Skip to content
New

DeepSeek V4.1 Flash free for 7 days: 10M tokens a day after any top-up. Until Nov 30.

How it works

A research agent for your terminal.

The NotHoly CLI runs on your machine, under your authorization. In the default mode it asks before it writes a file or runs a command.

~ notholy help
$ 
NotHoly CLI

  notholy                       agent in this terminal
  notholy "question"            one answer (also reads stdin)
  notholy login | logout | whoami
  notholy models | credits
  notholy cve CVE-2024-3094
  notholy cve search "openssl" [--kev] [--min-cvss 7]
  notholy analyze ./app.apk     static analysis in the sandbox
  notholy connect <tool> [--global] [--undo]   claude, codex, opencode
  notholy run <tool> [args...]  start the tool on NotHoly for this process only
  notholy mcp                   MCP server on stdio
  notholy doctor
  notholy version

  --json on any lookup prints JSON.
The real output of notholy help.

Install

One binary for macOS, Linux and Windows, on amd64 and arm64. The script checks the SHA-256 checksum before it installs anything.
  1. 1/3

    Install the binary

    The script picks the build for your OS and CPU and checks its SHA-256 checksum. It installs to ~/.local/bin on macOS and Linux, and to %LOCALAPPDATA%\notholy\bin on Windows, which it adds to your PATH.

  2. 2/3

    Check the install

    Prints the version. If the shell says the command is not found, open a new terminal or add the folder the script printed to your PATH.

  3. 3/3

    Sign in

    Shows a code and opens notholy.com/activate. Confirm the code there and the CLI stores its own key in your system keychain. In CI, skip this and set NOTHOLY_API_KEY.

  1. # 1/3 Install the binary

    $ curl -fsSL https://notholy.com/install.sh | sh
  2. # 2/3 Check the install

    $ notholy --version
  3. # 3/3 Sign in

    $ notholy login

Commands

Each command with one line on what it does. notholy help prints the full list.

The agent in your terminal

  • $ notholy

    Opens the research agent in this terminal, in ask mode.

  • $ notholy "triage this stack trace" < crash.log

    One answer, then exit. It reads stdin too, so you can pipe a log or a file in.

  • $ notholy --mode plan

    Starts the agent in another mode: plan, ask or auto-edit.

  • $ notholy -p "list the routes in ./src"

    Runs one prompt with the agent and its tools, then exits.

Account

  • $ notholy login

    Signs in through notholy.com/activate and keeps the key in your system keychain.

  • $ notholy whoami

    Shows the organization, the masked key, the API address and the balance.

  • $ notholy models

    Lists the models with their context and price per 1M tokens.

  • $ notholy credits

    Prints the balance.

  • $ notholy logout

    Removes the key from this machine.

Research

  • $ notholy cve CVE-2024-3094

    One CVE with CVSS, EPSS and whether it is in CISA KEV.

  • $ notholy cve search "openssl" --kev --min-cvss 7

    Searches CVEs. --kev keeps only the ones in CISA KEV.

  • $ notholy analyze ./app.apk

    Uploads a file for static analysis. A one-hour expiry is recorded, but automatic deletion is not active yet.

Other agents

  • $ notholy run claude

    Starts Claude Code on NotHoly for this process only. Also codex and opencode.

  • $ notholy connect codex

    Writes the tool's config with a backup. --global writes the user-wide file, --undo restores it.

  • $ notholy mcp

    Runs the NotHoly MCP server on stdio for another agent.

Diagnostics

  • $ notholy doctor

    Checks the account, the models, streaming and each connector, with timings.

  • $ notholy --version

    Prints the version.

  • $ notholy help

    Prints the full list.

Add --json to any lookup to get JSON instead of text.

What each mode may do on its own

The agent reads files freely in every mode. Writing and running commands depend on the mode you start it in.
What each mode may do on its own
planaskauto-edityolo
Read, glob and grep filesRunsRunsRunsRuns
Edit and write filesRefusedAsks firstRunsRuns
Run shell commandsRefusedAsks firstAsks firstRuns
  • plan Reads only.
  • ask Default. Asks before writing files and running commands.
  • auto-edit Edits without asking. Commands still ask.
  • yolo Asks for nothing. Needs --yolo on every run.

Inside a session

Type these at the › prompt.
  • › /model <id>Switches the model for the rest of the session.
  • › /effort off|low|high|maxSets the reasoning effort. Each model page lists the levels it accepts; any other level goes to the nearest one.
  • › /mode plan|ask|auto-editChanges the mode without leaving.
  • › /costTokens used in this session, and your balance.
  • › /compactKeeps the instructions and the last 6 messages.
  • › /resumePicks up the last saved session.
  • › /mcpPrints the line that adds NotHoly to Claude Code as an MCP server.
  • › /exitLeaves the agent.

If the folder has a NOTHOLY.md, the agent reads it as project instructions. Sessions are saved in ~/.notholy/sessions with 600 permissions.

Connectors

Each integration below was tested against the NotHoly gateway with a real prompt and a tool call. notholy run changes nothing in your global configuration.

Ask anything your scope allows.

Create an account, add credits from $10 and ask the first question in the chat or the terminal.

  1. 1/3

    Create the account

    Individual or company. You can switch to a company later without losing balance or keys.

    IndividualCompany
  2. 2/3

    Add credits

    By card, from $10. Pay per token, no subscription.

    $10.00minimum deposit
  3. 3/3

    Ask

    In the chat, or install the CLI and run notholy login in your terminal.

    $ notholy login