Quick Start

From zero to protected in under 2 minutes.

1Install Node9

Install the Node9 CLI globally via npm or Homebrew:

# Homebrew (macOS / Linux)
brew tap node9-ai/node9
brew install node9

# Or via npm
npm install -g node9-ai

2Connect an AI agent

Run node9 init — it auto-detects every installed agent (Claude Code, Gemini CLI, Codex, Cursor, Windsurf, VSCode) and wires Node9 as a pre-execution hook for each:

node9 init   # one command, all detected agents

After init, every tool call routes through Node9 automatically. Use node9 doctor to verify the wiring afterwards.

3Enable shields for the services you use

Node9 ships with core protection always on (git, SQL, shell). Enable shields for the specific infrastructure your agent has access to:

node9 shield enable postgres   # protect your database
node9 shield enable aws        # protect your cloud
node9 shield enable github     # protect your repos
node9 shield list              # see all available shields

4Connect to your workspace (optional)

To enable cloud features (Mission Control, Policy Studio, team audit logs), log in with your API key:

node9 login <your-api-key>

To stay fully local with no cloud connection:

node9 login --local

5Verify everything is wired

Run the health check to confirm binaries, config, and hooks are all correctly set up:

node9 doctor

Then start your agent and ask it to run a dangerous command. A Native OS popup will appear. Check the audit log afterwards:

node9 audit

Named Profiles (Multiple Workspaces)Advanced

To manage multiple workspaces on the same machine, use named profiles:

# Save a named profile
node9 login <key> --profile work
node9 login <key2> --profile personal

# Select active profile
export NODE9_PROFILE=work

The active profile determines which API key and workspace are used. Defaults to the default profile if NODE9_PROFILE is not set.

Quick Start · node9 documentation

Quick Start