SandboxCLIHub and line commands

Hub and line commands

Hub holds your connections to outside accounts, such as GitHub, and runs their tools with your approval rules. Lines give an agent a phone number or mailbox.

tangle hub connect github
tangle hub tools search "create issue"
tangle agent prompt my-box "Triage new issues" --connection github:github.issues.create
tangle lines list

tangle hub exec runs a Hub tool, not a shell command; tangle exec runs a shell command in a sandbox. Hub and lines live on Tangle Platform, so --base-url on these commands points at the Platform host.

Commands on this page

CommandWhat it does
tangle hub statusShow Hub auth and connection status
tangle hub connectConnect a provider account
tangle hub connectionsList Hub provider connections
tangle hub connections revokeRevoke a Hub provider connection
tangle hub tools sourcesList Hub tool sources
tangle hub tools describeDescribe a Hub tool
tangle hub tools searchSearch Hub tools
tangle hub callExecute a Hub tool
tangle hub execExecute a Hub tool
tangle hub resumeResolve a Hub approval created by a paused execution
tangle hub approvals listList pending Hub execution approvals
tangle hub approvals approveApprove a pending Hub execution approval
tangle hub approvals denyDeny a pending Hub execution approval
tangle hub permissions listList Hub permissions for a connection
tangle hub permissions setSet Hub permission for one action
tangle hub permissions revert-writesRevoke a bulk --allow-writes grant for a connection (deletes only the auto-granted write rows; manual permissions are untouched)
tangle lines providersList provider transports supported by this Hub deployment
tangle lines listList owned lines, optionally for a saved agent profile or sandbox
tangle lines getInspect a line and its current attachment
tangle lines numbersDiscover owned provider numbers; this does not purchase or reserve a number
tangle lines connectBind an owned number or identity through Hub; no provider rental is purchased
tangle lines attachAttach a saved agent to any sandbox, or use an isolated on-demand member instance
tangle lines detachStop dispatch; preserve history and provider rental
tangle lines releaseRetire a detached Hub line; does not cancel provider rental
tangle lines threadsList this line’s separate participant threads
tangle lines messagesRead one authorized participant thread
tangle lines membersList names, roles and consent on this line
tangle lines sendSend to a consenting member through Hub
tangle lines remindWake the agent at a future time to write your reminder
tangle contextShow live line identity, members, consent, reminders and quotas

Hub

tangle hub status

Show Hub auth and connection status.

Shows Hub authentication and connection status.

tangle hub status

Request: GET /v1/hub/status

tangle hub status

tangle hub connect

Connect a provider account.

Starts OAuth for a provider, opens the authorization URL in a browser (or prints it with --no-browser) and exits.

tangle hub connect <provider> [options]
FlagDefaultDescription
--no-browserPrint the authorization URL instead of opening it
--parameter <key=value>Provider-specific OAuth value. Repeatable.

Request: POST /v1/hub/connections/{provider}/start

tangle hub connect github
  • With no credential on a terminal it runs browser login first.
  • It does not wait for authorization; check with tangle hub status.
  • --json prints the start response with the OAuth state removed.

tangle hub connections

List Hub provider connections.

Lists Hub provider connections.

tangle hub connections

Request: GET /v1/hub/connections

tangle hub connections

tangle hub connections revoke

Revoke a Hub provider connection.

Revokes a connection after confirmation (--force skips).

tangle hub connections revoke <connection-id> [options]
FlagDefaultDescription
--forceSkip confirmation prompt

Request: DELETE /v1/hub/connections/{connectionId}

tangle hub connections revoke hubconn_github_abc123

tangle hub tools sources

List Hub tool sources.

Lists tool sources (providers).

tangle hub tools sources

Request: GET /v1/hub/tools/sources

tangle hub tools sources

tangle hub tools describe

Describe a Hub tool.

Prints a tool’s input and output schema.

tangle hub tools describe <path>

Request: POST /v1/hub/tools/describe

tangle hub tools describe github.issues.create

Search Hub tools.

Searches tools, optionally within one provider.

tangle hub tools search <query...> [options]
FlagDefaultDescription
--provider <provider>Filter by provider/source ID

Request: POST /v1/hub/tools/search

tangle hub tools search "create issue"

tangle hub call

Execute a Hub tool.

Executes a Hub tool: path tokens followed by a JSON input argument.

tangle hub call <args...> [options]
FlagDefaultDescription
--connection <ref>Hub connection id, or provider[:account]
--auto-approveApprove a HUB_APPROVAL_REQUIRED execution and retry once
--approveAlias for --auto-approve
--no-hub-keyDo not auto-mint a platform Hub key; use the stored credential as-is

Request: POST /v1/hub/exec

  • Always prints the tool result as JSON.
  • --approve/--auto-approve approves a HUB_APPROVAL_REQUIRED execution and retries once.

tangle hub exec

Execute a Hub tool.

Same as tangle hub call; runs a Hub tool, not a sandbox command.

tangle hub exec <args...> [options]
FlagDefaultDescription
--connection <ref>Hub connection id, or provider[:account]
--auto-approveApprove a HUB_APPROVAL_REQUIRED execution and retry once
--approveAlias for --auto-approve
--no-hub-keyDo not auto-mint a platform Hub key; use the stored credential as-is

Request: POST /v1/hub/exec

  • Not the same as tangle exec, which runs a shell command in a sandbox.

tangle hub resume

Resolve a Hub approval created by a paused execution.

Accepts or declines the approval a paused execution created; it does not rerun the execution.

tangle hub resume <approval-id> [options]
FlagDefaultDescription
--acceptApprove the execution approval
--declineDeny the execution approval
--cancelUnsupported for approval-backed Hub resume

Request: POST /v1/hub/approvals/{approvalId}/approve

tangle hub resume appr_123
  • --decline posts …/deny; --cancel is accepted but unsupported.

tangle hub approvals list

List pending Hub execution approvals.

Lists pending approvals.

tangle hub approvals list

Request: GET /v1/hub/approvals

tangle hub approvals list

tangle hub approvals approve

Approve a pending Hub execution approval.

Approves a pending approval.

tangle hub approvals approve <approval-id>

Request: POST /v1/hub/approvals/{approvalId}/approve

tangle hub approvals approve appr_123 --json

tangle hub approvals deny

Deny a pending Hub execution approval.

Denies a pending approval.

tangle hub approvals deny <approval-id>

Request: POST /v1/hub/approvals/{approvalId}/deny

tangle hub approvals deny appr_123 --json

tangle hub permissions list

List Hub permissions for a connection.

Lists permissions for one connection.

tangle hub permissions list [options]
FlagDefaultDescription
--connection <ref>Hub connection id, or provider[:account]. Required.

Request: GET /v1/hub/policies

tangle hub permissions list --connection hubconn_github_abc123

tangle hub permissions set

Set Hub permission for one action.

Sets allow, ask or deny for one action on a connection.

tangle hub permissions set [options]
FlagDefaultDescription
--connection <ref>Hub connection id, or provider[:account]. Required.
--action <path>Executor action path. Required.
--decision <allow|ask|deny>Permission decision. Required.

Request: PUT /v1/hub/policies

tangle hub permissions set --connection hubconn_github_abc123 --action github.issues.create --decision ask

tangle hub permissions revert-writes

Revoke a bulk --allow-writes grant for a connection (deletes only the auto-granted write rows; manual permissions are untouched).

Removes the write grants that --allow-writes added for a connection; manual permissions stay.

tangle hub permissions revert-writes [options]
FlagDefaultDescription
--connection <ref>Hub connection id, or provider[:account]. Required.

Request: POST /v1/hub/policies/revert-writes

tangle hub permissions revert-writes --connection hubconn_github_abc123

Lines

tangle lines providers

List provider transports supported by this Hub deployment.

tangle lines providers

tangle lines list

List owned lines, optionally for a saved agent profile or sandbox.

tangle lines list [options]
FlagDefaultDescription
--profile-id <id>Stored profile ID
--sandbox <id>Existing sandbox ID

tangle lines get

Inspect a line and its current attachment.

tangle lines get <line-id>

tangle lines numbers

Discover owned provider numbers; this does not purchase or reserve a number.

Lists owned provider numbers for a connection; it does not buy or reserve a number.

tangle lines numbers <connection-id> [options]
FlagDefaultDescription
--transport <transport>imessageimessage, whatsapp, or sms

tangle lines connect

Bind an owned number or identity through Hub; no provider rental is purchased.

tangle lines connect <connection-id> [options]
FlagDefaultDescription
--transport <transport>imessageimessage, whatsapp, sms, email, voice, or telegram
--number-id <id>Exact owned provider number ID; required for voice, SMS, WhatsApp and Linq iMessage
--address <email>Owned mailbox on a verified email domain
--reference <reference>Stable client reference; keep it unchanged on retry. Required.
--label <label>Line display name
--yesAuthorize provider webhook configuration and line binding

Request: POST /v1/lines

tangle lines connect conn_p --transport voice --number-id pn_voice --reference support --yes --json
  • --yes authorizes provider webhook configuration and line binding.

tangle lines attach

Attach a saved agent to any sandbox, or use an isolated on-demand member instance.

Attaches a saved agent profile to a line, on an existing sandbox or an isolated on-demand instance.

tangle lines attach <line-id> [options]
FlagDefaultDescription
--file <path>Reviewed native attachment JSON (exclusive with quick-setup flags)
--profile-id <id>Owner-scoped saved profile; each turn pins its source revision
--member <address>The one allowed sender: E.164 phone or email
--sandbox <id>Use an existing sandbox instead of an on-demand instance
--instance-prefix <prefix>Stable instance namespace; defaults to profile:<profile-id>:
--tools <mode>chat denies tools; act applies the profile’s tools and permissions
--turns-per-day <count>Per-member daily turn ceiling (default 30)
--yesAuthorize agent execution and spend against your key limits

tangle lines detach

Stop dispatch; preserve history and provider rental.

Stops dispatch on a line while keeping its history and provider rental.

tangle lines detach <line-id> [options]
FlagDefaultDescription
--yesAuthorize this change

tangle lines release

Retire a detached Hub line; does not cancel provider rental.

tangle lines release <line-id> [options]
FlagDefaultDescription
--yesAuthorize this change

tangle lines threads

List this line’s separate participant threads.

Lists a line’s participant threads.

tangle lines threads <line-id>

tangle lines messages

Read one authorized participant thread.

Reads one participant thread.

tangle lines messages <line-id> <thread-id>

tangle lines members

List names, roles and consent on this line.

tangle lines members [options]
FlagDefaultDescription
--line <line-id>Line ID; inferred in a line box
  • --line is inferred inside a line box; elsewhere pass it.

tangle lines send

Send to a consenting member through Hub.

tangle lines send <to-member> <text> [options]
FlagDefaultDescription
--line <line-id>Line ID; inferred in a line box
--on-behalf-of <member>Verified sender for a member relay
--not-before <iso-time>Delay delivery until this ISO time
--idempotency-key <key>Stable key for a retry
  • --line is inferred inside a line box; elsewhere pass it.

tangle lines remind

Wake the agent at a future time to write your reminder.

tangle lines remind <text> [options]
FlagDefaultDescription
--at <iso-time>Future ISO time. Required.
--line <line-id>Line ID; inferred in a line box
--idempotency-key <key>Stable key for a retry
  • --line is inferred inside a line box; elsewhere pass it.

Context inside a line sandbox

tangle context

Show live line identity, members, consent, reminders and quotas.

tangle context
  • Inside a line box it authenticates with TANGLE_LINE_TOKEN (lrc_ prefix) and TANGLE_HUB_URL; elsewhere it uses the platform credential.
  • Always prints JSON.

Next