# CLI Manager > CLI Manager is an open-source macOS desktop app that runs Claude Code, Codex CLI, Gemini CLI and shells side by side, with Git worktrees as workspaces. An opt-in local REST and MCP API lets another agent open and drive sessions. - Canonical: https://www.anchorterminal.com/tools/cli-manager - Markdown: https://www.anchorterminal.com/tools/cli-manager.md (~6,650 tokens) - Slim: https://www.anchorterminal.com/tools/cli-manager.min.md (~1,480 tokens, same facts, less prose, for token-sensitive contexts) - JSON: https://www.anchorterminal.com/tools/cli-manager.json (this page as data, same URL with Accept: application/json) - Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt) - API: https://www.anchorterminal.com/api/v1/index.json - Licence: CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author. - Updated: 2026-10-15 ## Overview **Grade B · 65.8/100 · rank #329 of 1084 · #9 in Agent harnesses · not agent-ready · confidence medium** ## Assessment An agent can open visible terminal sessions, type into them, wait and read the screen through 12 typed MCP tools or a documented REST API, and the user can take any session back. The API reaches every open session once enabled, the app runs only on macOS, and none of the last 35 CI runs on the main branch passed. ## Facts | Field | Value | | --- | --- | | Vendor | solhun (Jeong Kyeonghun) (https://climanager.solhun.com) | | Kind | Agent harness | | Category | Agent harnesses (https://www.anchorterminal.com/categories/agent-harnesses) | | Transport | Streamable HTTP | | Auth | API key · No account. The AI Control API is off until switched on in Settings > Agents, binds to 127.0.0.1 (default port 47821) and needs a bearer token generated by the app, which can be regenerated. The token is also written to `~/.climanager/control-api.json` (mode 600) while the app runs. | | Pricing | Free (Free · OSS) · Free under MIT with nothing to buy since v1.5.0 (8 April 2026). Versions 1.0 to 1.4 had a paid Pro licence, which the commit of 8 April 2026 removed. The owner pays for each agent CLI's own plan or API key. | | x402 | No · No x402, MPP or L402 in the source, the README or the website (checked 2026-10-14). The app has no paid tier. | | Licence | MIT | | Tools exposed | 12 | | Source | https://github.com/woorichicken/CLI_manager | | Docs | https://climanager.solhun.com/docs/ai-control-api | | llms.txt | https://climanager.solhun.com/llms.txt | | Last release | 2026-10-13 | | GitHub stars | 15 (as of 2026-10-14) | | Surface listed | The macOS app v1.13.1 and its AI Control API (REST and MCP on 127.0.0.1), read from the repository, the docs page and the release notes on 14 October 2026. Nothing was installed or run | | Interfaces | Desktop app for people, plus the opt-in AI Control API. REST under `/v1` (health, workspaces, templates, sessions, output, input, wait, focus, rename, release, delete) and a stateless MCP endpoint at `/mcp` with 12 tools. An agent skill, `climanager-session`, wraps the REST API in a Node script | | Agents run | Claude Code, Codex CLI, Gemini CLI or any shell command, started from user templates. CLI Manager does not run a model loop of its own | | Approvals | Text refused while a question is on screen unless `force: true`. Disconnect AI and release hand a session back. No read-only mode for the API | | Sandbox | None. Sessions are ordinary login shells on the host with the user's rights | | Network | API bound to 127.0.0.1 with Host and Origin checks. Outbound traffic found in source is the update check against GitHub Releases and the user's `gh` CLI | | Git | Worktrees become workspaces, with stage, commit, push and pull requests through `gh` in the app. These are not exposed through the API | | Telemetry | None found in the source. The site FAQ says no data is sent externally | | Agent hooks | Optional Claude Code hooks and statusLine and Codex notify integration, off by default, which wraps rather than replaces existing commands | | Platforms | macOS Apple Silicon and Intel, signed and notarised DMGs. No Windows or Linux builds published | | Releases in 90 days | 12 (v1.7.0 on 17 August to v1.13.1 on 13 October 2026) | | Product Hunt | Second launch on 13 October 2026, ranked 17th that day. Product Hunt dates the first launch to 2025, and the site cites #10 Product of the Day | | Capabilities | agent.multi-agent | | Tags | open-source, local, free, no-card, mit, macos, typescript, mcp, llms-txt, desktop-app | | JSON | https://www.anchorterminal.com/api/v1/tools/cli-manager.json | ## Score breakdown (methodology v0.4, October 2026 research run) Assessed 2026-10-14 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. "This run" is each category's share of the 100 points. | Category | Weight | This run | Score (0–100) | Points | | --- | --- | --- | --- | --- | | Reliability | 16% | 20 | 68 | 13.6 | | Performance | 10% | pending | pending | n/a | | Schema & documentation | 13% | 16.2 | 87 | 14.1 | | Agent ergonomics | 13% | 16.2 | 63 | 10.2 | | Security & auth | 14% | 17.5 | 58 | 10.2 | | Payments & pricing | 10% | 12.5 | 60 | 7.5 | | Task success | 10% | pending | pending | n/a | | Maintenance & community | 7% | 8.8 | 62 | 5.4 | | Transparency & trust (editorial 57, provenance 50) | 7% | 8.8 | 54 | 4.7 | | Negative events | up to −15 | up to −15 | none recorded | 0 | | **Total** | | | | **65.8 → B** | ### Why each score - Reliability 68: Read as local software. Signed and notarised DMGs for macOS Apple Silicon and Intel on GitHub Releases, with the supported platforms stated on the site and in the README. No package registry (20). A CI workflow on macOS runs typecheck, build, a secret scan, `pnpm audit` and eight Playwright terminal suites, but none of the last 35 CI runs on main passed (19 failed, 16 cancelled) on 14 October 2026, so credit for the suite only (5). No issue has ever been filed on GitHub. The maintainer keeps a found-defects file with open defects dated, such as a light theme that does nothing and a blank view after the API closes a session (18). Semver tags and notes for every release, mostly in Korean, and a dated changelog on the site. Breaking changes are not marked as such (10). Version 1.13.1, past 1.0 since 4 December 2025 (15). - Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes. - Schema & documentation 87: The MCP server lists 12 tools, each with a typed JSON Schema input and required fields marked. `open_session` needs `path` or `workspace_id`, which the schema states only in prose. No OpenAPI for the REST side (22). llms.txt at climanager.solhun.com (10). Tool descriptions and the server instructions state purpose and when not to act, for example focus only when the user asked and close only sessions the agent opened (18). Enums on `scope` and `mode`. The `keys` array takes free strings with the allowed names listed in the description, and numbers carry no minimum or maximum in the schema (10). curl examples, a status code table with what to do for each, and one `{ error: { code, message } }` shape (12). REST lives under `/v1`, with release notes and a site changelog (15). - Agent ergonomics 63: 12 compact tools (15). `query` filters on workspaces and sessions, `scope` ai or all, and `lines` and `mode` screen or tail on reads, but no pagination on lists (16). Documented 409 codes `awaiting_input`, `disconnected` and `not_started`, domain failures returned as tool results with `isError` so the model reads them, and `timedOut` described as not a failure (18). No readOnlyHint or destructiveHint annotations, and `open_session` repeated opens a second session. Typing is refused while a question is on screen, which makes a blind retry safer (6). Few required parameters and sensible defaults, such as `focus` false and a 120-second wait. No SDK, only the `climanager-session` agent skill with a Node script (8). - Security & auth 58: Harness reading of the framework checklist, as for the other harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. No telemetry or analytics found in the source. Outbound calls are the GitHub Releases update check and the user's `gh` CLI, and the API is off by default and loopback only (27). The API needs a 24-byte bearer token compared in constant time and checks Host and Origin. Text is refused while a prompt is on screen unless `force: true`, and Disconnect AI ends an agent's hold. Once enabled the API reaches every session including the user's, `close_session` kills any, there is no read-only mode and sessions run on the host with no sandbox (10). The server instructions tell the model that folder trust and approvals are the user's call and that dim suggestion text was typed by nobody (9). Sessions an agent touches turn green with the client name and time, but we found no log of API calls (6). No SECURITY.md, security.txt or bug bounty. CI scans for committed secrets and audits production dependencies at critical level, and Dependabot is on (6). - Payments & pricing 60: No payment protocol (0). Read with the self-hosted rule. Free under MIT with nothing to buy since v1.5.0 (20). No card or account (20). Download and enable the API with no signup (20). The paid Pro licence of versions 1.0 to 1.4 was removed on 8 April 2026, so there is no paid option to score. - Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored. - Maintenance & community 62: v1.13.1 on 13 October 2026 (30). Twelve releases since 17 August 2026 (20). No issues have been filed. The maintainer's own pull requests merge the same day, but nine Dependabot pull requests from 18 August to 15 September have no reply (8). Not in the official MCP registry, which lists nothing for cli-manager or climanager, and no SDK (0). Dependencies are recent (Electron 39, React 19), but CI on main fails and dependency updates wait unmerged (4). - Transparency & trust 54: MIT in LICENSE and as detected by GitHub, while package.json still declares ISC (27). The privacy policy of 14 September 2026 covers the website (Google Analytics, feedback posts, download logs) and FAIR Social Ops, not the app. The site FAQ says the app sends no data externally, which the source we read agrees with (12). No deprecation policy. Dated release notes only (4). No telemetry found to disclose, and the FAQ says none is sent. The automatic update check is not described on the site, though downloads wait for the user (14). Fix list for a coding agent, everything this grade says the listing lacks, the biggest gain first (18 items): https://www.anchorterminal.com/fixes/cli-manager.md (JSON https://www.anchorterminal.com/fixes/cli-manager.json) ### What we couldn't check - Judgement call. Listed in agent harnesses beside Paperclip, because it starts and drives Claude Code, Codex and Gemini CLI sessions for another agent. It does not run the model loop, so `agent.harness` is left out. The code category covers repositories and documentation, and the app's Git functions are not exposed through the API. - The lead was right in substance. The 13 October 2026 Product Hunt launch is the product's second, and `firstReleased` is v1.0.0 on GitHub, 4 December 2025. - We did not install or run the app. Every claim about behaviour comes from the source, the docs and the release notes. - The README calls the app free and open source, and the site says MIT since v1.5.0. Whether the repository was public before April 2026 was not established. - unchecked: rank or date of the first Product Hunt launch. Product Hunt says it launched in 2025 and the site cites #10 Product of the Day without a date. - The licence file names woorichicken and 2024, the build config names LightSoft, the terms name solhun, and package.json says ISC. ### Sources - Product Hunt product page (launch of 13 October 2026, second launch): (seen 2026-10-14) - repository README, LICENSE and package.json: (seen 2026-10-14) - GitHub releases (64 releases, v1.0.0 on 4 December 2025 to v1.13.1 on 13 October 2026): (seen 2026-10-14) - AI Control API contract: (seen 2026-10-14) - decision 0005, local HTTP API: (seen 2026-10-14) - MCP tool definitions: (seen 2026-10-14) - server auth, Host and Origin checks: (seen 2026-10-14) - default settings (API and hooks off): (seen 2026-10-14) - CI workflow: (seen 2026-10-14) - CI runs on main: (seen 2026-10-14) - issues and pull requests: (seen 2026-10-14) - found defects: (seen 2026-10-14) - website and FAQ: (seen 2026-10-14) - AI Control API guide: (seen 2026-10-14) - llms.txt: (seen 2026-10-14) - terms of service: (seen 2026-10-14) - privacy policy: (seen 2026-10-14) - maker's page (owner, early paid sales): (seen 2026-10-14) - climanager-session agent skill: (seen 2026-10-14) - official MCP registry search (no entry): (seen 2026-10-14) - security.txt (404): (seen 2026-10-14) - RDAP for solhun.com: (seen 2026-10-14) ## Who's behind it (provenance 50/100, checked 2026-10-14) | Check | Finding | Points | | --- | --- | --- | | Legal entity named | solhun (Jeong Kyeonghun) | 20/20 | | Domain age | solhun.com, registered 2025-12-01 (under a year) | 0/15 | | Endpoint on the vendor's domain | no hosted endpoint | n/a | | Terms of service | read, states 3 of the 7 things a reader expects | 6.6/10 | | Privacy policy | read, states 3 of the 8 things a reader expects | 6.3/10 | | Status page | not found | 0/10 | | Changelog | published | 10/10 | | security.txt | not found | 0/10 | The terms and the privacy policy (both last updated 14 September 2026) name solhun, cover solhun.com, CLI Manager and FAIR Social Ops, and choose the law of the Republic of Korea. The privacy policy describes the website and FAIR Social Ops, not data handled by the app. solhun.com names its owner as Jeong Kyeonghun (정경훈), a design engineer at LightSoft. The app's build config reads Copyright © 2024 LightSoft, and the licence file reads Copyright (c) 2024 woorichicken. package.json still declares ISC. RDAP at Verisign gives a registration date of 2025-12-01 for solhun.com. The GitHub repository was created on 22 November 2025 under the account agi040922, which now redirects to woorichicken. climanager.solhun.com/.well-known/security.txt returned 404 on 14 October 2026. The repository has no SECURITY.md. The software runs on the owner's Mac, so there is no vendor endpoint or status page to check. ### Terms and privacy, as read A reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice. **Terms of service** (https://climanager.solhun.com/terms), read 2026-10-14, dated 2026-09-14, states 3 of the 7 things a reader expects. - Gives the date it was last updated. Last updated 2026-09-14. - Names the governing law or courts. The law of the Republic of Korea. - Not found in the text. States a limit on its liability. - Not found in the text. Says how the agreement or account can be ended. - Not found in the text. Says how changes to the terms are announced. - Not found in the text. Refers to a service level or uptime commitment. **Privacy policy** (https://climanager.solhun.com/privacy), read 2026-10-14, dated 2026-09-14, states 3 of the 8 things a reader expects. - Gives the date it was last updated. Last updated 2026-09-14. - Not found in the text. Says what personal data is collected. - Says how long data is kept. Names a period of 30 days. - Not found in the text. Says whether personal data is sold or shared for advertising. - Not found in the text. Says what rights people have over their data. - Not found in the text. Gives a privacy contact. - Not found in the text. Says where data is transferred or stored. ## Live (updated 2026-10-14 23:44 UTC) - github `woorichicken/CLI_manager` v1.13.1, released 2026-10-13 - Always current: https://www.anchorterminal.com/api/v1/live/cli-manager.json ## Probe metrics Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score. ## Strengths - 12 MCP tools with typed JSON Schema inputs and server instructions that say when not to focus or close a session - Off by default, loopback only, bearer token, and Host and Origin checks against DNS rebinding and web pages - Text is refused while a question or permission prompt is on screen, and Disconnect AI ends an agent's hold on a session - No telemetry or analytics calls found in the app source. Outbound traffic is the update check against GitHub Releases - Twelve releases between 17 August and 13 October 2026, each with notes on GitHub ## Weaknesses - Once switched on, the API can read, type into and close every session in the app, including the user's own - macOS only, and the API answers only while the desktop app is running and its window is alive - None of the last 35 CI runs on the main branch passed, and nine Dependabot pull requests were open, the oldest from 18 August 2026 - No MCP tool annotations (readOnlyHint, destructiveHint) and no security policy or security.txt - The privacy policy covers the website and another product, not the app ## Before you call it (notes for agents) 1. Ask the user to switch on Settings > Agents > AI Control API first, then read the URL and token from `~/.climanager/control-api.json` 2. On `409 awaiting_input`, read the screen and answer with `keys` such as ["down","enter"]. Leave folder-trust and permission choices to the user 3. Stop using a session on `409 disconnected`. The user took it back 4. Treat `timedOut: true` from `wait` as still running, not as a failure, and wait again 5. Pass `ephemeral: true` when opening a scratch or worktree folder, and close only sessions you opened ## Connect Install: ```bash Download cli-manager--arm64.dmg or -x64.dmg from https://github.com/woorichicken/CLI_manager/releases/latest ``` First request: ```bash curl -s -H "Authorization: Bearer $TOKEN" http://127.0.0.1:47821/v1/templates ``` Claude Code: ```bash claude mcp add --scope user --transport http cli-manager http://127.0.0.1:47821/mcp --header "Authorization: Bearer " ``` ## Similar tools Ranked by shared capabilities, then score. Same-category tools with no shared capability key are listed last. | Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown | | --- | --- | --- | --- | --- | --- | --- | | OpenAI Agents SDK | AA | 86.2 | 1 | agent.multi-agent | no | https://www.anchorterminal.com/tools/openai-agents-sdk.md | | Pydantic AI | A | 83.7 | 3 | agent.multi-agent | no | https://www.anchorterminal.com/tools/pydantic-ai.md | | Microsoft Agent Framework | A | 82.2 | 6 | agent.multi-agent | no | https://www.anchorterminal.com/tools/microsoft-agent-framework.md | | Docker Agent | BB | 76.5 | 34 | agent.multi-agent | no | https://www.anchorterminal.com/tools/docker-agent.md | | Kilo Code CLI | BB | 75.4 | 51 | agent.multi-agent | no | https://www.anchorterminal.com/tools/kilo-code-cli.md | | AgentOS | BB | 75.3 | 55 | agent.multi-agent | no | https://www.anchorterminal.com/tools/agentos.md | ## Panel reviews (0) Reviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): . Desk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md ## Notable - The AI Control API (REST under `/v1`, MCP at `/mcp`) shipped in v1.9.0 on 23 September 2026, off by default and bound to 127.0.0.1 (source: ) - While the API is on it reaches every session in the app, including ones the user opened, and `close_session` kills any of them (source: ) - Text input is refused while a permission prompt or menu is on screen (`409 awaiting_input`), unless `force: true` is passed (source: ) - v1.0.0 was published on GitHub on 4 December 2025. The 13 October 2026 Product Hunt launch is the product's second (source: ) - A paid Pro licence was removed and the app made open source in v1.5.0, 8 April 2026 (source: ) - Builds are published for macOS only (Apple Silicon and Intel), signed and notarised. The site says Windows is planned and Linux is not (source: ) - #9 of 23 in Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md - All 243 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md ## Compare - [Amp vs CLI Manager](https://www.anchorterminal.com/compare/amp-vs-cli-manager.md): C 57.1 vs B 65.8 - [Antigravity CLI vs CLI Manager](https://www.anchorterminal.com/compare/antigravity-cli-vs-cli-manager.md): C 57.4 vs B 65.8 - [Claude Code vs CLI Manager](https://www.anchorterminal.com/compare/claude-code-vs-cli-manager.md): C 61.9 vs B 65.8 - [CLI Manager vs Cline](https://www.anchorterminal.com/compare/cli-manager-vs-cline.md): B 65.8 vs C 60.4 - [CLI Manager vs Devin](https://www.anchorterminal.com/compare/cli-manager-vs-devin.md): B 65.8 vs C 55.7 - [CLI Manager vs Droid CLI](https://www.anchorterminal.com/compare/cli-manager-vs-droid-cli.md): B 65.8 vs C 59.1 - [CLI Manager vs Gemini CLI](https://www.anchorterminal.com/compare/cli-manager-vs-gemini-cli.md): B 65.8 vs B 66.7 - [CLI Manager vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/cli-manager-vs-github-copilot-cli.md): B 65.8 vs C 57.6 - [CLI Manager vs goose](https://www.anchorterminal.com/compare/cli-manager-vs-goose.md): B 65.8 vs BB 73.9 - [CLI Manager vs Kilo Code CLI](https://www.anchorterminal.com/compare/cli-manager-vs-kilo-code-cli.md): B 65.8 vs BB 75.4 - [CLI Manager vs Kiro CLI](https://www.anchorterminal.com/compare/cli-manager-vs-kiro-cli.md): B 65.8 vs C 59.9 - [CLI Manager vs Muse Code](https://www.anchorterminal.com/compare/cli-manager-vs-muse-code.md): B 65.8 vs C 61.3 - [CLI Manager vs OpenCode](https://www.anchorterminal.com/compare/cli-manager-vs-opencode.md): B 65.8 vs B 67.7 - [CLI Manager vs OpenHands](https://www.anchorterminal.com/compare/cli-manager-vs-openhands.md): B 65.8 vs BB 70.8 - [CLI Manager vs Paperclip](https://www.anchorterminal.com/compare/cli-manager-vs-paperclip.md): B 65.8 vs C 59 - [CLI Manager vs Prime Agent](https://www.anchorterminal.com/compare/cli-manager-vs-prime-agent.md): B 65.8 vs C 60.5 - [CLI Manager vs Qwen Code](https://www.anchorterminal.com/compare/cli-manager-vs-qwen-code.md): B 65.8 vs BB 72.4 ## Verify this listing For the vendor. The badge or a plain link to this page verifies the listing, from a page on solhun.com or one of its subdomains, or the README of github.com/woorichicken/CLI_manager. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{"slug": "cli-manager", "url": "…"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify HTML badge: ```html CLI Manager on Anchor Terminal ``` Markdown badge, for a README: ```markdown [![CLI Manager on Anchor Terminal](https://www.anchorterminal.com/badges/cli-manager.svg)](https://www.anchorterminal.com/tools/cli-manager) ``` Plain link: ```html CLI Manager on Anchor Terminal ``` ## Share this listing For the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say CLI Manager is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score. - Dark: https://www.anchorterminal.com/assets/share/cli-manager-dark.png - Light: https://www.anchorterminal.com/assets/share/cli-manager-light.png - Create a video and download its frames: https://www.anchorterminal.com/assets/listing-video/index.html?listing=cli-manager