agenteye-cli) is an Agent Skill: a small folder of instructions that a coding agent such as Claude Code or Codex loads on demand. It teaches the agent to operate your Observability deployment through the agenteye CLI from plain-English requests like “give CI a key that can only push events” or “ack the firing incident and assign it to me.”
It is not a service or a separate binary; there is nothing to deploy. It rides on top of the CLI you have already installed: the agent shells out to agenteye --json …, parses the clean JSON, and answers you in prose. Everything it can do, you could do yourself by typing the same commands.
How it relates to the other Failproof AI Observability interfaces
Failproof AI Observability gives you four ways to reach the same data and controls. They complement each other:
The skill itself has no privileges of its own; it just turns your words into CLI calls that run as you:
vs. the in-dashboard AI assistant: an important distinction
These are two different tools with very different blast radii:- The in-dashboard AI assistant (AI assistant) is a chat embedded in the dashboard, backed by the agent service. It is read-only plus approval-gated authoring: it can draft saved queries and dashboards, but every write pauses for your explicit click-approval, and it never deletes. It is gated by the
agent:usepermission and only ever sees data for the org you’re viewing. - The CLI skill runs on your workstation inside your coding agent and drives the
agenteyeCLI as you. It can perform the CLI’s full surface, including mutations (create/rotate/disable API keys, change org settings, resolve incidents, delete saved queries), bounded only by the permissions of your CLI login. Treat it exactly as carefully as you would treat running those commands by hand.
Prerequisites
- The
agenteyeCLI installed and onPATH(see the CLI reference:pipx install agenteye). - Your dashboard URL set (
AGENTEYE_DASHBOARD_URL, or the agent passes--base-url). - A logged-in session: run
agenteye loginyourself first. The skill cannot complete the emailed one-time-code login for you; it will tell you to runagenteye loginif the session is missing or expired (CLI exit code4).
Where to get it
The skill is published in Failproof AI’s public skills collection: github.com/FailproofAI/skills →skills/agenteye-cli/
Nothing about it is gated — the repository is public and the skill needs no credential of its own, because it only drives the public agenteye CLI against your dashboard, using the session you logged in with. You do not need to ask anyone for it.
Note it ships as its own folder and is not inside the pipx install agenteye package, so don’t look for it there.
Installing the skill
The quickest path is theskills CLI, which fetches the folder and drops it where your agent looks:
SKILL.md (plus optional references), so copying it works too:
- Claude Code: put the
agenteye-cli/folder in~/.claude/skills/(every project) or<your-repo>/.claude/skills/(that repo only). Claude Code auto-discovers it — verify with the/skillslist, or simply ask a question that matches its description. - Codex (OpenAI): Codex reads the same
SKILL.md. The bundledagents/openai.yamlsetsallow_implicit_invocation: true, so Codex auto-selects the skill when a task matches; otherwise invoke it explicitly as$agenteye-cli.
Safety: mutations do NOT prompt when an agent runs the CLI
Warning: Read this before letting an agent make changes.The
agenteye CLI normally asks “are you sure?” before a destructive action. It auto-skips that confirmation whenever it is not attached to a terminal (which is exactly how a coding agent runs it), and --json skips it too. So the safety prompt will not fire for the agent.
The skill is written to compensate: it is instructed to state the exact command it will run and get your explicit OK before any state change. Keep that discipline. When you drive Failproof AI Observability through an agent, you are the confirmation step. The state-changing commands to watch for:
keys create/update/disable/regenerateusers create/update/disable/enablesettings setalerts create/update/delete/test- the writing
incidentssubcommands:ack/assign/resolve/open/comment-add/comment-delete/subscribe/unsubscribe query create/update/deleteagent rename/deleteorgs switch
events, sessions, evals, errors, list, whoami, orgs list/current/perms) is read-only and changes nothing.
Because the agent acts as you, it can only do what your login is permitted to do; permissions are resolved per org (see API keys). A command you lack permission for returns exit code 5 with the exact permission named, so the agent can tell you precisely what to ask an admin for rather than failing opaquely.
What you can ask it
Here’s what a real round-trip looks like, a read, then a change that waits for your OK:agenteye command, discovering valid values first (list <kind>, whoami) so it doesn’t guess, and stating the exact command before any change. More examples:
- “Is anything broken / failing in the last 24 hours?” →
errors --since 24h --aggregate, then a breakdown. - “Why did session
run-001fail?” →events --session-id run-001 --all+evals --session-id run-001. - “How is quality trending this week?” →
evals --aggregate --since 7d, then drill into low-scoring runs. - “Give CI a key that can only push events.” →
keys create ci --add events:add(it states the command, then creates it and captures the one-time secret). - “Who has access? Make Dana read-only.” →
users list→users update dana@… --permission-set read-only(after confirming with you). - “Ack the firing incident and assign it to me.” →
incidents list --state firing→incidents ack <id>/incidents assign <id> you@….
Next steps
- CLI: full command and flag reference for
agenteye. - CLI recipes for agents: copy-paste
jqpatterns and exit-code handling. - Evaluator agent skill: the sibling skill, for building the evaluator whose scores
agenteye evalsreads. - Python SDK agent skill: the sibling skill, for instrumenting an agent so it emits the telemetry
agenteyereads. - AI assistant: the in-dashboard assistant (not to be confused with this terminal skill).
- API keys: the per-org permission model that bounds what the skill can do.

