Turn anything into a CLI your agent can use. Securely.

REST APIs, CLI tools, macOS apps — one YAML, one command. Credentials never enter the agent process.

bash

curl -fsSL https://kimbap.sh/install.sh | bash

Quick Start →GitHub

Execution pipeline

identifyresolvepolicycredentialexecuteaudit

Every action goes through the same six-stage pipeline. Credentials live in an encrypted vault, injected only at execution time. Policy can require human approval before any action proceeds.

Without kimbap vs. with kimbap

Without kimbap	With kimbap
API keys passed via env vars — leak into logs and prompts	Encrypted vault injects credentials at execution time
Every service has different auth	One manifest format for REST APIs, CLI tools, and macOS apps
Agents run dangerous actions unchecked	Policies and approvals enforced on every action
No record of what the agent did	Automatic audit trail on every action

Quick Start

Install

bash

curl -fsSL https://kimbap.sh/install.sh | bash

Initialize
bash
```
kimbap init --mode dev --services all
```

Call

bash

kimbap call slack.post-message --channel general --text "deployed v2.1"
kimbap call stripe.list-charges --limit 5
kimbap call apple-notes.search-notes --query "meeting"

Add a service

Connect

bash

printf '%s' "$GITHUB_TOKEN" | kimbap link github --stdin

Call

bash

kimbap call github.list-repos --sort updated

kimbap link works for both API keys (--stdin/--file) and OAuth services (Slack, Notion, Zoom, and more).

Built-in services

SaaS & APIs

GitHubSlackStripeNotionLinearHubSpotAirtablePineconeTodoistPostHogSentrySendGridResendExaBrave Search

Communication

TelegramWhatsAppWeChatZoomApple MailMessages

Local apps

BlenderComfyUIOllamaMermaidSpotifyNotebookLM

macOS native

FinderSafariContactsShortcutsApple NotesApple CalendarApple RemindersKeynotePagesNumbers

Office

Microsoft WordExcelPowerPoint

Data

WikipediaHacker NewsCoinGeckoOpen-MeteoFinancial DatasetsREST CountriesExchange RatePublic HolidaysNominatimntfy

Build your own service

Add any REST API, CLI tool, or macOS app with a single YAML manifest.

yaml

name: stripe
version: 1.0.0
base_url: https://api.stripe.com/v1
auth:
  type: bearer
  credential_ref: stripe.api_key
actions:
  list-charges:
    method: GET
    path: /charges
    risk:
      level: low

Adapter types:HTTPCommandAppleScript

Integration modes

Mode	Command	Use case
Call (recommended)	kimbap call <service>.<action>	Direct use, scripts, agent integration
Run	kimbap run -- <cmd>	Wrap any agent subprocess
Proxy	kimbap proxy	Existing HTTP agents, zero code changes
Serve	kimbap serve	Connected-mode REST API server

Call(recommended)

kimbap call <service>.<action>

Direct use, scripts, agent integration

Run

kimbap run -- <cmd>

Wrap any agent subprocess

Proxy

kimbap proxy

Existing HTTP agents, zero code changes

Serve

kimbap serve

Connected-mode REST API server

Agent setup

Run kimbap agents setup to auto-detect and configure Claude Code, OpenCode, Codex, Cursor, and any agent that can run a CLI command.

bash

kimbap agents setup

Get started →GitHub