trustclaw

Installer for the cmdop CLI — an AI agent on hardware you control, not in someone else's cloud.

pip install trustclaw
trustclaw

That's it. trustclaw detects your platform, downloads the cmdop binary, verifies it against the published checksums, installs it, and hands over.

Handing an agent your shell and your filesystem is a real decision. It matters a great deal whose machine it is running on when you do.

cmdop runs on yours. This package installs the binary, and every step of getting it there is checkable: the checksums are published, the installer is standard library only, and nothing runs at pip install time.

How does CMDOP compare? CMDOP Skills vs OpenClaw: two approaches to AI agent skills →

What you can verify before you trust it

The installer fetches SHA256SUMS from install.cmdop.com and refuses to install a binary that does not match. It writes to ~/.local/bin, never a system directory, and never asks for sudo.

It sends no telemetry and has no dependencies, so the code you are trusting at install time is this module and the Python standard library — a short read.

What is cmdop

One executable that is the agent, the relay, the local server and the web console at once. There is no gateway, backend, database server or broker to stand up — you add one binary to a machine you already own.

• run an AI agent on your own machine, with your own tools
• reach it from anywhere: terminal, files, remote execution
• connect machines into a fleet
• works with Claude Code and other agent engines under the hood

Full documentation: docs.cmdop.com

Usage

trustclaw                    # install cmdop (if needed), then run it
trustclaw --install-only     # install, don't hand over
trustclaw --prefix ~/bin     # choose the install directory
trustclaw --force            # reinstall even if already present
trustclaw --quiet            # print only the installed path
trustclaw -- --help          # everything after `--` goes to cmdop

Default install directory is ~/.local/bin (%LOCALAPPDATA%\cmdop\bin on Windows). No sudo, no system directories.

What it does, precisely

1. Detects your OS and architecture.
2. Fetches SHA256SUMS from install.cmdop.com.
3. Downloads the matching binary to a temporary file.
4. Verifies the SHA-256 against the published checksum. On mismatch it aborts and installs nothing.
5. Moves the verified binary into the install directory and marks it executable.
6. Runs it.

Supported: macOS (Apple Silicon, Intel), Linux (x64, arm64), Windows (x64).

What it does not do

• No side effects at install time. pip install trustclaw only unpacks files. Nothing is downloaded or executed until you run trustclaw.
• No network access on import. import trustclaw touches nothing.
• No telemetry. The package sends no analytics, ever.
• No dependencies. Standard library only, so there is nothing to conflict with what you already have installed.

Python API

The installer is importable if you would rather script it:

import trustclaw

target = trustclaw.detect()
print(target.label, target.asset)

result = trustclaw.install()
print(result.path, result.sha256)

trustclaw.install() raises trustclaw.InstallError with a user-facing message on any failure, and trustclaw.UnsupportedPlatform when there is no published binary for the current machine.

Links

• Website — https://cmdop.com
• Documentation — https://docs.cmdop.com
• Downloads — https://cmdop.com/download

License

MIT