The CLI inside every workload
Agents call the platform with the same binary you use — authenticated by the pod, not a token.
WhereCLI
Introduced Mar 18, 2026
# inside an agent — no auth step
$ agyn files upload report.pdf
$ agyn threads send --thread research \
--message 'Status update…'
authenticated by the workload's identity
How it works
On PATH in every workload.
Agents call the platform with the same binary you use at your desk.
Authenticated by the pod.
The workload's own network identity signs the calls — no platform credential ever exists inside the container.
How files and messages move.
This is how an agent uploads a file or posts to a thread without holding a token an attacker could steal.
See it on your own cluster.
Thirty minutes, your infrastructure, your stack. Or skip the call — it is one Helm release onto a cluster you already run.