Axe
by Independent open-source project (maintainer: jrswab)
Lightweight CLI for running single-purpose AI agents
Axe is a 12 MB Go binary that runs single-purpose AI agents defined in TOML files instead of behind a chat UI or a Python framework. It reads stdin and writes stdout, and is triggered from pipes, git hooks, cron or CI, so LLM steps compose like ordinary Unix commands.
Axe is an open-source command-line tool, written in Go and released under Apache-2.0, that runs single-purpose LLM agents as ordinary Unix programs rather than as a chatbot or a long-running framework. Each agent is a TOML file declaring a name, description, model, system prompt, optional skill and context files, working directory, allowed tools, sub-agents and allowed hosts, plus optional [memory], [[mcp_servers]], [params], [budget] and [retry] blocks. Because agents are plain text they can be committed to a repository and reviewed like any other configuration. The binary reads standard input and writes standard output, so agents compose through pipes — `git diff --cached | axe run pr-reviewer` is the canonical example — and are triggered from git hooks, cron or CI rather than by any scheduler Axe provides; the maintainer describes it as the executor, not the scheduler. It ships built-in tools for file operations sandboxed to the working directory, shell command execution, URL fetching and web search, and speaks MCP for external tools. Supported providers include Anthropic, OpenAI, Ollama for local models, OpenCode and AWS Bedrock. Guardrails include sub-agent nesting capped at depth five, a ceiling of 50 tool-call turns per conversation, token budgets that exit with code 4 when exceeded, exponential, linear or fixed backoff on transient provider errors, and blocking of private and reserved IP ranges regardless of the host allowlist. The repository was created in February 2026, has reached 832 stars and 29 forks, and shipped v1.10.0 in May 2026 alongside a published Docker image at ghcr.io.
Platform and DevOps engineers who already automate with cron, git hooks and CI, and want to add an LLM step without adopting an agent framework or a hosted orchestration product.
LLM agents become version-controlled TOML files that run and exit like any other Unix command, so they slot into existing pipelines instead of requiring new infrastructure.
At a Glance
- Category
- AI Agents & Orchestration
- Pricing
- Free
- Target Market
- Enterprise Developers, CTOs, Platform Engineers, DevOps Engineers
- Deployment
- Self-hosted, Open-source
- Founded
- 2026
Key Features
- ✓TOML agent definitions
Each agent is a plain-text TOML file you can commit, diff and code-review like any other configuration.
- ✓Unix composition via stdin/stdout
Reads standard input and writes standard output, so agents chain through pipes into existing shell tooling.
- ✓Multi-provider model support
Targets Anthropic, OpenAI, Ollama local models, OpenCode and AWS Bedrock without rewriting the agent definition.
- ✓Sub-agent delegation with depth limits
Parent agents delegate isolated context to sub-agents, hard-capped at nesting depth five to bound runaway fan-out.
- ✓Token budgets and retry backoff
Per-agent max_tokens budgets exit with code 4 when exceeded, and transient provider errors retry with exponential, linear or fixed backoff.
- ✓Sandboxed built-in tools plus MCP
File operations are confined to the working directory, private IPs are always blocked, and MCP servers extend the tool set.
- ✓Persistent markdown memory
Timestamped markdown logs carry context across separate runs without requiring a database or a daemon.
- ✓Dry-run and JSON output modes
Dry-run resolves context without calling an LLM, and JSON output lets shell scripts parse results deterministically.
Capabilities
Use Cases
- •Automated pull-request review
A git hook pipes the staged diff into a reviewer agent that comments on the change before it ever reaches CI.
- •Overnight log triage
Cron pipes an application error log into an analyzer agent nightly and forwards only the summarized anomalies to on-call.
- •CI quality gates with cost ceilings
A build step runs an agent under a token budget and fails the pipeline on exit code 4 when spend is exceeded.
- •Local and air-gapped inference
Pointing an agent at Ollama keeps prompts and proprietary source code on the developer's own machine, avoiding vendor API egress.
- •Scripted content and data pipelines
JSON output mode lets shell scripts parse agent results and feed them into downstream deterministic tooling without glue services.
Ideal For
Best For
- ✓Teams that want LLM steps inside existing cron, git-hook and CI automation rather than a separate orchestration platform
- ✓Developers who want agent definitions version-controlled as plain text alongside the code those agents act on
- ✓Non-interactive batch jobs where an agent should run, produce output on stdout and exit cleanly
- ✓Shops needing local-model inference through Ollama for code or prompts that cannot leave the machine
- ✓Go and Unix-comfortable engineers who prefer a single static binary to a Python dependency tree
Not Ideal For
- ✗Anyone wanting an interactive chat or IDE experience — Axe deliberately ships no REPL, GUI or session state, and Hacker News commenters specifically noted the absence of a session concept for tracking state across runs
- ✗Workloads touching credentials or sensitive SaaS accounts: on Hacker News the maintainer acknowledged prompt injection is unmitigated beyond running the tool in Docker, which does not protect connected services such as Google Calendar
- ✗Organisations needing vendor support, SLAs or security attestations — this is a single-maintainer project with no commercial entity behind it and 21 open issues and pull requests
- ✗Cost-sensitive teams without their own guardrails, since sub-agent fan-out multiplies token spend and commenters flagged cost control as unaddressed
Integrations
Deployment
Market Analysis
Pros
- ✓Single static binary with no daemon, runtime or Python dependency tree to maintain
- ✓Agent configs are plain TOML, so they diff, review and version exactly like code
- ✓Composes with existing Unix tooling instead of demanding a new scheduler or platform
- ✓Real guardrails shipped rather than promised: path sandboxing, private-IP blocking, depth limits and token budgets
- ✓Provider-agnostic across Anthropic, OpenAI, Bedrock and local Ollama models
Cons
- ✗Prompt injection is unsolved; on Hacker News the maintainer's mitigation was running in Docker, which he acknowledged does not protect connected services like Google Calendar
- ✗No session or state concept between runs beyond markdown memory files, which several Hacker News commenters wanted
- ✗Cost control for sub-agent fan-out is unaddressed — one commenter noted that fanning out ten agents can cost more than one large context window
- ✗The 12 MB binary drew criticism as large for its functionality; one commenter argued an equivalent Zig HTTP, TLS and LLM stack lands nearer 400 KB
- ✗Single maintainer, no commercial support, no security attestations, and Gemini was not supported at launch
Pricing
Open Source (Apache-2.0)
$0
- ✓Full functionality, no paid tier
- ✓Pre-built binaries for Linux, macOS and Windows
- ✓Install via go install github.com/jrswab/axe@latest
- ✓Docker image at ghcr.io/jrswab/axe
- ✓You pay your own LLM provider directly
Axe itself is free under Apache-2.0 with no paid tier, no hosted plan and no commercial entity behind it; the real cost is the LLM provider tokens each agent consumes, billed directly by Anthropic, OpenAI or AWS Bedrock, or zero if you point agents at a local Ollama model. Per-agent token budgets are the only built-in spend control, and Hacker News commenters flagged sub-agent fan-out as an unaddressed way to run up cost.
Security & Compliance
Connect
Stay Ahead of the Curve
Weekly enterprise AI insights for technology leaders. No spam, no vendor pitches—unsubscribe anytime.
SubscribeRelated Products
Itential FlowAI
Governed AI agents for network and infrastructure operations, with deterministic execution and full audit trails
OpenAI Presence
Deploy production-grade AI voice and chat agents with enterprise policies, guardrails and evals
HubSpot Agent Hub
One console to run, build and govern every AI agent across your go-to-market — on the CRM data you already have
Ushur Agentic Platform
AI agents that finish the job — end-to-end customer journeys for insurance, healthcare and financial services