CLI for Agents
Options Reference
| Flag | Description | Default |
|---|---|---|
| --host <host> | Local host to forward to | 127.0.0.1 |
| --log | Capture requests to a JSONL log for `inspect` (tunnel only) | off |
| --daemon | Run in background | off |
| --ttl <duration> | Auto-stop after duration, e.g. 4h, 3d, or "never" | 24h |
| --subdomain <name> | Use a stable reserved URL (claimed on first use) | auto |
| --auth <user:pass> | Require HTTP Basic auth (tunnel only, enforced locally) | off |
| --respond <status> | Webhook auto-response status (webhook only) | 200 |
| --respond-body <data> | Webhook auto-response body (webhook only) | {"received":true} |
| --respond-content-type <type> | Webhook auto-response Content-Type (webhook only) | application/json |
| --respond-header <name:value> | Extra response header (webhook only, repeatable, max 16) | none |
| --respond-delay <ms> | Delay before answering, max 10000 (webhook only) | 0 |
| --respond-match <k=v> | Make the --respond* flags a conditional rule (webhook only, repeatable) | off |
| --respond-script <code|@file> | Compute the response per request in a sandboxed isolate (webhook only) | off |
| --verify <provider:secret> | Check each request's provider signature at arrival (webhook only) | off |
| --verified-only | Rules created by this command only fire on valid signatures (webhook only) | off |
| --notify-email | Email on arrivals, max 1 / 15 min (webhook only) | off |
| --notify-match <k=v> | Email when a matching request arrives (webhook only, repeatable) | off |
| --notify-push [k=v] | Push notifications to your enabled devices, max 1 / min (webhook only, repeatable) | off |
| --drift | Drift Watch: email when payload shapes change (webhook only) | off |
| --forward <url> | Deliver matching requests to this URL, signed, with retries | off |
| --match <k=v> | Filter for --forward: method=, path=, or a JSON dot-path (repeatable) | all |
| --forward-transform <tpl> | Deliver a rendered template instead of the raw capture ({{path}} placeholders; @file reads from disk) | envelope |
| --forward-script <code> | Run JS per match in a no-egress isolate (50ms CPU); return value is the delivery body, null skips. @file supported. Excludes --forward-transform | off |
| --forward-content-type <type> | Content-Type of the transformed delivery | application/json |
| --json | Machine-readable output (daemon/read commands) | off |
Run
otterkit login once to authenticate. Provisioning then debits your prepaid credits automatically. For headless/CI, set OTTERKIT_TOKEN (create a token in the console) instead of logging in.