Agent API and krnl

Any agent can do the work you do.

Create a Read only or Full work key, and an agent can use the same tasks, time, projects, and Inbox review you use, through /api/v1. The krnl CLI pairs your Mac for Codex and T3 Code.

See it in the explorer

Flow left to rightTasks

1InboxReview suggestions

Task suggestion74%Scope the Q4 analytics add-onCAS · Pipeline RescueDiscard ×RejectReady ▾

2ReadySchedule

NWR-150Send revised phase 2 estimate Northwind Robotics · Fulfillment APIHigh PriorityOct 9

RKS-31Homepage hero motion spec Redkite Studio · Brand SiteLow Priority

2DoingIn motion

NWR-142Webhook retry backoff for fulfillment events Northwind Robotics · Fulfillment APIHigh PriorityOct 9

CAS-88Backfill July telemetry into warehouse Cascade Analytics · Pipeline RescueHigh PriorityOct 8

zsh — agent

# read the same tasks the board shows$ auth="Authorization: Bearer $KERNEL_AGENT_API_KEY"$ curl -s -H "$auth" "https://app.krnl.work/api/v1/tasks?query=webhook"{"data":[{"key":"NWR-142","title":"Webhook retry backoff for fulfillment events","lifecycle":"doing","version":7}],"meta":{"nextCursor":null}}# accept a pending Inbox suggestion into Ready$ curl -s -H "$auth" -H "Idempotency-Key: $(uuidgen)" \ --json '{"version":3,"lifecycle":"ready","draft":{…}}' \ https://app.krnl.work/api/v1/inbox-suggestions/b71c…/accept{"data":{"task":{"key":"NWR-150","lifecycle":"ready"},…}}# leave a work note on the task$ curl -s -H "$auth" -H "Idempotency-Key: $(uuidgen)" \ --json '{"body":"**Done.** Added jittered backoff to webhook retries.\n- 14 webhook tests pass\n- Next: tune the cap"}' \ https://app.krnl.work/api/v1/tasks/NWR-142/work-notes

Same work, same records
Tasks, time, projects, files, Habits, and Inbox review through /api/v1. Task activity and work notes name the key behind each change.
Read only or Full work
Read only reads your workspace. Full work also changes work and reviews Inbox suggestions, down to sending a drafted reply as you.
Contract, guide, and skill
The app's /developers/api reference links an OpenAPI 3.1 contract, a Markdown guide written for agents, and the Kernel skill to download.

Kernel skill

AGENTS.md decides what an agent may do.

The Kernel skill reads off, ask, or yolo for each setting from your AGENTS.md. Unset means off, and a direct request from you overrides the setting for that action.

Link the current Codex or T3 Code thread to its task
Save a work summary at completion or a meaningful pause
Mark a task Done only when its whole scope is complete

AGENTS.md ~/code/fulfillment-api1## Kernel2```yaml3kernel:4 thread_attachment: yolo5 task_lifecycle: ask6 work_summaries: yolo7 github_prs: yolo8```

Kernel skill · NWR-142Linked this thread to NWR-142thread_attachment: yoloSaved a work summary to NWR-142work_summaries: yoloNWR-142’s whole scope looks complete. Mark it Done in Kernel?task_lifecycle: askNot yetMark Done

krnl

One CLI pairs your Mac.

krnl signs in through Kernel in your browser, then connects Codex, T3 Code, or both. Its companion starts at login and reports each thread's status back to Kernel.

pnpm add -g @supercorks/krnl, then krnl login
krnl connect codex or krnl connect t3code; one login holds both
krnl status shows the connection and anything left to set up

zsh — krnl

# pair this Mac with your workspace$ node --versionv22.11.0$ pnpm add -g @supercorks/krnl+ @supercorks/krnl 0.3.3$ krnl loginOpening Kernel to sign in. If the browser does not open, visit: …Signed in to sam@example.com. Run krnl connect codex or krnl connect t3code.$ krnl connect t3codeAllow Kernel (sam@example.com) to start and follow threads in your T3 Code projects on this host? [y/N] yIn T3 Code, open Settings → Connections, choose Create pairing link, then Copy link.Paste the pairing link: ••••••••Connected T3 Code on MacBook-Pro to sam@example.com. The companion starts automatically at login.Choose your project mapping in Kernel → Integrations → T3 Code.$

Kernel · Integrations → T3 CodeMacBook ProT3 Code is runningConnected

Good to know

Keys expire after 30, 90, or 365 days. Kernel shows the secret once and stores only a hash.
There are no custom scopes: every key is Read only or Full work, so review and rotation stay simple.
Every write needs an Idempotency-Key, and a stale version gets a 409 instead of overwriting.
Keys can prepare bulk time drafts, but only you can accept one into recorded time, in the app.
OAuth, API keys, and connection setup stay in the signed-in app, out of reach of any key.
A reply sent with a key keeps the app's ten-second undo window and is delivered at most once.

Highlights

Same work, same records

Read only or Full work

Contract, guide, and skill

AGENTS.md decides what an agent may do.

One CLI pairs your Mac.

Good to know

Works well with