kapi trust allow

$ kapi allow

Record an allow for what the recipe runs now, without starting a run. The commands are shown first and confirmed at the terminal. With no terminal attached nothing is recorded unless --yes is given.

An allow is keyed to the commands shown: a recipe edit that changes them asks again. To grant one process trust without recording anything, set KAPI_TRUST_EXEC=1 instead.

Commandtrust allow

Watch it

trust allow needs network access, an API key, or local system access, so it can’t run in the browser playground. See the guides for a recorded run, or try it locally with the installed CLI.

Flags

Flag	Type	Default	Description
--project , -p	string		path to a kapi.yaml project recipe or its directory (auto-discovered from cwd if omitted)

More examples

kapi trust allow -p ./app --yes

← Back to the Command Reference