Skip to content

CLI Overview

runok provides two main subcommands for evaluating and executing commands against your permission rules.

Evaluate a command against your rules and report the decision — without executing it. Useful for previewing what runok would do, or for integrating with external tools like Claude Code hooks.

Evaluate a command against your rules and, if allowed, execute it — optionally within a sandbox.

  • Denial feedback — Configure message and fix_suggestion for denied commands.