> ## Documentation Index > Fetch the complete documentation index at: https://docs.devin.ai/llms.txt > Use this file to discover all available pages before exploring further. # Commands & Flags > Complete Devin CLI reference for global flags, subcommands such as devin auth, mcp, ssh, and forward, and interactive slash commands. ## Usage ```bash theme={null} devin [OPTIONS] [prompt] ``` Pass an optional prompt to start a session with an initial message, or launch interactively with no arguments. You can also read these from your terminal with `man devin`. *** ## Global Flags | Flag | Short | Env var | Description | | - | - | - | - | | `--model ` | | `DEVIN_MODEL` | Set the AI model for this session | | `--permission-mode ` | | `DEVIN_PERMISSION_MODE` | Permission mode: `normal` (alias `auto`, the default), `accept-edits`, `smart`, `dangerous` (aliases `yolo`, `bypass`), or `autonomous` (requires `--sandbox`). See [Permissions](/cli/reference/permissions). | | `--sandbox` | | `DEVIN_SANDBOX` | \[Research Preview] Sandbox exec-tool processes (macOS seatbelt / Linux bwrap+seccomp). See [Sandbox](/cli/sandbox). | | `--cloud` | | | Drive [Devin Cloud sessions](/cli/cloud) instead of the local agent. Requires a Devin account. | | `--continue` | `-c` | | Resume the most recent session in the current directory | | `--resume ` | `-r` | | Resume a specific session by ID. With `--cloud`, accepts a cloud session ID or URL. | | `--print [PROMPT]` | `-p` | | Print response and exit (non-interactive mode). Optionally accepts an inline prompt. | | `--prompt-file ` | | | Load the initial prompt from a file | | `--config ` | | | Configuration file path | | `--export [PATH]` | | | Export conversation to a file after each turn (ATIF format). Uses a default path if none is provided. | | `--respect-workspace-trust [true\|false]` | | | Whether to respect workspace trust settings. Defaults to `true`. | Non-interactive `--print` mode cannot show the workspace trust prompt, so it fails in an untrusted directory. Pass `--respect-workspace-trust false` to skip the check in scripts and CI. **Examples:** ```bash theme={null} devin -- add a login page devin --model opus -- refactor the auth module devin --permission-mode accept-edits -- fix the failing tests devin --sandbox -- run the migration script devin -c # Resume last session devin -r abc12345 # Resume specific session devin --cloud # Start a Devin Cloud session devin --cloud -r https://app.devin.ai/sessions/… # Resume a cloud session devin -p "list all TODO comments" # Print response and exit devin -p -- list all TODO comments # Same, using -- separator (still works) devin --export -- fix the tests # Export conversation to default path devin --export out.json -- fix tests # Export to a specific file ``` *** ## Subcommands ### devin auth Authentication related commands. | Command | Description | | - | - | | `devin auth login` | Log in to your account | | `devin auth logout` | Log out and remove stored credentials | | `devin auth status` | Check authentication status | **Options for `devin auth login`:** * `--force-manual-token-flow` — Skip browser-based auth and manually paste a token (useful for remote/SSH sessions) ### devin mcp Connect and log in to Model Context Protocol servers. | Command | Description | | - | - | | `devin mcp add ` | Add a new MCP server | | `devin mcp list` | List all configured MCP servers | | `devin mcp get ` | Show details for a specific MCP server | | `devin mcp remove ` | Remove a configured MCP server | | `devin mcp login ` | Authenticate with an MCP server via OAuth | | `devin mcp logout ` | Remove stored OAuth credentials for an MCP server | | `devin mcp enable ` | Enable a disabled MCP server | | `devin mcp disable ` | Disable an MCP server without removing it | **Options for `devin mcp add`:** * `-t, --transport ` — Transport type (optional; inferred from URL → http, trailing args → stdio) * `-s, --scope ` — Configuration scope (default: `local`) * `--url ` — URL for HTTP transport (can also be passed as a positional argument after the name) * `--command ` — Command for stdio transport (optional when trailing args are provided) * `-e, --env ` — Environment variables (repeatable) * `-H, --header ` — HTTP headers (repeatable) * `--scopes ` — OAuth scopes to request (comma-separated) * `--oauth-resource ` — Override the RFC 8707 `resource` parameter sent in OAuth requests (default: the MCP server URL; pass an empty string to omit it for providers that reject it) * `` — Positional URL argument for HTTP (alternative to `--url`) * `-- [ARGS...]` — Command and arguments for stdio (first arg is the command when `--command` is omitted) HTTP servers try Streamable HTTP first and fall back to legacy SSE on non-authentication 4xx errors such as 404 or 405 (per the [MCP spec](https://spec.modelcontextprotocol.io/specification/2025-03-26/basic/transports/#backwards-compatibility)). 401 and insufficient-scope 403 responses with a `WWW-Authenticate` challenge are reported directly so you can authenticate. You can also set `"transport": "sse"` explicitly. See [MCP Configuration → Troubleshooting](/cli/extensibility/mcp/configuration#troubleshooting). **Examples:** ```bash theme={null} # stdio server devin mcp add my-server -- npx @company/mcp-server --port 3000 # HTTP server (positional URL) devin mcp add notion https://mcp.notion.com/mcp devin mcp add --transport http datadog-mcp https://mcp.datadoghq.com/v1/mcp # HTTP server (--url flag, also works) devin mcp add notion --url https://mcp.notion.com/mcp # With environment variables and scope devin mcp add -e GITHUB_TOKEN=ghp_xxx github -- npx -y @modelcontextprotocol/server-github devin mcp add -s project sentry https://mcp.sentry.dev/mcp ``` **Options for `devin mcp remove`:** * `-s, --scope ` — Configuration scope (default: `local`) **Options for `devin mcp login`:** * `--scopes ` — OAuth scopes to request (comma-separated) * `--oauth-resource ` — Override the RFC 8707 `resource` parameter sent in OAuth requests (default: the MCP server URL; pass an empty string to omit it for providers that reject it) **Options for `devin mcp enable`:** * `-s, --scope ` — Configuration scope (default: `local`) **Options for `devin mcp disable`:** * `-s, --scope ` — Configuration scope (default: `local`) See [MCP Configuration](/cli/extensibility/mcp/configuration) for details. ### devin models List the models available to your account. | Command | Description | | - | - | | `devin models list` | List available models, organized by model family | | `devin models list --format json` | Output the model list as JSON (for scripts) | See [Models](/cli/models) for details. ### devin rules Manage agent rules (always-on context blobs). | Command | Description | | - | - | | `devin rules list` | List all available rules | | `devin rules show ` | Show details for a specific rule | | `devin rules paths` | Show rule directory locations | **Options for `devin rules list`:** * `--provider ` — Filter by rule provider See [Rules](/cli/extensibility/rules) for details. ### devin skills Manage agent skills (slash commands and agent-triggered context blobs). | Command | Description | | - | - | | `devin skills list` | List all available skills | | `devin skills show ` | Show details for a specific skill | | `devin skills paths` | Show skill directory locations | **Options for `devin skills list`:** * `--trigger ` — Filter by trigger type See [Skills](/cli/extensibility/skills/overview) for details. ### devin plugins Manage plugins — bundles that ship skills, rules, hooks, MCP servers, and subagents together. | Command | Description | | - | - | | `devin plugins install ` | Install a plugin and its required plugins | | `devin plugins list` | List installed plugins with their version and blocked status | | `devin plugins info ` | Show a plugin's skills, hooks, rules, and its required/optional/forbidden lists | | `devin plugins update [name]` | Re-fetch and re-install a plugin at the latest HEAD. Omit the name to update every plugin. | | `devin plugins remove ` | Remove an installed plugin | | `devin plugins prune` | Drop requirements from repos that no longer exist on disk, then garbage-collect unreferenced plugin content | A source is a GitHub `owner/repo`, a git URL, or a local path. Append `#path/to/plugin` when the plugin lives below a repository's root. **Options:** * `-y, --yes` (`install`) — Skip the interactive trust prompt * `--force` (`remove`) — Remove even when another plugin or a governance config still requires it ```bash theme={null} devin plugins install acme/review-tools devin plugins install acme/vendor-plugins#plugins/stripe devin plugins info review-tools ``` See [Plugins](/cli/extensibility/plugins/overview) for details. ### devin migrate Migrate configuration from other tools into Devin's own formats. | Command | Description | | - | - | | `devin migrate hooks` | Migrate Windsurf hooks (`.windsurf/hooks.json`) to Devin hooks (`.devin/hooks.v1.json`) | | `devin migrate workflows` | Migrate workflow files into skills and remove the originals | **Options for `devin migrate workflows`:** * `--scope ` — Which workflows to migrate (default: `all`) Migration is a one-time copy. Configuration that Devin CLI reads in place — rules, skills, and MCP servers from Cursor, Windsurf, Claude Code, Copilot, and others — needs no migration; see [Configuration Import](/cli/reference/configuration/read-config-from). ### devin list List sessions in the current directory. Alias: `devin ls` | Command | Description | | - | - | | `devin list` | Interactive session picker (default) | | `devin list --format json` | Output sessions as JSON | | `devin list --format csv` | Output sessions as CSV | ### devin cloud Manage Devin Cloud resources from the terminal. Commands use the credentials stored by `devin auth login` — there is no extra environment wiring. #### devin cloud drs Manage [Declarative Repo Setup](/onboard-devin/environment/blueprints): environment blueprints, sandbox sessions for testing repo setup, and snapshot builds. | Command | Description | | - | - | | `devin cloud drs whoami` | Print the current configuration (org, API endpoint, auth status) | | `devin cloud drs sandbox-create --repo ` | Create a sandbox Devin session attached to a repository for testing repo setup | | `devin cloud drs run --devin-id --command ` | Run a shell command inside a sandbox session and block until it finishes | | `devin cloud drs blueprint-list` | List all environment blueprints for the organization | | `devin cloud drs blueprint-create` | Create a blueprint, optionally scoped to a repository | | `devin cloud drs blueprint-write --blueprint-id --from-file ` | Replace a blueprint's contents with a YAML file | | `devin cloud drs build` | Trigger an environment build and wait for it to finish | | `devin cloud drs build-start` | Trigger a build and return immediately with the build job ID | | `devin cloud drs build-wait --build-job-id ` | Wait for a previously started build to finish | | `devin cloud drs build-logs --build-job-id ` | Stream a build job's logs as NDJSON — useful for diagnosing `partial` or `failed` builds | | `devin cloud drs secret-create --key --value ` | Create an organization-level secret | **Options for `devin cloud drs sandbox-create`:** * `--repo ` — Repository to attach the sandbox to (required) * `--prompt ` — Initial prompt for the sandbox session * `--secret ` — Per-session secret (repeatable) **Options for `devin cloud drs run`:** * `--devin-id ` — Devin session ID (e.g. `devin-abc123…`) (required) * `--command ` — Shell command to execute (required) * `--timeout ` — Server-side timeout (default: `600`) **Options for `devin cloud drs blueprint-create`:** * `--repo ` — Repository to scope the blueprint to; omit for an org-wide blueprint * `--from-file ` — YAML file with the initial blueprint contents ```bash theme={null} devin cloud drs whoami devin cloud drs blueprint-create --repo acme/api --from-file environment.yaml devin cloud drs sandbox-create --repo acme/api --secret NPM_TOKEN=abc123 devin cloud drs run --devin-id devin-abc123 --command "npm test" devin cloud drs build ``` See [Blueprint reference](/onboard-devin/environment/blueprint-reference) for the `environment.yaml` format these commands read and write. ### devin version Print the current version and exit. ```bash theme={null} devin version ``` This is equivalent to `devin --version`. ### devin acp Run Devin as an [Agent Client Protocol (ACP)](https://agentclientprotocol.com/) server over stdio. This subcommand is intended to be invoked by an ACP-aware editor or IDE (such as Windsurf or Zed) as a subprocess — it speaks JSON-RPC over stdin/stdout and is not meant to be run interactively. ```bash theme={null} devin acp ``` The ACP server reads credentials from `WINDSURF_API_KEY` if set, otherwise from the credentials stored by `devin auth login`. It can also accept credentials at runtime via the ACP `authenticate` request. **Options:** | Flag | Env var | Description | | - | - | - | | `--agent-type ` | | The type of agent to run. Omit to run the default agent. | | `--model ` | `DEVIN_MODEL` | Default model for every new ACP session, overriding the enterprise-configured default. Accepts the same fuzzy names as `/model` (family slug, alias, or partial name), e.g. `--model opus`. | ```bash theme={null} devin acp --model opus ``` #### Slash commands in ACP hosts The ACP server advertises its full slash-command set over the protocol, so the commands show up in the host's own command palette with descriptions, argument hints, and categories: | Category | Commands | | - | - | | Account | `/login [api-key]`, `/logout`, `/status` (the ACP name for the CLI's `/login-status`) | | Session | `/ask [question]`, `/plan [prompt]`, `/compact`, `/context`, `/fast`, `/loop `, `/btw `, `/session-stats` (alias `/stats`), `/help` | | System | `/workspace` (alias `/workspaces`), `/add-dir `, `/remove-dir `, `/mcp`, `/bug ` | Some commands are gated by the host and your account: * `/login` and `/logout` are hidden when the host manages authentication itself. * The workspace-directory commands (`/workspace`, `/add-dir`, `/remove-dir`) only appear when the host asks the agent to own the workspace roots. Hosts that manage their own roots never see them. ### devin update Check for updates and optionally install them. ```bash theme={null} devin update ``` Use `--force` to re-install even if already on the latest version: ```bash theme={null} devin update --force ``` ### devin sandbox \[Research Preview] Manage OS-level process sandboxing for the exec tool. Pass the global `--sandbox` flag to run a session with the sandbox enforced. #### devin sandbox setup Print the sandbox prerequisites for the current platform. Requirements to run with `--sandbox`: * **Linux**: requires bubblewrap (`bwrap`) and `socat`. A sandbox session fails to start with install instructions if either is missing — including in a fresh WSL distribution. * **macOS**: works out of the box via Seatbelt; no extra packages needed. * **Windows**: native Windows cannot run the sandbox. [Install WSL 2](https://learn.microsoft.com/windows/wsl/install) and run Devin inside your WSL distribution. ```bash theme={null} devin sandbox setup ``` ### devin setup Interactive setup wizard for authentication and MCP configuration. ```bash theme={null} devin setup devin setup --force-manual-token-flow # For remote/SSH sessions ``` ### devin doctor Diagnose the local Devin configuration. It reports which [custom subagent](/cli/subagents#custom-subagents) profiles loaded, flags any `AGENT.md` definition whose frontmatter could not be parsed (such definitions are skipped at runtime), and warns about frontmatter keys Devin ignores. The command exits with a non-zero status if any check fails. ```bash theme={null} devin doctor devin doctor --json # Machine-readable output ``` ### devin airgap doctor Diagnose air-gapped configuration and model endpoint connectivity. In addition to the custom subagent check from `devin doctor`, it checks the license, local configuration paths, and the models file, and probes each configured model endpoint. ```bash theme={null} devin airgap doctor devin airgap doctor --json # Machine-readable output ``` `devin airgap doctor` is only present in air-gapped builds of the CLI. ### devin ssh SSH into a [cloud session's](/cli/cloud) VM. Wraps the system `ssh` to the Devin SSH gateway and approves the connection with your logged-in credentials, so no browser round-trip is needed. See [SSH](/cli/ssh). ```bash theme={null} devin ssh [--gateway ] [ssh options...] ``` | Argument | Description | | - | - | | `` | Session ID or session URL | | `--gateway ` | SSH gateway host (defaults to the `ssh.` host of your Devin API, e.g. `ssh.devin.ai`) | | `[ssh options...]` | Extra options passed through to `ssh`, e.g. `-L 8080:localhost:8080` | ### devin forward Forward ports from a cloud session's VM to localhost so a dev server running on the box can be opened at `http://localhost:`. Runs until Ctrl-C. ```bash theme={null} devin forward ... [--gateway ] ``` Each port is `` or `:`: ```bash theme={null} devin forward devin-abc123 3000 # http://localhost:3000 devin forward devin-abc123 8080:3000 # local 8080 → box 3000 ``` ### devin worker Runs the CLI as an [Outposts](/cloud/outposts/overview) worker. It is hidden from `devin --help` and documented separately — see the [Outposts reference](/cloud/outposts/reference). ### devin uninstall Uninstall Devin CLI and optionally remove all data. | Option | Description | | - | - | | `--clean` | Remove all data including configuration, history, and custom data | | `--force` | Skip confirmation prompt | *** ## Slash Commands These commands are available inside an interactive session. Type them at the prompt. ### Mode & Model | Command | Description | | - | - | | `/mode [normal\|accept-edits\|smart\|plan\|bypass]` | Show or switch the current mode (`autonomous` is available in sandbox sessions) | | `/normal` | Switch to Normal mode (default) | | `/accept-edits` | Switch to Accept Edits mode (auto-approve file edits in workspace) | | `/smart` | Switch to Smart mode (auto-approve actions a fast model judges safe). Rolling out gradually — it may not be available on your account yet. | | `/plan` | Switch to Plan mode (read-only planning) | | `/ask ` | Ask a question without making code changes (oneshot) | | `/bypass` | Switch to Bypass mode (auto-approve all actions) | | `/autonomous` | Switch to Autonomous mode (sandbox-enforced; requires `--sandbox`) | | `/model [name]` | Show or change the current model | | `/fast` | Switch to SWE-1.6 Fast | | `/theme [dark\|light\|terminal-dark\|terminal-light\|no-color]` | Switch between themes (dark, light, terminal dark, terminal light, no color) | `/bypass` has aliases `/yolo` and `/dangerous`. All three do the same thing. ### Session Management | Command | Description | | - | - | | `/clear` | Clear conversation history and start a new session. Alias: `/new` | | `/continue [session-id]` | Resume a previous session | | `/fork [step]` | Fork the current session to a new session. Optionally fork from a specific step (see `/steps`). | | `/steps` | List conversation steps (use with `/fork` and `/revert`) | | `/revert ` | Revert file changes from a specific step onwards and rewind the conversation to before that step | | `/resume [session-id]` | Open the interactive session picker, or resume a specific session by ID | | `/ls [--all]` | List recent sessions (current directory only by default). Alias: `/list-sessions` | | `/title ` | Rename the current session | | `/rename-session ` | Rename the current session | | `/rm-session ` | Irreversibly delete a session and all its data | | `/export` | Show export info. Use the `--export` CLI flag to enable conversation export. | | `/exit` | Exit the application (alias: `/quit`). You can also type `exit` or `quit` without the `/` prefix. | ### Workspace | Command | Description | | - | - | | `/workspace` | List workspace directories (alias: `/workspaces`) | | `/add-dir ` | Add an additional workspace directory | | `/undo-add-dir ` | Remove a workspace directory | | `/remove-dir ` | Remove a workspace directory (second name for `/undo-add-dir`) | ### Automation | Command | Description | | - | - | | `/loop ` | Run a prompt then auto-review the diff in a loop | | `/btw ` | Ask a quick side question. Runs a sidechain using the current conversation context and prints the answer in a box, without adding the question to the main conversation. | ### Extensibility | Command | Description | | - | - | | `/hooks` | List all loaded hooks with their IDs, event types, and source paths | | `/mcp` | List configured MCP servers and their status | ### Utilities | Command | Description | | - | - | | `/help` | Show available slash commands | | `/shortcuts` | Browse keyboard shortcuts in an interactive, searchable list grouped by category. Press `Enter` on a row to [rebind it](/cli/reference/keyboard-shortcuts#customizing-keybindings), and see each action's `context.action` identifier | | `/config` | Open the interactive config editor | | `/bug [description]` | Report a bug to the Devin CLI developers | | `/update [--force]` | Check for and install updates. Pass `--force` to re-install even when already on the latest version. | | `/upgrade` | Upgrade your subscription plan | | `/login` | Authenticate with your account | | `/logout` | Clear stored credentials and exit | | `/login-status` | Show login and authentication status (advertised to ACP hosts as `/status`) | | `/org` | Select your Devin organization | | `/copy` | Copy the last response to the clipboard | | `/feedback ` | Rate the last response | | `/mouse` | Toggle mouse event capture (click/hover/scroll in menus) | | `/context` | Show context window usage | | `/usage` | Show estimated credit/ACU usage for the session, including usage from previous openings of a resumed session | | `/session-stats` | Show session statistics (alias: `/stats`) | | `/compact` | Force conversation compaction | #### Session statistics `/session-stats` (alias `/stats`) is the full view of what a session has consumed, where `/usage` is the thin credit/ACU summary. It renders every usage dimension the server reports — credits, ACUs, agent messages, turn continuations, and token usage — using the server's own labels and grouping, so new dimensions show up without a CLI update. The `Model` row names the model that actually served the billed turns, which can differ from the model you selected. Totals persist across resume, so a resumed session reports its cumulative usage rather than starting over. ### Cloud Sessions See [Cloud CLI](/cli/cloud) for a guide to running Devin Cloud sessions from the terminal. | Command | Description | | - | - | | `/cloud` | Switch a fresh local session to run in Devin Cloud (before the first message; run `/clear` first otherwise) | | `/handoff [task]` | Local session: continue the task in a cloud session. Cloud session: check out the session's pull request branch and continue locally. See [Hand off to cloud Devins](/cli/handoff). | | `/repo` | Pick the repositories for this cloud session | | `/platform` | Pick the platform (OS) for this cloud session | | `/open [web\|desktop]` | Open this cloud session in the web app (default) or Devin Desktop | | `/ssh` | SSH into this cloud session's VM. See [SSH](/cli/ssh). | | `/pickup` | Check out this cloud session's pull request branch and continue locally (same as `/handoff` in a cloud session) | | `/rename ` | Rename this cloud session | | `/archive` | Archive this cloud session | *** ## Modes Modes control the agent's autonomy level by combining a permission mode with an agent profile. Full autonomy for complex coding tasks. The agent can read, write, and execute commands with normal permission checks. * **Permission mode:** Normal * **Profile:** Normal * **Use for:** Multi-file refactoring, feature implementation, bug fixes Planning only — the agent proposes changes without making them. Read-only tool access ensures no code is modified. * **Permission mode:** Normal * **Profile:** Plan (read-only tools) * **Use for:** Architecture design, understanding codebases, planning before implementation Workspace edits are auto-approved like Accept Edits, and a fast model decides whether other actions are safe to auto-run, falling back to the normal prompt otherwise. * **Permission mode:** Smart * **Profile:** Normal * **Use for:** Routine development work (building, testing, linting) with fewer interruptions Smart mode is rolling out gradually and may not be available on your account yet. See [Permissions](/cli/reference/permissions). All permission prompts are auto-approved. The agent executes freely without asking for confirmation. * **Permission mode:** Dangerous * **Profile:** Normal * **Use for:** Trusted tasks where interruptions slow you down Use Bypass mode only for tasks you fully trust. All tool calls (including destructive commands) are auto-approved. Everything except file writes is auto-approved and the OS sandbox enforces the boundary instead of prompts. * **Permission mode:** Autonomous (requires `--sandbox`) * **Profile:** Normal * **Use for:** Long unattended runs inside a [sandboxed](/cli/sandbox) session Cycle between modes with `/mode`, or switch directly with `/normal`, `/accept-edits`, `/smart`, `/plan`, `/bypass`, or `/autonomous`. Use `/ask ` as a oneshot command to ask questions without switching modes. *** ## Profiles Profiles determine the agent's available tools and behavior. Profiles are automatically set when you switch modes. | Profile | Description | Tool Access | | - | - | - | | `normal` | Full coding assistant (used by Normal, Accept Edits, Smart, Bypass, and Autonomous modes) | All tools | | `plan` | Structured planning workflow (used by Plan mode) | Read-only tools (grep, glob, read, todo, ask\_user\_question, exit\_plan\_mode) | | `ask` | Question answering (used by the `/ask` command) | Read-only tools (grep, glob, read, todo, ask\_user\_question) | This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.