Skip to content

The tools your agent
already knows how to run.

Every Diali agent runs on a sandboxed machine with a real command line. These binaries are preinstalled, so an agent can search a repo, query a database, ship a deploy or convert a file with no setup step in the way. A few, like the AI coding agents, depend on the engine you pick.

Toolbelt

claude

Claude Code. Read, write and refactor a codebase from the terminal.

gemini

Gemini CLI. Prompt Google’s models and act on a repository.

codex

OpenAI Codex. Plan and apply code changes from the command line.

opencode

An open-source coding agent, pointed at the model provider you choose.

kimi

Moonshot’s Kimi CLI, wired to the local adapter.

openclaw

The Diali agent runtime itself: start, inspect and drive a session.

hermes

The Hermes agent runtime and its gateway, driven from the shell.

agent-browser

Drive a headless browser: navigate, click, fill and capture.

hf

Download and upload models and datasets on the Hugging Face Hub.

rg

Ripgrep. Recursive regex search across a whole repository in milliseconds.

fd

A friendlier find: locate files and directories by name or pattern.

bat

cat with syntax highlighting, line numbers and Git markers.

jq

Filter, reshape and pretty-print JSON straight from a pipe.

yq

The same query language as jq, applied to YAML and TOML.

mlr

Miller. Cut, join, sort and summarise CSV, TSV and JSON records.

qsv

Index, join, slice and validate very large CSV files at speed.

csvcut

csvkit. Pull, drop and reorder the columns of a CSV.

in2csv

Turn Excel, JSON or fixed-width files into CSV.

sql2csv

Run a SQL query against a database and get CSV back.

7z

Pack and unpack 7z, and most other archive formats.

zip

Create and update ZIP archives.

unzip

List and extract the contents of a ZIP archive.

xz

Compress and decompress with xz and LZMA.

zstd

Fast compression and decompression with Zstandard.

less

Page through a long file or a command’s output.

file

Identify what a file actually is, whatever its extension claims.

tree

Print a directory as an indented tree.

patch

Apply a diff to a file or to a whole source tree.

column

Line piped text up into readable columns.

bc

Arbitrary-precision arithmetic straight from a pipe.

pv

Watch data move through a pipe, with rate and progress.

csvsql

Query CSV files with SQL, or load them straight into a database.

csvlook

Render a CSV as an aligned table you can actually read in a terminal.

csvstat

Report types, null counts and ranges for every column in a CSV.

csvjson

Convert a CSV to JSON or GeoJSON, one object per row.

csvgrep

Filter CSV rows by pattern or regex against named columns.

csvsort

Sort a CSV by one or more columns, with type-aware ordering.

csvjoin

Join two or more CSV files on a shared column.

sponge

Soak up stdin fully before writing, so a pipe can rewrite its own input file.

ts

Prefix every line of a stream with a timestamp.

chronic

Run a command and print its output only when it fails.

ifne

Run a command only when stdin is not empty.

pee

Send stdin to several commands at once, the way tee does for files.

vipe

Drop an editor into the middle of a pipe to hand-edit the stream.

vidir

Rename and delete files by editing a directory listing as text.

isutf8

Check whether a file or stream is valid UTF-8.

errno

Look up an errno by number, name or message.

hexdump

Dump a file as hex, octal or ASCII to inspect binary content.

ast-grep

Search and rewrite code by syntax-tree pattern instead of by regex.

ps

List the processes running in the sandbox.

top

Watch processes, CPU and memory in real time.

htop

An interactive process viewer, easier to read than top.

pstree

Show the process list as a parent and child tree.

free

Report how much memory is in use and how much is left.

vmstat

Sample memory, swap, IO and CPU activity over time.

iostat

Report disk throughput and CPU load per device.

lsof

List open files and sockets, and the processes holding them.

tmux

Keep long jobs alive in detachable terminal sessions.

killall

Signal every process matching a name.

fuser

Find which processes hold a file, directory or socket open.

mpstat

Report per-core CPU utilization over an interval.

pidstat

Report CPU, memory and I/O per process over an interval.

sar

Collect and replay system activity samples over time.

git

Clone, branch, commit, rebase and inspect any repository.

git-lfs

Fetch and push the large binary files a repo tracks with Git LFS.

gh

GitHub issues, pull requests, reviews, Actions and releases.

glab

GitLab issues, merge requests, pipelines and releases.

node

Run JavaScript and TypeScript scripts, servers and build steps.

npm

Install dependencies and run the scripts a project already defines.

bun

Install, bundle, test and run, all in one fast toolchain.

python3

Run Python scripts and one-off snippets.

uv

Resolve Python dependencies and run tools in isolated environments.

go

Build, test and run Go programs and modules.

rustc

Compile Rust source files directly.

cargo

Build, test and manage Rust crates and their dependencies.

make

Run the build targets a Makefile already describes.

cmake

Configure and generate native builds for C and C++ projects.

gcc

Compile and link C programs.

g++

Compile and link C++ programs.

gofmt

Format Go source to the canonical style, in place or on stdout.

bunx

Run a package binary straight from npm without installing it first.

uvx

Run a Python CLI from PyPI in a throwaway environment, with no install step.

just

Run project recipes from a justfile.

task

Run project tasks from a Taskfile.yml.

php

Run PHP scripts — and the interpreter wp-cli needs for WordPress work.

pkg-config

Tell a build where a system library's headers and flags live.

autoconf

Generate the ./configure script an autotools source tree expects.

automake

Generate the Makefiles that go with an autotools configure script.

libtool

Build and link shared libraries portably during a source build.

patchelf

Repoint a downloaded binary's interpreter or library search path.

kubectl

Inspect, apply, scale and debug workloads on any cluster.

helm

Install, upgrade and roll back charts.

helm3

The Helm 3 binary, for clusters and charts pinned to it.

kustomize

Build and patch manifests per environment, without templates.

argocd

Sync, diff and roll back GitOps applications.

eksctl

Create and manage EKS clusters and their node groups.

kubeconform

Validate manifests against the Kubernetes schema before they ship.

stern

Tail logs from many pods and containers at once.

flux

Bootstrap and reconcile Flux GitOps on a cluster.

aws

Every AWS service the authenticated account is allowed to reach.

gcloud

Projects, compute, IAM and deployments on Google Cloud.

gsutil

List, copy and sync objects in Cloud Storage buckets.

bq

Run queries and manage datasets in BigQuery.

az

Resources, resource groups and deployments on Azure.

doctl

Droplets, managed clusters and Spaces on DigitalOcean.

wrangler

Develop, deploy and tail Cloudflare Workers.

cloudflared

Open a Cloudflare tunnel to a local or private service.

cf

Cloudflare’s official CLI for accounts, zones, DNS and the registrar.

hcloud

Manage Hetzner Cloud servers, networks and volumes.

scw

Manage Scaleway instances, storage and serverless.

linode-cli

Manage Akamai Linode instances, volumes and DNS.

vultr-cli

Manage Vultr instances, block storage and DNS.

flyctl

Deploy and scale apps on Fly.io.

fly

The short alias for flyctl.

vercel

Deploy to Vercel and manage environments and domains.

netlify

Deploy to Netlify and manage sites and functions.

railway

Deploy services and manage variables on Railway.

render

Manage services and deploys on Render.

supabase

Manage Supabase projects, database migrations and edge functions.

firebase

Deploy Firebase hosting and functions, and manage Firestore and auth.

tofu

Plan and apply infrastructure with OpenTofu.

terraform

A shim that runs OpenTofu, so existing Terraform scripts keep working.

ansible

Run ad hoc commands across a fleet of hosts.

ansible-playbook

Execute playbooks to configure servers end to end.

ansible-galaxy

Install the roles and collections a playbook depends on.

ansible-vault

Encrypt and decrypt Ansible variable files so secrets stay safe at rest.

ansible-inventory

Inspect and export the resolved Ansible inventory as JSON or YAML.

ansible-doc

Look up a module’s arguments and examples without leaving the shell.

ansible-config

Show the effective Ansible configuration and where each value came from.

cf-terraforming

Export an existing Cloudflare setup as Terraform or OpenTofu code.

pulumi

Define and deploy infrastructure in TypeScript, Python, Go or YAML.

terragrunt

Orchestrate OpenTofu and Terraform across many modules and environments.

crane

Inspect, copy and retag container images in a registry, with no Docker daemon.

duckdb

Analytical SQL over local files: Parquet, CSV and JSON.

sqlite3

Query, migrate and dump SQLite databases.

psql

Query, inspect and administer PostgreSQL.

mysql

Query and administer MySQL and MariaDB.

mongosh

Query collections and run aggregations on MongoDB.

redis-cli

Inspect keys, run commands and watch traffic on a Redis instance.

pg_dump

Dump a PostgreSQL database to SQL or a custom archive.

pg_restore

Restore a PostgreSQL archive whole, or one table at a time.

pg_isready

Check whether a PostgreSQL server is accepting connections yet.

createdb

Create a PostgreSQL database without opening a psql session.

dropdb

Drop a PostgreSQL database without opening a psql session.

mysqldump

Dump a MySQL or MariaDB database to SQL.

mysqladmin

Check status, flush caches and manage a running MySQL or MariaDB server.

mariadb

Open a MariaDB shell, the canonical name behind the mysql client.

mariadb-dump

Dump a MariaDB database, the canonical name behind mysqldump.

usql

One SQL client for Postgres, MySQL, SQLite, SQL Server, Oracle, ClickHouse and more.

trivy

Scan images, filesystems and repositories for known vulnerabilities.

sops

Encrypt and decrypt secrets in place, inside a config file.

age

Modern file encryption with one small key and no configuration.

bao

OpenBao. Read and write secrets in Vault-compatible stores.

step

Issue, inspect and renew certificates and JWTs.

certbot

Request and renew Let’s Encrypt certificates.

gpg

Sign, verify, encrypt and decrypt with GnuPG keys.

shellcheck

Catch quoting, portability and logic bugs in shell scripts.

hadolint

Lint Dockerfiles against best practice before they build.

age-keygen

Generate an age keypair for encrypting files and sops secrets.

gitleaks

Scan files and git history for leaked secrets.

doppler

Fetch and inject secrets from Doppler.

rclone

Sync files between S3, GCS, Drive and dozens of other backends.

restic

Create deduplicated, encrypted backups and restore from them.

rsync

Mirror directories locally or over SSH, transferring only the delta.

scp

Copy files to and from a remote host over SSH.

ssh

Open a shell or run a single command on a remote machine.

ssh-keygen

Generate, inspect and convert SSH keys, and manage known_hosts entries.

sftp

Move files over SSH interactively or from a batch file.

sentry-cli

Create releases, upload source maps and query issues in Sentry.

stripe

Call the Stripe API, list objects and replay webhook events.

xurl

Call the X API with OAuth from the shell, using X’s own client.

toot

Post to Mastodon, read timelines and upload media.

bsky

Post to Bluesky and read timelines over the AT Protocol.

yt-dlp

Download video and audio from YouTube and a thousand other sites.

youtubeuploader

Upload a video to YouTube through the Data API.

spogo

Search Spotify and drive playback on your connected devices.

twilio

Send SMS, place calls and manage phone numbers on Twilio.

vonage

Send SMS, place calls and manage phone numbers on Vonage.

slack

Build and deploy Slack apps, workflows and manifests.

lk

Create LiveKit rooms, mint access tokens and run egress.

himalaya

Read and send email over IMAP, SMTP, JMAP, Gmail and Microsoft Graph.

postmark

Manage Postmark servers and transactional email templates.

mjml

Compile MJML into responsive HTML email.

wacli

Send and read WhatsApp messages from the command line.

swaks

Send a real SMTP test message and show every step of the handshake.

checkdmarc

Check a domain's SPF, DKIM, DMARC and BIMI records for problems.

gws

Call any Google Workspace API: Drive, Gmail, Calendar and the rest.

gog

Gmail, Calendar, Drive, Sheets and Contacts through your own Google sign-in.

gam

Administer Google Workspace: users, groups, org units and licences.

m365

Manage Microsoft 365: Graph, SharePoint, Teams, Entra and Planner.

sf

Query and update Salesforce records, metadata and orgs.

hs

Work with HubSpot CMS, HubDB and projects.

shopify

Develop Shopify themes and apps against a store.

posthog-cli

Run HogQL queries, upload source maps and manage flags in PostHog.

jira

Create and triage Jira issues, sprints and epics from the shell.

wp

Manage a WordPress or WooCommerce site — posts, plugins, users, database.

saleor

Manage Saleor commerce projects, environments and storefronts.

algolia

Manage Algolia search indices, records and relevance settings.

goplaces

Look up businesses, addresses and reviews through Google Places.

notion-cli

Read and write Notion pages and databases through the API.

muffet

Crawl a site and report every broken link.

svgo

Optimise SVG files without changing how they render.

hugo

Build a static site from Markdown and templates.

vale

Lint prose against a style guide.

typst

Typeset reports, invoices and slides straight to PDF.

d2

Turn a text description into a diagram, as SVG or PNG.

lychee

Crawl a site and report every broken link, fast, with per-link status.

eleventy

Build a static site from Markdown and templates with Eleventy.

trafilatura

Pull the readable article text out of a web page, no browser needed.

htmlq

Query HTML with CSS selectors the way jq queries JSON.

xmlstarlet

Query and edit XML — product feeds, sitemaps and RSS — with XPath.

ffmpeg

Convert, trim, resize and re-encode audio and video.

ffprobe

Read codecs, streams, duration and metadata from a media file.

magick

ImageMagick. Resize, crop, convert and compose images.

convert

The ImageMagick classic: resize, crop and convert in one call.

img2pdf

Wrap images into a PDF without re-encoding them.

rsvg-convert

Render SVG to PNG, PDF or PostScript at any size.

pdftoppm

Render PDF pages to PNG, JPEG or PPM images.

exiftool

Read, write and strip metadata in photos and videos.

pandoc

Convert between Markdown, HTML, DOCX, LaTeX and more.

soffice

LibreOffice, headless: convert documents, sheets and slides.

pdftotext

Extract the text layer out of a PDF.

qpdf

Split, merge, rotate and repair PDF files.

gs

Ghostscript. Compress, flatten and convert PDF and PostScript.

tesseract

OCR: pull text out of scans, photos and screenshots.

dot

Graphviz. Render graphs and diagrams from a text description.

identify

Report an image’s format, dimensions, color space and EXIF data.

mogrify

Resize, convert or strip a whole batch of images in place.

compare

Diff two images and write out a visual difference map.

montage

Tile images into a contact sheet with labels and spacing.

composite

Overlay one image on another with a mask, an offset or a blend mode.

pdfinfo

Print a PDF’s page count, page size, metadata and encryption state.

pdfimages

Extract every embedded image from a PDF at its original resolution.

pdftocairo

Render PDF pages to PNG, JPEG, SVG or PostScript through Cairo.

pdftohtml

Convert a PDF to HTML with its layout and images preserved.

pdftops

Convert a PDF to PostScript for printing or further processing.

pdffonts

List the fonts a PDF uses and whether each one is embedded.

pdfseparate

Split a PDF into one file per page.

pdfunite

Merge several PDFs into one, in the order you list them.

pdfsig

Verify the digital signatures on a signed PDF.

ps2pdf

Convert PostScript or EPS to PDF through Ghostscript.

pdf2ps

Convert a PDF back to PostScript through Ghostscript.

lowriter

Convert documents between PDF, DOCX and ODT without a display.

localc

Convert spreadsheets between XLSX, ODS and CSV headlessly.

loimpress

Convert slide decks between PPTX, ODP and PDF headlessly.

neato

Lay out an undirected graph with a spring model instead of dot’s ranks.

edge-tts

Synthesize speech from text and write it to an audio file.

elevenlabs

Synthesize speech with ElevenLabs voices and write it to a file.

vips

Convert and transform images with a fast, low-memory pipeline.

vipsthumbnail

Generate thumbnails at catalogue scale without loading whole images.

avifenc

Encode images to AVIF for smaller pages and faster loads.

oxipng

Shrink PNG files losslessly, without touching how they look.

curl

Make HTTP requests, post payloads and follow redirects.

wget

Download files and mirror pages over HTTP and FTP.

nc

Netcat. Open, listen on and test raw TCP connections.

socat

Bridge sockets, files and ports between two endpoints.

dig

Query DNS records and trace how a name resolves.

nslookup

Look up a hostname or an address against a resolver.

host

Quick DNS lookups for a name or an IP address.

ip

Inspect the addresses, routes and links on the machine.

ss

List the sockets, ports and connections open on the machine.

naabu

Fast port discovery on hosts you are authorised to scan.

websocat

Connect to a WebSocket endpoint and send or read frames.

ddgs

Search the web from the shell and get results back as text or JSON.

xh

Send HTTP requests with HTTPie syntax and readable output.

grpcurl

Call gRPC services and list their methods from the shell.

oha

Load-test an HTTP endpoint and report latency percentiles.

hurl

Run HTTP requests and assertions written as a plain text file.

doggo

Look up DNS records and get the answer back as JSON.

Get started

Give your agent a real machine.

Deploy in minutes and let it run the commands your work already depends on.