CLI overview
Belay ships as a single static Rust binary — belay — that dispatches every
Detect & protect an agent
Belay wires itself into an AI coding agent at the tool-call boundary. The two commands
Claude Code / Codex integration
Claude Code and Codex both support native PreToolUse and PostToolUse hooks — the
MCP gating (mcp-proxy)
belay mcp-proxy wraps any MCP (Model Context Protocol) server so that every
Local backend & Desktop App
Belay splits its "SOC" surface into two pieces: a small local API backend you run
Static scanner
belay scan is a static, pre-install analyzer. Point it at code before you run or
Notifications & channels
When a verdict is ask, Belay can fan the approval prompt out to a chat channel and take
Evidence (build / verify)
belay evidence produces and checks a tamper-evident evidence pack: a SHA-256