|sh, or Docker. See the CLI install page for all options.

copybrew install veirox-cloud/veirox/veirox
veirox version
veirox doctor

Console

Open in a browser

No install needed — the console is a static SPA hosted at /console/. First visit redirects to the login screen at /console/login.

copyopen https://console.veirox.com/

CLI

veirox init

Detects local context (git remotes, kubectl context, AWS profile), creates a project, seeds starter runbooks, and wires up your local agent client (Cursor, Claude Code, Codex…).

copyveirox login
veirox init --project payments-api

# Resume a flow that was interrupted
veirox init --resume

Console

New project wizard

From /console/projects, click New project. The wizard walks through name → slug → optional connectors → review.

• → Pick a colour for the project (used in tags / badges)
• → Optionally seed runbooks from the marketplace
• → Optionally invite teammates by email

CLI

veirox agent run

One-shot prompt. With --follow, streams the resulting session live until completion.

copyveirox agent run "check prod-api error rate" --follow

# Cancel an in-flight session
veirox agent cancel <session-id>

Console

Chat at /console/<org>/chat

Three-pane layout: session list (left), transcript with tool-call cards (centre), artifacts & entity sidebar (right). Inline approval buttons appear when the agent requests permission.

• → Pin sessions you want to keep around
• → Fork a session to explore an alternate path
• → Export a session to Markdown or PDF

CLI

veirox task

copy# Browse + filter
veirox task list --enabled --limit 20

# Create a daily task
veirox task new \
  --name "morning prod check" \
  --cron "0 9 * * *" \
  --prompt "@runbook morning-check"

# Trigger from CI with idempotency
veirox task run <task-id> \
  --idempotency-key "$BUILD_ID" \
  --wait

Console

Tasks at /console/<org>/tasks

• → Templates tab — install pre-built tasks (auto-remediator, alert investigator, change correlator, cost monitor)
• → New task — visual cron picker with preview, prompt editor, channel/repo links
• → Each task has a public webhook URL (configurable) for inbound triggers
• → Per-task Sessions tab shows every run with its outcome

CLI

copy# Charm UI for the latest active session
veirox tail

# Stream by id
veirox logs <session-id> --follow

# ndjson for jq pipelines
veirox logs <id> --follow --plain \
  | jq -r 'select(.type=="text") | .text'

# Poll-based watch over lists
veirox watch tasks
veirox watch sessions
veirox watch connectors

Console

Live transcript

Open any session at /console/<org>/sessions/<id> while it's running. Tool calls render as collapsible cards; approval requests pop a modal.

• → Two viewers can watch the same session simultaneously
• → Cancel and retry are one-click
• → Token / tool / latency metrics shown per turn

CLI

copyveirox approval list --limit 25
veirox approval info <id>

# Approve / reject from the terminal
veirox approval approve <id> \
  --comment "lgtm — checked diff"

veirox approval reject <id> \
  --comment "wrong window"

Console

Approvals queue

Browse pending decisions at /console/<org>/approvals. Inline approval buttons also appear in chat, Slack, and Telegram — same backing record.

• → Public read links for one-off external reviewers
• → Threaded comments per approval
• → Mark resolved when the action is no longer relevant

CLI

copyveirox webhook list
veirox webhook providers
veirox webhook events --limit 50

# Send a test event
veirox webhook test <config-id> \
  --body-json '{"alertname":"Smoke"}'

# Replay a delivered event
veirox webhook replay <event-id>

Console

Webhooks at /console/<org>/webhooks

Click New webhook, pick a provider, paste sample payload to validate, copy the URL into your alerting tool.

• → Event timeline per webhook with replay + drilldown
• → Routing rules: priority, fan-out, approval-gated dispatch
• → Privacy controls: redaction rules, metadata-only mode, payload purge

Step-by-step provider guides: AlertManager · Grafana · PagerDuty

CLI

copyveirox mcp list
veirox mcp register \
  --name "slack-extra" \
  --transport stdio \
  --command "mcp-slack"

veirox mcp tools <server-id>
veirox mcp test <id> <tool> \
  --input '{"channel":"#ops"}'

Console

MCP servers at /console/<org>/mcp-servers

Add stdio or streamable-HTTP servers. The console pings each on save and renders the tool catalogue.

CLI

veirox mcp setup

Wires Cursor (deeplink), Claude Code / Codex (CLI handoff), Continue / Claude Desktop (snippet) in one go.

copyveirox mcp setup \
  --client cursor \
  --client claude-code \
  --client codex

veirox mcp print --client claude-desktop
veirox mcp doctor

Console

API & MCP Access

Mint an API key at /console/<org>/settings/api-keys. The reveal modal generates copy-paste config snippets for every supported client + a "Try it" button that previews the tool list.

CLI

copyveirox connector list
veirox connector add "prod-bastion" \
  --description "prod jumpbox" \
  --label env=prod

# Mint a one-time enrollment token
veirox connector enroll <id>

# See what was tried + denied
veirox connector logs <id>
veirox connector policy show <id>
veirox connector policy simulate <id> \
  --command "systemctl status nginx"

Console

Connectors at /console/<org>/connectors

• → Mint enrollment token button — copy, paste into the install command
• → Per-connector live status, command log, auth-event timeline
• → Policy editor with simulator — test rules before saving
• → Policy groups — apply floors across many connectors
• → Three-layer tenant verification on every command

CLI

copyveirox api-key list
veirox api-key create \
  --name "ci-pipeline" \
  --role member \
  --scope tasks:trigger \
  --project-id <uuid> \
  --ttl-days 90

veirox api-key rotate <id>
veirox api-key revoke <id> --yes

Console

API & MCP Access

At /console/<org>/settings/api-keys: list, create, rotate, revoke. Three-mode tool allow-list ("all my scopes" · "pick specific tools" · "use template") and a per-mount tool-list preview.

Roles: viewer · member · admin · owner. Scopes layer on top — see services/auth/rbac.py for the full ladder.

CLI

copyveirox audit list \
  --action-prefix auth. \
  --from 2026-05-01 \
  --limit 100

veirox audit stats --days 30
veirox audit export --format csv

Console

Audit at /console/<org>/settings/audit

• → Filter bar: action, actor, resource, date range
• → Per-row metadata viewer (with secrets scrubbed)
• → Stats panel + CSV export

CLI

copyveirox governance retention list

# 90-day TTL for sessions
veirox governance retention set sessions \
  --days 90 --archive-to-s3

# File a Data Subject Request
veirox governance dsr create \
  --subject-email user@example.com \
  --request-type erasure

veirox governance pii-inventory

Console

Governance at /console/<org>/settings/governance

• → Retention policy table with TTL sliders + archive toggle
• → DSR queue with state transitions
• → PII entity inventory and field-level redaction rules

CLI

copyveirox billing plans
veirox billing subscription
veirox billing invoices --limit 12
veirox billing portal     # Stripe portal URL

veirox dashboard usage summary
veirox dashboard usage trend

Console

Billing at /console/<org>/settings/billing

Plan selector, usage chart, invoice list, change/cancel/resume flows. Cost-ceiling configuration is in agent settings under "Limits".