Docs
CLI reference
Docs/CLI reference

CLI reference

The essential moona commands for day-to-day use. All commands run locally — nothing is sent to an external service.

Setup and configuration

moona setup

Guard a project. Starts the daemon, detects and configures your agent integrations, discovers databases, and prints next steps. Safe to re-run after an upgrade.

bash

Available once you have early access. Join the waitlist

Flags:

FlagWhat it does
--allWire all four supported agent integrations without prompting.
--surfaces <list>Wire specific agents only. E.g. --surfaces claude,cursor.

moona scan

Re-discover the databases your project connects to. Re-reads .env files, Docker Compose, and Prisma schema. Read-only — never opens a connection.

bash

Available once you have early access. Join the waitlist

moona config validate

Validate moona.config.json against the schema. Reports every issue with a location and message. Use this whenever you have edited the config file manually.

bash
$ moona config validate

Evaluating and testing

moona try

Preview what Moona would decide for a command. Runs the command through the full decision process without executing anything. Safe to use with any command, including destructive ones.

bash

Available once you have early access. Join the waitlist


Approvals

moona pending

List all actions currently held for your approval. Read-only — listing is not approving.

bash
$ moona pending

moona approve

Approve or reject a pending action. When one action is pending, resolves it interactively. When multiple are pending, requires --id to avoid ambiguity.

bash
$ moona approve
$ moona approve --id <id>
$ moona approve --id <id> --decision reject

Audit and verification

moona verify

Verify the signed audit log on your machine. Confirms the integrity of every decision record. Exits 0 if the log is intact, 1 if verification fails, 2 if the log is missing.

bash
$ moona verify

Health and diagnostics

moona doctor

Run every health check and print a [ok] / [warn] / [fail] result for each one, with the exact fix for anything that needs attention. The first command to run when something seems wrong.

bash
$ moona doctor

moona daemon status | stop | restart

Manage the local guardrail process. status checks whether the daemon is running. stop shuts it down gracefully. restart stops and restarts it.

bash
$ moona daemon status
$ moona daemon stop
$ moona daemon restart

moona channels test

Test your configured notification channels (e.g. Telegram). Sends a test message and confirms that Moona can receive replies. Reports what is working and what needs attention.

bash
$ moona channels test

moona connect telegram

Interactive setup for Telegram approval notifications. See Telegram for details.

bash
$ moona connect telegram

Quick reference

CommandWhat it does
moona setupGuard a project. Starts the daemon, wires agent integrations, discovers databases.
moona scanRe-discover database connections in the current project (read-only).
moona try "<cmd>"Preview a decision without executing anything. Safe with any command.
moona pendingList actions waiting for your approval (read-only).
moona approveApprove or reject a held action.
moona verifyVerify the integrity of the signed audit log.
moona doctorRun all health checks. The first tool to reach for when something seems wrong.
moona daemon statusCheck whether the guardrail daemon is running.
moona daemon stopStop the guardrail daemon.
moona daemon restartRestart the guardrail daemon.
moona config validateValidate moona.config.json against the schema.
moona channels testTest configured notification channels.
moona connect telegramInteractive Telegram approval setup.