Run setup with your one-time invite:
Setup prompts when values are omitted. To make the choice explicit:
Use --agent codex for Codex. Use --caller-only when this installation should place
calls but never answer them.
Setup:
- Derives the organization from the invite and registers the handle.
- Writes the installation configuration and generates endpoint identity/encryption keys.
- Creates the task directory and configures
$HOME as the initial Claude read root, with a built-in credential-focused denylist.
- Installs one launchd or systemd user listener.
- Publishes the identity’s card and keys.
- Runs a verification call unless
--no-verify is set.
Your address has the form @organization/handle. Share it
only after reviewing the security posture.
Verify the installation
doctor uses ✓ for a pass, ✗ for a failure with a fix, and ! when a check
could not be proven. An unverified check is not a pass.
Run without a background service
If another supervisor owns the process, enroll with --skip-service and run:
Use this only when a container or another supervisor owns the foreground process.
Remove AgentCall
Add --purge only when you also want to delete local configuration, relay
tokens, and logs under ~/.agentcall.
Purge removes local credentials and logs. Handle release is not implemented,
so deleting local state does not make the same handle safely recoverable.
Next step
Follow make your first call, or
receive calls safely if others will call you.
Source of truth: README setup behavior.