sp init
The command that connects your machine, and what it writes where.
`sp` is a single Go binary. Install it, run it once in a project, and every agent client on that machine points at the gateway.
Install
go install …/cmd/sp@latest
# or
npx sallyport initThe npm package is a thin wrapper that downloads the binary and checks its hash. There is no JavaScript implementation of the CLI to keep in step with the Go one.
What it does
- Logs in with a short code you confirm in an open console session.
- Detects the agent clients on the machine and writes each one its own config shape.
- Reads a local .env, shows you what it found, and imports only what you tick.
- Adds a block to CLAUDE.md and AGENTS.md naming the services this agent can use.
- Prints the list of original keys to revoke, with the revocation URL for each.
Useful flags
| Command | What it does |
|---|---|
| sp init --client cursor | Write one client instead of every client found |
| sp env import .env | Import credentials from a file without touching client configs |
| sp agent token rotate | Rotate an agent token with an overlap window |
| sp approve <call_id> | Answer a waiting card from the terminal you are already in |
| sp verify <export> | Check a journal export against its checkpoint |
The block sp writes into CLAUDE.md is the friction rule made concrete. An agent that can read what it is allowed to do does not discover its access by failing.