CLI

memnox --help shows the eight commands you type yourself. Everything else usually happens inside your agent, and memnox help --all lists it. Add --help to any command for its options.

The eight you need

bash

memnox setup                  # put this machine under Memnox, once
memnox status                 # where this machine stands
memnox rewind                 # put your files back
memnox doctor                 # what is risky here, and how to close it
memnox stop --for 30m --reason "rotating keys"   # turn protection off, on the record
memnox start                  # turn it back on
memnox update                 # the latest version, rewired
memnox login                  # connect this machine to your workspace
memnox signin                 # sign in as yourself; login is the machine, this is you

See what can act

bash

memnox scan                   # agents, MCP servers and credentials they can reach
memnox scan --mcp github      # one MCP server, before you trust it
memnox explain gh             # where a capability came from
memnox agents                 # the agents on this machine
memnox doctor --wiring        # is Memnox actually in the path

Rules and modes

bash

memnox config set mode enforce     # off, observe, advise or enforce
memnox mode autonomous             # preset: investigate, autonomous or off
memnox protect                     # propose rules, change nothing
memnox protect --apply             # write them
memnox policy check                # does every rule file load
memnox policy test "gh pr merge 12"   # what one action would get
memnox allow gh.pr-merge --for 2h  # stop asking for a while
memnox freeze payments --for 2h    # stop outside changes for a while
memnox next --agent claude-code    # what is safe to stop asking about

Run an agent

bash

memnox run -- claude                                   # covered, with a session and a way back
memnox run --task "fix checkout" --paths 'src/checkout/**' -- claude
memnox check "deploy the payments service"             # test a plan, nothing runs
memnox mcp wrap                                        # route MCP servers through Memnox
memnox mcp unwrap                                      # put them back
memnox lock src/checkout.ts                            # make a second agent wait

Answer what is waiting

bash

memnox approvals              # calls waiting for a person
memnox approve <id>           # yes, once
memnox approve <id> --session # yes, for this session
memnox deny <id>              # no
memnox paused                 # sessions Memnox is holding
memnox resume <session>       # let one carry on
memnox inbox                  # everything waiting on you

See what happened

bash

memnox timeline --since 2h    # what agents did, in order
memnox timeline --only deny   # only what was stopped
memnox why                    # why the last thing was stopped
memnox trace <id>             # one action, end to end
memnox replay                 # step through the last session
memnox report                 # what agents did in a window
memnox collisions             # two agents in one file

Devices and workspace

bash

memnox pair                   # pair an iPhone or a Mac
memnox devices                # what is paired
memnox signout                # sign yourself out; the machine stays enrolled
memnox whoami                 # which workspace this machine is in
memnox sync                   # pull your team's rules now
memnox logout                 # disconnect, keep the rules

Remove it

bash

memnox uninstall              # remove everything setup added
memnox purge                  # drop old history