CLI Reference

Commands

reins init                 # Setup wizard: hooks + policy + Reins Cloud
reins status               # Hook and Reins Cloud connection status
reins sync                 # Pull latest policies from Reins Cloud; flush pending audit entries
reins policy               # View and edit security policy interactively
reins stats                # Enforcement counts (allowed / blocked / approved)
reins audit -n 20          # Last 20 audit decisions
reins scan                 # Security scan for misconfigurations
reins scan --monitor       # Diff against saved baseline, alert on drift
reins disable              # Temporarily suspend all enforcement
reins enable               # Resume enforcement
reins upgrade              # Pull latest version from npm

reins init

reins init [options]
reins configure            # alias

Option	Description
`--non-interactive`	Run without prompts using defaults/flags
`--json`	Machine-readable JSON output
`--security-level <level>`	`permissive`, `balanced`, `strict`, or `custom`
`--modules <list>`	Comma-separated: `FileSystem,Shell,Browser,Network`
`--sync-toolshield`	Sync ToolShield during non-interactive mode

reins audit

reins audit -n 50

Output format:

16:05:00 | FileSystem.read              | ALLOWED    |   0.0s
16:06:00 | FileSystem.write             | APPROVED   |   3.5s (human)
16:07:00 | Shell.bash                   | REJECTED   |   1.2s (human)
16:08:00 | FileSystem.delete            | BLOCKED    |   0.0s - Policy: DENY

Audit log path: ~/.openclaw/clawreins/decisions.jsonl

Stream live:

tail -f ~/.openclaw/clawreins/decisions.jsonl

reins stats

📊 Reins Statistics

Total Calls:    142

Decisions:
  ✅ Allowed:      35 (24.6%)
  ✅ Approved:     89 (62.7%) - by user
  ❌ Rejected:     12 (8.5%)  - by user
  🚫 Blocked:       6 (4.2%)  - by policy

Average Decision Time: 2.8s

reins upgrade

reins upgrade [options]
reins update               # alias

Option	Description
`--tag <tag>`	npm dist-tag to install (default: `latest`)
`--version <version>`	Exact version (overrides `--tag`)
`--configure`	Run `reins configure` after install
`--no-restart`	Skip OpenClaw gateway restart

reins toolshield-sync

reins toolshield-sync [options]

Option	Description
`--model <name>`	Bundled ToolShield model (default: `claude-sonnet-4.5`)
`--agents-file <path>`	Custom `AGENTS.md` target path
`--bundled-dir <path>`	Path to bundled ToolShield source root
`--no-install`	Do not auto-install ToolShield if missing
`--append`	Append without removing existing ToolShield section

Data storage

~/.openclaw/clawreins/
├── policy.json            # Security rules
├── decisions.jsonl        # Audit trail (append-only)
├── stats.json             # Statistics
├── scan-state.json        # Last scan baseline
├── config-base.json       # Saved config baseline for monitor mode
├── browser-sessions.json  # Encrypted browser session state
└── clawreins.log          # Application logs

Security Policies Security Scan