Commands

CLI Commands

RedCell provides a powerful CLI interface supporting both interactive TUI mode and automated headless execution for CI/CD and security scripts.

Interactive TUI Mode

Running redcell without subcommands opens the full terminal user interface with multi-turn conversation support and live tool execution views.

redcell TUI
❯redcell
Initializing RedCell session (model: GLM 5.2)...
✓ Ready. Type /help for slash commands.

Headless Execution (exec)

Execute a single prompt or workflow headlessly and receive standard output:

redcell exec
❯redcell exec "Analyze auth.log for ssh brute force attempts"

Threat Hunting (hunt)

Provide a plain language hypothesis to hunt across local log files and telemetry:

redcell hunt
❯redcell hunt "Identify unexpected process injection in lsass"

Code Security Review (review)

Audit a file or directory for security vulnerabilities and receive proposed patch diffs:

redcell review
❯redcell review ./app/Http/Controllers/Auth/LoginController.php

Full Command Surface Reference

redcellLaunch the interactive TUI for a full investigation session.
redcell exec "<task>"Run a one-shot task headlessly and exit — ideal for scripts and CI.
redcell hunt "<hypothesis>"Threat-hunt across your telemetry from a plain-language hypothesis.
redcell review <path>Secure code review of a file or repository, with proposed patches.
redcell login | logoutAuthorize or sign out this device via your browser (PKCE).
redcell whoami | usageShow the active account and your current token usage.
redcell updateUpdate the CLI to the latest release channel.
redcell doctorDiagnose your install, config, and connectivity.
redcell resume | forkManage saved sessions — continue or branch existing investigations.
redcell plugin ...Install and manage skills and plugins that extend the agent.
redcell mcp ...Connect and manage Model Context Protocol servers and tools.