Stakpak Agent CLI

What is Stakpak Agent CLI?

Stakpak Agent CLI is an open-source, security-hardened autonomous agent that lives on your machines 24/7, keeps your applications running, and only pings when it needs a human. It integrates with your DevOps stack to provide AI-powered infrastructure management without giving an LLM direct access to production secrets. It can be used as a secure MCP proxy or expose its tools through an MCP server.

How to use Stakpak Agent CLI?

Install via curl (curl -sSL https://stakpak.dev/install.sh | sh), Homebrew (brew tap stakpak/stakpak && brew install stakpak), or Docker (docker pull ghcr.io/stakpak/agent:latest). Initialize with stakpak init, start the 24/7 autonomous runtime with stakpak autopilot up (or stakpak up). Use MCP server modes via --tool-mode local (file/command operations only) or --tool-mode remote (AI-powered). Configure profiles in ~/.stakpak/config.toml and autopilot wiring in ~/.stakpak/autopilot.toml.

Key features of Stakpak Agent CLI

• Secret Substitution: LLM works with credentials without ever seeing them
• Warden Guardrails: Network-level policies block destructive operations
• DevOps Playbooks Baked-in: Curated library of DevOps knowledge
• Asynchronous Task Management: Run background commands with tracking and cancellation
• Reversible File Operations: Automatic backups with recovery capabilities
• Adaptive Intelligence: Rule Books and persistent knowledge learning

Use cases of Stakpak Agent CLI

• Generate infrastructure code (Terraform, Kubernetes, Dockerfiles)
• Debug Kubernetes clusters and configure CI/CD pipelines
• Automate deployments with a secure, 24/7 autonomous runtime
• Manage infrastructure with persistent knowledge and custom playbooks

FAQ from Stakpak Agent CLI

What runtime prerequisites does the autopilot require?

Docker must be installed and accessible. 2GB+ RAM is recommended, and swap is strongly recommended on small Linux hosts.

How does it handle secrets securely?

It uses Dynamic Secret Substitution: the AI can read/write/compare secrets without ever seeing the actual values.

Can I use my own API keys?

Yes. You can configure Anthropic, OpenAI, Gemini, or custom OpenAI-compatible endpoints (e.g., Ollama) in ~/.stakpak/config.toml.

Is Stakpak Agent CLI open source?

Yes, it is licensed under Apache 2.0 and available on GitHub.

What MCP modes are available?

Local Mode (--tool-mode local) allows file operations and command execution without an API key. Remote Mode (--tool-mode remote) enables AI-powered tool use.