· product · apexe

apexe

Name: apexe
Author: AI Perceivable

Governed CLI capability runtime built on apcore

GitHub Documentation

crates

apexe 0.3.0 turns existing CLI tools into governed apcore modules and runs them through a shared execution surface. It scans help output, man pages, and shell completions; writes binding files, fail-closed ACL policy, and optional Claude Skills via --skills-dir; then serves the same modules through MCP stdio, HTTP, or SSE and as an A2A agent. The runtime now carries live annotations, preview for destructive commands, ACL allow/deny audit records, owner-only 0o600 JSONL audit logs, retry and circuit-breaker middleware, output caps, timeout killing, /metrics, /usage, and AI guidance on recoverable errors. A2A has no `--enable-approval` flag on A2A CLI transport; approval there is available through the library approval store API.

· 01

Features

01Deterministic Scanner: Inspect help output, man pages, and shell completions without using an LLM

02Parser Coverage: Built-in GNU, Click, Cobra, and Clap command parsers with recursive subcommand discovery

03Schema and Display Metadata: Derive JSON Schema types, formats, defaults, enums, required fields, aliases, and per-surface display data

04Governed Execution: Run scanned tools as apcore modules with live annotations, fail-closed ACL, ACL allow/deny audit logging, preview, and library approval store support

05Protocol Surfaces: Serve the same modules over MCP stdio, HTTP, or SSE, or publish them as an A2A agent; servers bind localhost by default and transport auth is available through the apcore library API

06Skill Output: Generate Claude Skill files with apexe scan --skills-dir for module-level agent guidance

07Subprocess Hardening: Apply environment scrubbing, run with no shell through direct argv, cap stdout and stderr, kill timed-out children, and block shell injection characters

08Operations Hooks: Enable retry and circuit-breaker middleware plus optional /metrics and /usage endpoints

· 02

Get Started

Rust · Implementation

Rust 1.75+ implementation of the apexe scanner, executor, MCP server, and A2A agent runtime.

View Repository Crates Package

Install

$ cargo install apexe

Quick Start

rust.rs

# Scan an installed CLI tool
apexe scan git

# Inspect generated module bindings
apexe list

# Serve the scanned modules over MCP HTTP with the Explorer UI
apexe serve --transport http --port 8000 --explorer

# Or publish the same modules as an A2A agent
apexe a2a --url http://127.0.0.1:8000 --explorer

· related

apexe

Features

Get Started

Related Products

apcore

apcore-toolkit

apcore-mcp

apcore-a2a