CLI Reference

All commands are available via the kyber binary.

Global options

Flag	Description
`--version`, `-v`	Show version and exit
`--help`	Show help

Commands

`kyber onboard`

Initialize configuration and workspace. Creates ~/.kyber/config.json (settings), ~/.kyber/.env (secrets with 600 permissions), and ~/.kyber/workspace/ with default template files.

`kyber agent`

Start an interactive chat session in the terminal.

Flag	Description
`-m`, `--message`	Send a single message and exit

kyber agent                        # interactive mode
kyber agent -m "Hello from Kyber"  # single message

`kyber gateway`

Start the gateway (agent + all enabled chat channels + cron + heartbeat). Warns on startup if config.json still contains plaintext API keys.

Flag	Description
`-p`, `--port`	Override gateway port (default: `18790`)
`-v`, `--verbose`	Enable debug logging

`kyber dashboard`

Start the web dashboard.

Flag	Description
`--host`	Override bind address (default: `127.0.0.1`)
`--port`	Override port (default: `18890`)
`--show-token`	Print the full auth token on startup

`kyber status`

Show current configuration: provider, model, enabled channels, workspace path, and secrets file status.

`kyber show-dashboard-token`

Print the dashboard auth token to stdout. Useful for copying into a browser or script without starting the dashboard.

`kyber migrate-secrets`

Migrate API keys and tokens from config.json to ~/.kyber/.env. Blanks secret fields in the JSON file and sets file permissions to 600. Safe to run multiple times — skips if already clean.

`kyber channels status`

Show the connection status of all configured chat channels.

`kyber channels login`

Link a WhatsApp account by scanning a QR code. Starts the Node.js bridge and displays the QR in the terminal.

Skills commands

`kyber skills list`

List all skills from workspace, managed installs, and built-in.

`kyber skills add`

Install a skill from a source (URL, GitHub repo, or local path).

`kyber skills remove`

Remove a managed skill by name.

`kyber skills update-all`

Update all managed skills to their latest versions.

`kyber skills search`

Search for skills on skills.sh.

Cron commands

`kyber cron list`

List all scheduled cron jobs.

`kyber cron add`

Add a new scheduled job.

Flag	Description
`--name`	Job name
`--message`	Message to send to the agent
`--every`	Run every N seconds
`--cron`	Cron expression (alternative to `--every`)
`--deliver`	Deliver output to a chat channel
`--to`	Chat ID to deliver to
`--channel`	Channel name (`telegram`, `discord`, etc.)

`kyber cron remove`

Remove a scheduled job by ID.

kyber cron remove <job-id>

`kyber cron enable`

Enable or disable a scheduled job.

`kyber cron run`

Manually trigger a scheduled job immediately.

Restart commands

`kyber restart gateway`

Restart the gateway service. Uses launchctl on macOS and systemctl --user on Linux.

`kyber restart dashboard`

Restart the dashboard service. Uses a detached process to allow the restart to complete gracefully.

Security commands

`kyber setup-clamav`

Install and configure ClamAV for malware scanning. Detects your OS and package manager, installs ClamAV, configures both freshclam.conf and clamd.conf, creates the socket directory, enables system services (clamd daemon + freshclam updater), and downloads the latest virus signature database.

Idempotent — re-running fixes broken installs. The final output reflects actual service status: if clamd fails to start, it tells you honestly instead of claiming success.

The daily scan cron job is registered automatically at startup. No manual scheduling needed.

See the Security Center guide for more details.

SSH Tunnel Security