Terminal Tool

Execute shell commands on the host system. Commands are run via sh -c.

Parameters

KeyTypeDefaultDescription
commandstringThe shell command to execute

Approval Logic

A command is auto-approved only if both conditions are met:

  1. The command starts with a prefix in terminal.allowed_prefixes
  2. The command does not contain any shell operators

Shell Operators (always require approval)

text
; | && || $() ` (backticks)

Default Allowed Prefixes

text
ls, cat, head, tail, echo, date, whoami, pwd, find, wc,
grep, tree, file, stat, uname, df, du, ps, which, env, printenv

Output

Returns stdout first, then stderr (if any). Output is truncated to 4000 characters.

Allow Always

When the user clicks "Allow Always" in Telegram, the command prefix is added to terminal.allowed_prefixes in config.toml. Future commands with the same prefix are auto-approved.

Untrusted Sessions
Sessions from triggers (email, etc.) are flagged as untrusted. All commands in untrusted sessions require approval regardless of the whitelist.