CLI Reference

Every railcall subcommand, grouped by what you're trying to do. For flag detail run railcall <cmd> --help — the binary is the source of truth.

Version

This reference tracks station-v0.27. Confirm your install with railcall version; upgrade with railcall update.

Install & update

shell

curl -fsSL https://railcall.ai/install.sh | bash
railcall update

The installer pins every artifact SHA. If a local file has drifted, railcall version flags it and refuses to lie about being on main.

Governance

The core loop — turn a plan into a signed, verifiable receipt. Nothing below reaches a third party without an explicit approval step.

railcall build [csv]Local compile + socket audit + signed receipt for a workflow CSV.

railcall interpret "<prompt>"Turn a natural-language prompt into a plan via the local Ollama model, airlock-proven.

railcall audit <csv>Zero-retention structural audit of a workflow CSV, emits a signed receipt.

railcall workflow run <csv>Execute a workflow — dry-run by default, add --live to actually send.

railcall demo30-second golden path: build → signed receipt → offline verify. Zero network required.

Trust & receipts

Every consequential action lands as a signed record. These commands read, verify, and back up that history.

railcall verify [receipt]Re-check the last (or a specific) receipt offline. No network, no trust required.

railcall receiptsBrowse the signed receipt history — timestamped, append-only, never overwritten.

railcall audit <csv>Structural audit of a plan CSV; produces a receipt without executing anything.

railcall rotate-keyMint a fresh Ed25519 signing key. Archives the old public key so historical receipts still verify.

railcall backupEd25519-signed tarball of the whole ~/.railcall workspace — receipts, policy, keys.

railcall backup-verify <tgz>Confirm a backup archive's signature and policy chain intact.

railcall restore <tgz>Restore a signed backup archive into ~/.railcall.

Marketplace

Browse and install signed workflows, then publish your own. The publisher flow mints an Ed25519 identity and namespaces every listing under your handle.

railcall market listList catalogue entries. Flags: --all, --category=<name>, --q=<search>.

railcall market get <id>Fetch a listing's manifest — providers, approval mode, spec hash.

railcall market install <id>Download and stage a listing into ~/.railcall/station/ (workflow or module).

railcall market claim <id>Reserve a slug against your publisher identity before publishing.

railcall market statsSnapshot of catalogue size, featured count, and index root hash.

railcall market publisher initCreate a new Ed25519 publisher identity locally.

railcall market publisher registerRegister your publisher pubkey + handle with the marketplace.

railcall market publishSign and upload a workflow or module bundle to your publisher namespace.

railcall market loginAuthenticate the CLI against the marketplace backend.

railcall market logoutClear the local marketplace session.

railcall market whoamiPrint the currently signed-in publisher handle.

Licenses (paid modules)

Paid modules ship with a per-install signed license, verified offline against the pinned issuer public key. Seven-day grace past expiry.

railcall activateFetch and install this machine's paid entitlement from the license service.

railcall license activate <slug>Activate a specific paid module by slug (e.g. sami666/salesforce).

railcall license listShow installed licenses with time remaining.

railcall license verifyRe-verify every installed license against the pinned issuer key. Offline.

railcall license deactivate <slug>Release a paid module license from this install.

Studio & runtime

Local Studio, the loopback daemon, and the connectors that reach real SaaS systems.

railcall studioOpen the local Studio in your browser at 127.0.0.1:8799 (loopback, session-gated).

railcall daemonStart the loopback daemon on 127.0.0.1:8555 for long-running / MCP integrations.

railcall dashboardLaunch the terminal live-dashboard for the current daemon.

railcall connect salesforceRun the OAuth 2.0 device-code flow to link a Salesforce org. Flags: --sandbox, --port=1717.

railcall mcp config <client>Wire Claude Desktop, Cursor, Windsurf, or Zed to the local MCP server.

railcall set <key> <value>Store a secret or config value (e.g. a Discord webhook URL) in the local vault.

railcall costLocal ledger of what the last workflows cost — per-provider, per-receipt.

System & identity

railcall versionConfirm SHAs match the pinned installer; refuses to claim main if drift is detected.

railcall updateRe-run the pinned installer to bring this machine to the current release.

railcall healthOne-line status for the daemon and the socket-audit ledger.

railcall doctorCheck the local environment — PASS / WARN / FAIL for every dependency and the fix.

railcall login <key>Save your rc_live_ API key and verify against the gateway.

railcall balanceLive run balance from the gateway (skips the local ledger).

MCP as a runtime

The railcall mcp command also runs as a stdio MCP server — every airlock command auto-registers as an MCP tool alongside the workflow-oriented tools. See MCP Integration for wiring details.