Install
Three commands. No firewall changes, no inbound ports — the agents call out to the control plane; nothing calls in.
Install the CLI
One command puts the eaa tool on the machine.
Onboard your company
Registers this machine under your company and creates its agent identity.
Run your agents
List what's available and put an agent to work.
Manage
Everything your team needs, from one command. The same work the website does — posted from your terminal, results streamed back.
| Command | What it does |
|---|---|
eaa onboard --company <name> | Registers this machine for your company. Add --api-key to use your own key. |
eaa agents list | Shows the agents available to your company. |
eaa run fit-inspectors --resume cv.pdf --job <url|file> | Fit score, matched/missing skills, and a PDF report. |
eaa run cover-letter-carpenters --resume cv.pdf --job <url|file> [--tone professional] | Tailored cover letter, printed and downloadable as PDF. |
eaa run clutter-clearers --text article.txt [--length detailed] | Summary plus key points. |
eaa run word-wranglers --text draft.txt [--mode reword] | Polished draft with a list of changes. |
eaa job <agent> <job-id> | Check a previous job's status or fetch its result. |
eaa status · eaa update · eaa uninstall | Install health, upgrades, clean removal. |
Useful flags: --timeout <seconds>, --json for scripting,
--no-wait to just get a job id, --out <file> to save the result.
Command reference
The full eaa help, for the web. Everything below
also works in your terminal — try eaa <command> --help.
| Flag | What it does |
|---|---|
--timeout <seconds> | Wait up to N seconds for the result (default 300). |
--json | Print the raw API response — handy for scripts. |
--no-wait | Queue the job and exit immediately; prints the job id. |
--out <file> | Save the main result (summary, letter, polished text) to a file. |
Auth: every call sends X-API-Key. The CLI uses
EAA_API_KEY, else the key stored at onboard, else the built-in
website key.
Access control (RBAC & IAM)
EAA is multi-tenant by design: every company is isolated by identity, keys, and scope. Nothing is shared between companies.
Identity Now
Onboarding creates a company identity and a unique agent id per machine. In the v1 runtime this becomes a server-issued per-company API key (enterprise tier), stored in the OS keychain — never in config files or shell history.
Roles v1
- Company admin — issues and revokes keys, onboards and offboards machines.
- Operator — runs agents, reads results.
- Viewer — read-only status and results.
Enforcement v1
- Every job is tagged with its company; workers only ever receive their own company's work.
- Results are stored under per-company paths.
- Kill switch: disabling a key cuts that company's access within minutes.
- Agents reach only the control plane and local services — zero inbound ports on your side.
On the roadmap
Roadmap
SSO/SAML sign-in, SCIM provisioning, audit-log export, and a web console
for managing roles and keys. Need one of these now?
Tell us — early customers shape the roadmap.
Talk to us
Questions about fit, security review, or procurement? [email protected] — a human replies.