Install the agent

Every developer on your team runs a small local agent. It watches Claude Code and Cursor log files, extracts token usage + optional AI-inferred categories, and sends them to your team's dashboard. Installs in 2 minutes.

One-line install

Works on macOS, Linux, and Windows (WSL). Requires Node.js 22+.

curl -fsSL https://auditor.talosfoundrix.com/install.sh | sh

Prefer npm? npm i -g @talos-foundrix/auditor-agent then talos-auditor login.

Sign in

The first run opens your browser with an OAuth device-code flow — just like gh auth login. Click Approve, your terminal picks up the token, done.

$ talos-auditor login

  Confirmation code: ABCD-1234
  Opening https://auditor.talosfoundrix.com/cli/auth?code=ABCD-1234

✔ Logged in — token saved.
  Team:    team_01KPVR...
  Privacy: off

Start the agent

The curl | sh installer ends with talos-auditor setup — a short three-question wizard that logs you in, offers to install a background service, and explains privacy modes. If you skipped it, run it manually:

talos-auditor setup

The agent tails your ~/.claude/projects/*.jsonl files and Cursor logs, and ships events to the dashboard every 30 seconds. Only the delta from when the agent started is sent — historical content is skipped by design.

Background service (auto-start on login)

The wizard asks if you want this, but you can do it at any time:

talos-auditor daemon install    # launchd (macOS) or systemd --user (Linux)
talos-auditor daemon status
talos-auditor daemon uninstall

macOS logs: tail -f ~/Library/Logs/talos-auditor.out.log. Linux logs: journalctl --user -u talos-auditor -f.

Want to run in the foreground instead (e.g. in a tmux pane)? Skip the daemon step in the wizard and use talos-auditor start.

Check status

talos-auditor status

Talos Auditor agent — status
  API:       https://api.auditor.talosfoundrix.com
  Logged in: yes
  Team:      team_01KPVR...
  Member:    mem_01KPVS...
  Privacy:   off
  Outbox:    0 events pending

Privacy mode changes without restart

If your team admin changes the privacy mode in the dashboard (e.g. from off to categorize), the running agent picks up the change automatically within 60 seconds. Look for this line in the terminal:

↻ privacy mode: off → categorize
↻ categorizer: cloud → local

Local categorize (optional — zero-cost, zero-egress)

If your team picks the categorize-local mode, the agent calls a local Ollama server on your machine to extract the category. Prompt text never leaves the laptop.

# macOS
brew install ollama
ollama serve &
ollama pull llama3.1:8b   # ~4.7 GB one-time

Run talos-auditor doctor to verify Ollama is reachable. A different model is fine — set OLLAMA_MODEL=qwen2.5:7b in your shell.

Uninstall

talos-auditor logout         # revoke token on server
npm rm -g @talos-foundrix/auditor-agent

The admin can also rotate or revoke your token from /dashboard/settings/agents.