CLI Reference

railgun [OPTIONS] <COMMAND>
 
Commands:
  install    Configure Claude Code to use Railgun
  uninstall  Remove Railgun from Claude Code
  lint       Validate configuration file
  test       Test policy against specific input
  hook       Run as hook (used internally by Claude Code)
 
Options:
  -c, --config <FILE>  Path to config file [default: railgun.toml]
  -h, --help           Print help
  -V, --version        Print version

railgun install

{
  "hooks": {
    "preToolUse": [
      {
        "matcher": "*",
        "command": "railgun hook"
      }
    ]
  }
}

railgun uninstall

railgun lint
railgun lint -c custom.toml

railgun test <TOOL_NAME> '<JSON_INPUT>'

# Test Bash command
railgun test Bash '{"command":"ls -la"}'
 
# Test file write
railgun test Write '{"file_path":"/tmp/test.txt","content":"hello"}'
 
# Test with secrets
railgun test Bash '{"command":"echo $AWS_SECRET_ACCESS_KEY"}'
 
# Test protected path
railgun test Read '{"file_path":"~/.ssh/id_rsa"}'
 
# Test network
railgun test WebFetch '{"url":"https://pastebin.com/raw/abc123"}'

ALLOWED

DENIED
Reason: Dangerous command pattern: rm -rf with root path

echo '{"tool_name":"Bash","tool_input":{"command":"ls"}}' | railgun hook

{
  "tool_name": "Bash",
  "tool_input": {
    "command": "ls -la"
  }
}

railgun -c ./custom/railgun.toml lint
railgun --config /etc/railgun.toml test Bash '{"command":"ls"}'