Kāhea
The agentic invocation kernel

Probabilistic intent.
Exact execution.

Kāhea turns API descriptions and captured requests into sealed plans, exact grants, tested invocations, and evidence an agent cannot quietly rewrite.

Choose an install path Read the source

For testers, API designers, and mature agentic workflows.

00 / Belief

Tools written for AI first are the evolution. The boundary between a model’s suggestion and a real network call must be executable, reviewable, and exact.

01 / Method

One computation.
Five legible states.

Scroll the protocol. The particle field follows the same state changes as Kāhea.

  1. 01

    Inspect

    Parse OpenAPI, Arazzo, Postman, HAR, cURL, and HTTP artifacts locally. No DNS. No request.

    kahea inspect api.yaml --match invoice
  2. 02

    Plan

    Bind exact inputs into an integrity-sealed request plan with a stable fingerprint.

    kahea plan api.yaml createInvoice
  3. 03

    Grant

    Review the target, method, secret references, and narrow capabilities before execution.

    --grant net:api.example.com:443
  4. 04

    Invoke

    Execute only the sealed plan. Changed input, policy, or capability fails closed.

    kahea invoke plan:HANDLE
  5. 05

    Evidence

    Return typed observations and content-addressed evidence—not a context-flooding response dump.

    kahea explain body:HANDLE --select /id

02 / Install

One implementation.
Four doors.

Start with the verified native binary. Then add the host integration that matches your workflow. Every route reaches the same four MCP tools and the same safety contract.

Claude Code plugin

Installs the canonical Kāhea skill and connects the local stdio MCP server.

Terminal
claude plugin marketplace add copyleftdev/kahea
claude plugin install kahea@kahea

Requires: the verified kahea binary on PATH.

OpenAI Codex plugin

Loads the same agent-use contract and the same local MCP projection.

Terminal
codex plugin marketplace add copyleftdev/kahea
codex plugin add kahea@kahea

Requires: the verified kahea binary on PATH.

Any MCP client

Use stdio directly or discover release bundles as io.github.copyleftdev/kahea.

Server command
kahea mcp serve --stdio
Open MCP Registry View server metadata

Native release

Download the archive for Linux, macOS, or Windows, then verify its GitHub provenance.

Verify provenance
gh attestation verify kahea-ARCHIVE --repo copyleftdev/kahea
Download a release

03 / Proof

Functional is not a feeling.

Kāhea

04 / Source

Let the model reason.
Make the call exact.

Explore Kāhea on GitHub