Kairo

 __           .__               
|  | _______  |__|______  ____  
|  |/ /\__  \ |  \_  __ \/  _ \ 
|    <  / __ \|  ||  | \(  <_> )
|__|_ \(____  /__||__|   \____/  
     \/     \/                  

One CLI for every AI coding agent. Keys encrypted, providers unlocked.

Overview

Kairo provides multi-provider API management with secure credential storage:

• Multi-harness: Claude Code, Qwen Code, Pi, and Crush
• Secure encryption: age/X25519 for all API keys at rest
• Built-in providers: Z.AI, MiniMax, MiniMax (CN), Moonshot AI, DeepSeek, Anthropic, OpenAI, Google, Mistral, Groq, Cerebras, Cloudflare Workers AI, xAI, OpenRouter, Vercel AI Gateway, OpenCode, Hugging Face, Fireworks, Azure OpenAI, and custom providers
• Cross-platform: Linux, macOS, Windows

Quick Start

Install

• Linux/macOS: curl -sSL https://raw.githubusercontent.com/dkmnx/kairo/main/scripts/install.sh | sh
• Windows: irm https://raw.githubusercontent.com/dkmnx/kairo/main/scripts/install.ps1 | iex

Prerequisites

Install one of the supported harness CLIs:

# Claude Code
npm install -g @anthropic-ai/claude-code

# Qwen Code
npm install -g @qwen-code/qwen-code@latest

# Pi
npm install -g @earendil-works/pi-coding-agent

# Crush
# See https://github.com/charmbracelet/crush#installation

Setup

kairo setup          # Interactive setup wizard
kairo list           # List configured providers
kairo zai "query"    # Use a specific provider
kairo -- "query"     # Use the default provider

Commands

Command	Description
kairo setup	Interactive setup wizard
kairo setup --reset-secrets	Regenerate encryption key and re-enter API keys
kairo list	List configured providers
kairo default [provider]	Get or set the default provider
kairo delete <provider>	Delete a provider
kairo <provider> [args]	Execute with a specific provider
kairo -- [args]	Execute with the default provider
kairo harness get	Get the current harness
kairo harness set <name>	Set the default harness
kairo providers list	List all providers in the catalog
kairo providers refresh	Refresh provider catalog from remote source
kairo update	Update to the latest version
kairo version	Show version information
kairo completion [shell]	Generate shell completion script

Full reference: cmd/README.md

Configuration

Locations:

• Linux/macOS: ~/.config/kairo/
• Windows: %USERPROFILE%\AppData\Roaming\kairo\

Files:

• config.yaml - provider and harness settings
• secrets.age - encrypted API keys
• age.key - encryption private key

Security

• X25519 encryption for all API keys
• 0600 permissions on sensitive files
• In-memory decryption during use
• Temporary wrapper scripts for secure token passing to harness CLIs
• Recovery/reset flow via kairo setup --reset-secrets

See Security Architecture

Documentation

• User Guide - Installation and usage
• Development Guide - Setup and contribution
• Architecture - System design
• Troubleshooting - Common issues

Full documentation: docs/README.md

Development

just build
just test
just lint
just pre-release

Resources

• GitHub
• Report Issues

---

License: MIT | Author: dkmnx