Repository navigation
mco cli reference
Every command, argument and option below was taken from each command's --help output. Run python docs/wiki/_review/verify_cli_examples.py to re-check every mco example in this wiki against the live CLI (dry parse only; nothing is executed). Notation: ARG is a positional argument, [ARG] is optional, and (repeatable) options may be given more than once.
Start the FastAPI WebSocket/REST gateway in the foreground.
-
--host TEXT(default127.0.0.1),--port INTEGER(default18789)
Start the gateway in the background (the pair of mco stop).
-
--host TEXT(default127.0.0.1),--port INTEGER(default18789)
Stop a running gateway, found by port.
-
--port INTEGER(default18789),--force/-f
Stop the background gateway if it is running, then start it.
-
--host TEXT(default127.0.0.1),--port INTEGER(default18789)
Print health checks and diagnostics.
--all
Diagnose an install end to end: Python, config, secret store, database, gateway, agents, vendor CLIs. Exit code 1 if anything is broken.
-
--port INTEGER(default18789)
Guided walkthrough or a jump-anywhere settings menu.
-
--guided,--menu
View or change gateway settings (the Control Panel, from the terminal).
-
[KEY] [VALUE]: no arguments lists every setting;KEYalone reads one;KEY VALUEwrites one. -
--unset: clearKEYback to its default.
Show the active edition (community/team/enterprise) and the feature matrix.
Apply schema migrations to the configured backend.
--apply
Open the console in your browser.
-
--flow(old option kept so scripts keep working; it opens the console),--dashboard,--print(print the URL)
Status light and a door into the console (Windows tray, macOS menu bar, Linux AppIndicator).
Drop a job into an agent's dropbox.
-
TO_ROLE: target role (codex,claude,gemini, ...). -
--title/-t TEXT(required),--message/-m TEXT -
--instance TEXT: target one instance of the role. -
--approve: hold the job at the human approval gate before any worker picks it up. -
--retries INTEGER,--escalate TEXT,--priority INTEGER
Submit a declarative YAML workflow (a DAG of jobs).
-
FILE,--dry-run
Approve a job paused at the human-in-the-loop gate. JOB_ID
Reject a paused job (terminal). JOB_ID, --reason TEXT
Re-queue a failed or rejected job to pending (approver-role token). JOB_ID
Call off a job that has not finished (approver-role token). JOB_ID, --reason TEXT
Archive a completed, failed, rejected or cancelled job, or undo that. JOB_ID
List other jobs that look like the same work. JOB_ID
Clone a failed job onto a new target, link both rows, and archive the old one.
-
JOB_ID,--to-role TEXT(required),--to-instance TEXT,--instructions TEXT
Score available client jobs for fit, value and risk using Jev and hard filters.
-
[POSTINGS_PATH]: JSON or CSV of postings. -
--top/-n INTEGER(default20),--out/-o PATH,--source/-s TEXT,--query/-q TEXT
mco jobs has no other subcommands. To list jobs, use the console Job Board or the mco_jobs MCP tool.
Print a job's tamper-evident audit trail, oldest event first.
JOB_ID-
--verify: walk the hash chain and report OK or the first broken link. -
--checkpoint PATH: verify against a previously exported signed checkpoint.
Export a signed checkpoint. Keep it outside the database/backup volume.
-
JOB_ID,OUTPUT(both required, positional)
After a DB restore, pause work and invalidate every pre-restore claim.
List registered agents and their online presence.
Register a client agent and print its access token.
-
--name TEXT(required),--role TEXT(required),--org TEXT(defaultdefault) -
--scope TEXT(repeatable): one scope per flag, e.g.--scope jobs:read --scope jobs:write.
Rotate an agent's token; the old one stops working immediately.
-
INSTANCE_ID,--save/--no-save
Remove an agent registration; its token stops working immediately.
-
INSTANCE_ID,--yes/-y
List orgs available for registration.
Spawn the background daemon client that polls and executes Job Board tasks.
-
--role TEXT(defaultcodex),--instance TEXT(defaultdefault_agent),--config-file TEXT(defaultagent_config.json)
Run a local command when this agent's inbox has pending jobs.
-
--exec TEXT(required): the command to run. -
--role TEXT,--instance TEXT,--gateway TEXT,--token TEXT,--min-interval FLOAT(default10.0)
Run the dropbox as an MCP server: stdio by default, HTTP with --http.
-
--http,--host TEXT(default127.0.0.1),--port INTEGER(default18790)
Live-tail job events from the gateway broadcast feed (Ctrl-C to stop).
--raw
Live-tail a filtered mailbox feed from the broadcast socket.
-
--role TEXT,--instance TEXT,--gateway TEXT,--token TEXT
Append an entry to the Drumline shared context.
-
TITLE,CONTENT,--kind TEXT(defaultfact),--tags TEXT(comma-separated)
Recall the most relevant Drumline entries.
-
[QUERY],--tags TEXT,--limit INTEGER(default5),--role TEXT
Post one message to the Agent Exchange. Discussion there is reference, not instructions or approval.
-
KIND: one ofquestion,proposal,blocker,reply,decision,handoff,resolution,supersession. BODY-
--job TEXT,--reply-to TEXT,--resolves TEXT,--supersedes TEXT,--key TEXT(idempotency key)
List Exchange messages. Needs --job or --thread.
-
--job TEXT,--thread TEXT,--kind TEXT,--limit INTEGER(default20)
Explicitly promote one exchange message into canonical Drumline context.
-
EXCHANGE_ID,--to TEXT(defaultdecision),--title TEXT,--key TEXT
Score commands default to the conductor database ~/.mco/score-runs.db and artifact root ~/.mco/score-artifacts.
Turn a plain-language brief into a validated Score.
-
SPEC,--out PATH(required)
Draft a scope from a client brief, or approve a clean scope into a Score.
-
ARGS...:BRIEF.txtto draft, orapprove SCOPE.json. -
--out PATH(required),--client TEXT; forapprove:--worktree TEXT,--branch TEXT,--before-sha TEXT
Initialize a run. Safe to repeat: identical policy and identities resume the same run.
-
SCORE_FILE,--run-id TEXT(required),--target TEXT(repeatable),--org TEXT(defaultdefault),--db PATH,--artifact-root PATH,--live-repository-write
Show where a run is, per task and phase, with the last events.
-
--run-id TEXT(required),--db PATH,--artifact-root PATH
Plan what can start, dispatch it, accept finished work.
-
--run-id TEXT(required),--watch,--interval FLOAT(default5.0),--timeout FLOAT(default900.0),--db PATH,--artifact-root PATH,--live-repository-write
List the runs in a conductor database.
--db PATH
Issue a locally auditable, interactive grant for a run (Windows SQLite only).
-
SCORE_FILE,--run-id TEXT(required),--action TEXT(required, repeatable),--resource TEXT(required, repeatable),--environment TEXT(defaulttest),--expires-minutes INTEGER(default240),--expires-hours INTEGER,--budget-cents INTEGER
Bundle code, tests, README, reviews and a DRAFT client message (never sent).
-
WORKTREE,--out PATH(required),--evidence PATH,--client TEXT
Fire a launcher right now, by name.
-
NAME,--approve/--no-approve
Write a starter ~/.mco/schedules.yaml. --force overwrites.
Show every schedule and loop with its next fire time.
Enable or disable a schedule or loop without editing YAML. NAME
Clear a schedule's run history so a finished loop can run again. NAME, --yes / -y
Run one scheduler pass. --dry-run
Run the scheduler in the foreground until interrupted. --interval FLOAT (default 30.0)
Install the gateway as an OS service that starts on boot or login.
-
--host TEXT(default127.0.0.1),--port INTEGER(default18789)
Install the scheduler as a boot-persistent service. --interval FLOAT (default 30.0)
Install a self-restarting waker service for one role or instance.
-
ROLE,[EXEC_COMMAND](or--exec TEXT),--instance TEXT,--min-interval FLOAT(default10.0)
Show, restart, or remove installed services. Each takes an optional [SELECTOR].
The service group has no stop subcommand; uninstall removes the service definition and does not stop a running process.
Tail a service log. [SELECTOR], --lines / -n INTEGER (default 80), --follow / -f
Show configured workers and whether each is installed and running.
Reconcile OS services to ~/.mco/fleet.toml.
Update one worker field in fleet.toml.
-
WORKER,ASSIGNMENT: a singleKEY=VALUE, for examplemode=off.
List configured enterprise connectors and their health.
Pull open platform objects (incidents, problems) onto the job board. CONNECTOR
Run a connector control action directly (approver-role token).
-
CONNECTOR,ACTION(seemco connectors),--params TEXT(a JSON object, default{})
Suggest a Claude Code model tier (haiku/sonnet/opus) for a task.
-
--task TEXT(required),--context TEXT,--deterministic-tier TEXT(defaultsonnet)
Check one proposal against the CIO sidecar brief's mechanical rules and print a JSON verdict (approve, reject or escalate).
-
--decider TEXT(required),--project TEXT,--spend-cents INTEGER,--proposed-by TEXT,--category TEXT(repeatable)
mco send codex --title "Summarize the repository" --message "Review recent commits on main." --approve
mco approve <job-id>
mco audit <job-id> --verify
mco audit-checkpoint <job-id> checkpoint.json
mco settings MCO_KILL_SWITCH true
mco fleet set claude-cio mode=off
mco wake --role codex --exec "python run_worker.py"
mco platform servicenow resolve_incident --params '{"sys_id": "<sys-id>"}'