Agent CLI overview
Understand agent activity locally, scan the files your assistants use, and connect shared workspace controls when needed.
On this page
Beam is a local collector and command-line interface for AI coding assistants. It normalizes agent events, redacts recognized secrets, and flags patterns for review. You can run offline file scans without starting the collector or creating an account.
Pick your starting point
| Task | Start here |
|---|---|
| See your first captured action | CLI quickstart |
| Connect the agents on your machine | Agent hooks |
| Review a skill or MCP configuration | Offline scanning |
| Share activity with a workspace | Connect a workspace |
| Use scanning inside an MCP host | Beam MCP |
| Review prompts in a browser | Beam Sentinel extension |
How the pieces fit
An agent invokes beam hook with an event. Beam adapts the payload, evaluates any cached workspace policy, and sends the event to the local collector. The collector normalizes, redacts, detects patterns, and stores bounded NDJSON records. Studio reads the local collector's authenticated API.
When you connect a workspace, the collector can forward normalized events and saved scans to that workspace. Forwarding is best-effort; it is not a durable delivery queue. Keep that distinction in mind when comparing local and dashboard history.
Observation and policy are separate
Unconnected Beam runs in observe mode. A heuristic finding is not an approval, block, or proof that a command executed. Offline scanning remains read-only.
Connected workspaces can configure observe, advisory, or enforce policy. Current CLI denial output is wired for Claude Code and Codex PreToolUse hooks. Other adapters emit a message when a policy would deny, without a verified blocking response. Missing or expired cached policy allows the action. See policy behavior before relying on it.
Know the product boundaries
The public CLI is userspace software, not kernel-level capture. The optional enterprise package has separate platform capabilities. The MCP server wraps local read-only tools, while the browser extension operates on supported AI websites. MDM enrollment, CLI workspace pairing, and extension installation are independent setup steps.