AAP CLI

Use the aap CLI to connect your agents to an approval provider and manage their adapters.

Install the CLI

Download the standalone aap binary for macOS or Linux, on amd64 or arm64:

curl -fsSL https://downloads.agentapprovalprotocol.io/install.sh | sh

If prompted, reopen your terminal so the aap command is available. Then install an adapter for your agent.

Installer options

To choose a different directory or pin a version, pass options to the installer:

curl -fsSL https://downloads.agentapprovalprotocol.io/install.sh | env AAP_INSTALL_DIR="$HOME/.local/bin" AAP_CLI_VERSION=0.1.0 sh

For automated setups where you manage PATH yourself, set AAP_NO_MODIFY_PATH=1 to skip changes to your shell configuration.

To update the CLI, run the installer again and restart your agent. For OpenClaw, restart the Gateway. Your saved token and adapter settings are kept.

Direct downloads

You can also download the latest release directly:

Verify direct downloads against SHA256SUMS, make the binary executable and name it aap in your chosen installation directory.

Build from source

With Go 1.25 or later, run from the repository root:

mkdir -p "$HOME/.local/bin"
go build -o "$HOME/.local/bin/aap" ./cmd/aap
"$HOME/.local/bin/aap" version

For source builds, add ~/.local/bin to your PATH if it is not already there.

Install an adapter

Choose your agent and follow its adapter setup guide:

• Claude Code
• Codex
• OpenClaw
• Pi
• Hermes Agent
• DeepSeek Harness

Credentials and maintenance

Your token is saved on this machine, so you only need to enter it during setup. To change your token or provider URL, repeat your adapter's installation steps with the new values, then restart your agent.

Check which adapters are configured:

aap status

To remove an adapter, use its name. For example:

aap uninstall claude-code

Uninstalling removes the adapter and its saved token from this machine. Revoke the token with your provider too if you no longer need it.

Use as a Go library

The CLI is built as a Go library. For custom setups, import the adapters package to build your own installer:

import "github.com/agentapprovalprotocol/agentapprovalprotocol/adapters"

func installAdapter(instanceToken, aapBaseURL string) (adapters.InstallResult, error) {
    adapter, err := adapters.Lookup("claude-code")
    if err != nil {
        return adapters.InstallResult{}, err
    }
    return adapter.Install(instanceToken, aapBaseURL)
}