Quick Start.

Initialize

Creates ~/.foreman/ — the SQLite audit db, an Ed25519 identity keypair, and a starter policy.yaml.

$ foreman init
✓ created ~/.foreman/   db · identity.key · policy.yaml

Launch the gateway

Boots the Ink TUI gateway. This is the window you keep open — your live dashboard and approval prompt.

$ foreman start

Wire an agent

Point any MCP client at Foreman. Here's Claude Code — add the server to its config:

{
  "mcpServers": {
    "foreman": { "command": "foreman", "args": ["mcp-stdio"] }
  }
}

Or wrap any subprocess agent so its tool calls get mediated:

$ foreman wrap --name my-agent -- my-agent-binary start

Watch it work

Tail the audit log live, list registered agents, and review the active policy.

$ foreman log tail --follow     # live request stream
$ foreman agent list          # registered agents
$ foreman policy show         # active rules