CLI Reference

Common railcall commands, grouped by task. Examples below cover the installed CLI shipped with station v1.5.24.

Version

This reference tracks station v1.5.24. Confirm your install with railcall version; upgrade with railcall update.

Install & update

shell

curl -fsSL https://railcall.ai/install.sh | bash
railcall update

The installer pins every artifact SHA. If a local file has drifted, railcall version flags it and refuses to lie about being on main.

Governance

The core loop — turn a plan into a signed, verifiable receipt. Remote reasoning and live execution have separate permissions. Review your model routing policy as well as the action approval.

railcall build [csv]Local compile + socket audit + signed receipt for a workflow CSV.

railcall interpret "<prompt>"Turn a natural-language prompt into a plan via the local Ollama model, airlock-proven.

railcall audit <csv>Zero-retention structural audit of a workflow CSV, emits a signed receipt.

railcall workflow run <csv>Execute a workflow — dry-run by default, add --live to actually send.

railcall demoLocal demonstration: build, inspect the signed receipt, then verify it offline.

Trust & receipts

Every consequential action lands as a signed record. These commands read, verify, and back up that history.

railcall verify [receipt]Re-check the last (or a specific) receipt offline. No network, no trust required.

railcall receiptsBrowse the signed receipt history — timestamped, append-only, never overwritten.

railcall audit <csv>Structural audit of a plan CSV; produces a receipt without executing anything.

railcall rotate-keyMint a fresh Ed25519 signing key. Archives the old public key so historical receipts still verify.

railcall backupArchive the supported receipt and policy history plus public signing key. Excludes secrets and is not a full station or Chat backup.

railcall backup-verify <tgz>Confirm a backup archive's signature and policy chain intact.

railcall restore <tgz>Restore a signed backup archive into ~/.railcall.

Marketplace

Browse and install signed workflows, then publish your own. The publisher flow mints an Ed25519 identity and namespaces every listing under your handle.

railcall market listList catalogue entries. Flags: --all, --category=<name>, --q=<search>.

railcall market get <id>Fetch a listing's manifest — providers, approval mode, spec hash.

railcall market install <id>Download and stage a listing into ~/.railcall/station/ (workflow or module).

railcall market claim <id>Reserve a slug against your publisher identity before publishing.

railcall market statsSnapshot of catalogue size, featured count, and index root hash.

railcall market publisher initCreate a new Ed25519 publisher identity locally.

railcall market publisher registerRegister your publisher pubkey + handle with the marketplace.

railcall market publishSign and upload a workflow or module bundle to your publisher namespace.

railcall market loginAuthenticate the CLI against the marketplace backend.

railcall market logoutClear the local marketplace session.

railcall market whoamiPrint the currently signed-in publisher handle.

Licenses (paid modules)

Paid modules ship with a per-install signed license, verified offline against the pinned issuer public key. Seven-day grace past expiry.

railcall activateFetch and install this machine's paid entitlement from the license service.

railcall license activate <license.json>Verify and install a signed license JSON file bound to this machine.

railcall license listShow installed licenses with time remaining.

railcall license verifyRe-verify every installed license against the pinned issuer key. Offline.

railcall license deactivate <slug>Release a paid module license from this install.

Studio & runtime

Local Studio, the loopback daemon, and the connectors that reach real SaaS systems.

railcall studioOpen the local Studio in your browser at 127.0.0.1:8799 (loopback, session-gated).

railcall daemonStart the loopback daemon on 127.0.0.1:8555 for long-running / MCP integrations.

railcall dashboardLaunch the terminal live-dashboard for the current daemon.

railcall connect salesforceRun the OAuth 2.0 device-code flow to link a Salesforce org. Flags: --sandbox, --port=1717.

railcall mcp config <client>Wire Claude Desktop, Cursor, Windsurf, or Zed to the local MCP server.

railcall set <key> <value>Store a secret or config value (e.g. a Discord webhook URL) in the local vault.

railcall costLocal ledger of what the last workflows cost — per-provider, per-receipt.

Models & shared compute

railcall models suggestAsk the running station for hardware-based model recommendations; speeds are estimates.

railcall models listList models available from local Ollama.

railcall models pull <tag>Download a model with Ollama.

railcall team showInspect the station team, membership, and public key.

railcall team share-model <member>Grant a teammate use of your local model; supports --model=TAG and --tokens-per-day=N.

railcall team reason "<prompt>"Ask a collaborator model under an existing grant.

railcall team computeInspect served and consumed model usage.

railcall team unshare <grant_id>Revoke a model grant for future requests.

System & identity

railcall versionConfirm SHAs match the pinned installer; refuses to claim main if drift is detected.

railcall updateRe-run the pinned installer to bring this machine to the current release.

railcall healthOne-line status for the daemon and the socket-audit ledger.

railcall doctorCheck the local environment — PASS / WARN / FAIL for every dependency and the fix.

railcall login <key>Save your rc_live_ API key and verify against the gateway.

railcall balanceLive run balance from the gateway (skips the local ledger).

MCP as a runtime

The railcall mcp command also runs as a stdio MCP server — every airlock command auto-registers as an MCP tool alongside the workflow-oriented tools. See MCP Integration for wiring details.