AAP CLI

Use the aap CLI to connect your agents to an approval provider and manage their adapters.

Install the CLI

Download the standalone aap binary for macOS or Linux, on amd64 or arm64:

curl -fsSL https://downloads.agentapprovalprotocol.io/install.sh | sh

If prompted, reopen your terminal so the aap command is available. Then install an adapter for your agent.

Installer options

To choose a different directory or pin a version, pass options to the installer:

curl -fsSL https://downloads.agentapprovalprotocol.io/install.sh | env AAP_INSTALL_DIR="$HOME/.local/bin" AAP_CLI_VERSION=0.1.0 sh

For automated setups where you manage PATH yourself, set AAP_NO_MODIFY_PATH=1 to skip changes to your shell configuration.

To update the CLI, run the installer again and restart your agent. For OpenClaw, restart the Gateway. Your saved token and adapter settings are kept.

Direct downloads

You can also download the latest release directly:

Verify direct downloads against SHA256SUMS, make the binary executable and name it aap in your chosen installation directory.

Build from source

With Go 1.25 or later, run from the repository root:

mkdir -p "$HOME/.local/bin"
go build -o "$HOME/.local/bin/aap" ./cmd/aap
"$HOME/.local/bin/aap" version

For source builds, add ~/.local/bin to your PATH if it is not already there.

Install an adapter

Find supported agents on this machine:

aap agent discover

Then choose your agent and follow its adapter setup guide:

• Claude Code
• Codex
• OpenClaw
• Pi
• Hermes Agent
• DeepSeek Harness
• Gemini CLI
• Antigravity

Credentials and maintenance

Your token is saved on this machine, so you only need to enter it during setup. To change your token or provider URL, repeat your adapter's installation steps with the new values, then restart your agent.

Check the setup for supported agents found on this machine:

aap agent discover

Each result shows whether its adapter is installed, incomplete or not installed. If an adapter is incomplete, repeat its installation steps and follow the printed notes. For JSON output, use aap agent discover --json.

To remove an adapter, use its name. For example:

aap agent eject claude-code

Enter y or yes to confirm removal. For scripts, add --yes to skip the prompt:

aap agent eject claude-code --yes

Removing an adapter also removes its saved token from this machine. Revoke the token with your provider too if you no longer need it.

Use as a Go library

The CLI is built as a Go library. For custom setups, import the adapters package to build your own installer:

import "github.com/agentapprovalprotocol/agentapprovalprotocol/adapters"

func installAdapter(instanceToken, aapBaseURL string) (adapters.InstallResult, error) {
    adapter, err := adapters.Lookup("claude-code")
    if err != nil {
        return adapters.InstallResult{}, err
    }
    return adapter.Install(instanceToken, aapBaseURL)
}