clikernel
clikernel gives LLM agents persistent kernel sessions over MCP or a plain stream protocol. Imports, variables, and results remain available between calls. Agents can create kernels or attach to existing ones, including a user’s live solveit kernel.
rustygate hosts the kernels. Clikernel routes requests to local or named remote gateways and supplies startup code to Python kernels.
New kernels close with their creating conversation by default. Attaching to an existing kernel does not claim ownership. Use autoclose=false on a persistent gateway to keep a new kernel for later conversations. See core for configuration and lifecycle details.
Install
pip install clikernel
This installs rustygate and ipymini. No service setup is required for a conversation-local kernel: clikernel starts a private gateway if it cannot find one. To retain kernels across conversations, run a resident gateway, for example through launchd or systemd:
rustygate --port 8787
Use with an MCP host
Register the stdio server with your MCP host. For Claude Code:
claude mcp add clikernel -- clikernel-mcp
Choose a kernel, then execute code:
create(kernel="py")
exec(code="6*7")
Use kernel="luau" for bundled Luau, or kernel="bpl" for BPL when basedpl is installed in the gateway’s environment. create accepts any kernelspec the gateway finds. In the main conversation, exec never creates or switches kernels. See MCP for named gateways, dialog bindings, and other tools.
In Claude Code, subagents share the current kernel unless clikernel-hook is registered as a PreToolUse hook. With the hook, each subagent’s first exec creates a kernel of its own. See Subagent kernels for the settings entry.
The router checks each exec cell against built-in rules for mistakes agents often make with this toolkit. Most rules add a note to the reply, and --quiet leaves the notes out. Two rules always block the cell: shell access through subprocess, os.system or os.popen, and changes to sys.path.
Configuration
Two optional files in $XDG_CONFIG_HOME/clikernel/ configure the router, usually under ~/.config/clikernel/, or under the directory clikernel-mcp --cfgdir names:
startup.pyruns in each Python kernel clikernel creates, with__file__set to its path. Its output appears in the reply announcing the kernel unless--quietis set.gateways.tomlnames remote gateways and configures authentication without putting tokens in tool arguments:
[gateways.solveit]
url = "https://solveit.example.com/gate"
token_env = "SOLVEIT_TOKEN"
verify = false # optional: accept a self-signed certificate
The stream protocol
Run clikernel as a plain CLI process for clients that read a text stream rather than MCP messages. It uses a delimiter-framed stdin/stdout protocol:
- Input is not echoed.
- Each request gets a
.acknowledgement. - A per-process random delimiter marks the end of each response.
- Multiline cells are framed by
--and the delimiter.
The startup banner supplies the protocol instructions and delimiter. Running clikernel without arguments creates a kernel and stops it on exit. --kernel <id> attaches to an existing kernel and leaves it running on exit.
Metadata
Release files for clikernel 0.2.16
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| clikernel-0.2.16.tar.gz | 29.2 kB | Without provenance | Details for clikernel-0.2.16.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| clikernel-0.2.16-py3-none-any.whl | Python 3 | none | any | Details for clikernel-0.2.16-py3-none-any.whl |
Total release size: 54.5 kB
Release files / clikernel-0.2.16.tar.gz
| Download URL | clikernel-0.2.16.tar.gz |
|---|---|
| Size | 29.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
2c413d079c666274455d050c215ca4aa0713c84babf55adec2f1204c744eb712
|
|
BLAKE2b-256 checksum How to use checksums |
4174cc9d6c81e2528a82f05aaa412c01636889f892a1ce23effbc3d1e63e5734
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.13.15
|
Release files / clikernel-0.2.16-py3-none-any.whl
| Download URL | clikernel-0.2.16-py3-none-any.whl |
|---|---|
| Size | 25.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
41cbadcf3f3961dd791940b971a4d21caed8a3c6b15a3f3faf3bf3022698bc6b
|
|
BLAKE2b-256 checksum How to use checksums |
10f0d7a90a75f93802d813f105517df50e55473310e1656356bb3a22633aaf9d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.13.15
|
Security for clikernel 0.2.16
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.