Flags

Pass paths as positional arguments, or one comma-separated --allowed-paths. Do not repeat --allowed-paths. The last value wins.

At least one path is required. Missing paths exit 2, unless --insecure-open or --bench.

Flag	Default	Meaning
--allowed-paths	required	Comma-separated roots.
--insecure-open	off	Labs only. Entire disk.
--roots-mode	replace	replace, union, or ignore.
--profile	ultra	ultra (29), agent (18), strict (17).
--git-network	off	Enable git push and fetch. Ignored in strict.
--git-remote-allow	empty	Optional extra lock on push and fetch. Empty allows any configured remote.
--readonly	off	Reject mutating tools.
--mutation-budget	0 (off)	Max applied mutations per process. Shared by all stdio clients.
--allow-secrets	off	Allow secret filenames. Audited.
--compact-mode	off	Shorter text responses.
--file-security-config	empty	JSON policy. Invalid file exits 2. Immutable until restart.
--auto-occ	warn	off, warn, or block.
--cache-size	100MB	File content cache limit.
--cache-ttl	3m	File content cache life. Retention, not coherence. Not directory listings.
--parallel-ops	2× CPU, max 16	Max concurrent operations.
--max-response-size	10MB	Maximum response size.
--max-search-results	1000	Search cap.
--max-list-items	500	Directory listing cap.
--backup-dir	system temp	Backup storage. Empty uses temp/mcp-batch-backups.
--backup-max-age	7	Days.
--backup-max-count	100	Backups to keep.
--receipt-dir	empty	Persist e3-v1 receipts. Empty is process memory only.
--hooks-enabled	off	Pre/post hooks.
--hooks-config	empty	Hooks JSON path.
--log-dir	empty	Audit log and metrics. Empty disables that logging.
--log-level	info	debug, info, warn, error.
--debug	off	Debug logging.
--normalizer-rules	empty	Extra normalizer rules JSON.
--risk-threshold-medium	20	Percent change for medium risk.
--risk-threshold-high	75	Percent change for high risk.
--risk-occurrences-medium	50	Occurrence count for medium risk.
--risk-occurrences-high	100	Occurrence count for high risk.
--binary-threshold	1MB	Size threshold for the binary protocol.
--vscode-api	on	VS Code API integration when available.
--version		Print version and exit.
--bench		Run the performance benchmark.

Recommended agent args: --profile=strict --compact-mode --roots-mode=union.