A

Axe

by Independent open-source project (maintainer: jrswab)

AI Agents & OrchestrationDeveloper ToolsAutomation & Workflows

Lightweight CLI for running single-purpose AI agents

Free·Added March 12, 2026·Updated August 1, 2026
Share:
THE DAILY BRIEF
Axe

by Independent open-source project (maintainer: jrswab)

AI Agents & OrchestrationDeveloper ToolsAutomation & Workflows

Lightweight CLI for running single-purpose AI agents

Free

Axe is a 12 MB Go binary that runs single-purpose AI agents defined in TOML files instead of behind a chat UI or a Python framework. It reads stdin and writes stdout, and is triggered from pipes, git hooks, cron or CI, so LLM steps compose like ordinary Unix commands.

At a Glance

Category
AI Agents & Orchestration
Pricing
Free
Target Market
Enterprise Developers, CTOs, Platform Engineers, DevOps Engineers
Deployment
Self-hosted, Open-source
Founded
2026

Key Features

  • TOML agent definitions
  • Unix composition via stdin/stdout
  • Multi-provider model support
  • Sub-agent delegation with depth limits
  • Token budgets and retry backoff
  • Sandboxed built-in tools plus MCP
  • Persistent markdown memory
  • Dry-run and JSON output modes

Capabilities

text generation
image generation
video generation
code generation
workflow automation
api access
audio generation
fine tuning
agent orchestration

Use Cases

  • Automated pull-request review
  • Overnight log triage
  • CI quality gates with cost ceilings
  • Local and air-gapped inference
  • Scripted content and data pipelines

Ideal For

Best For

  • Teams that want LLM steps inside existing cron, git-hook and CI automation rather than a separate orchestration platform
  • Developers who want agent definitions version-controlled as plain text alongside the code those agents act on
  • Non-interactive batch jobs where an agent should run, produce output on stdout and exit cleanly
  • Shops needing local-model inference through Ollama for code or prompts that cannot leave the machine
  • Go and Unix-comfortable engineers who prefer a single static binary to a Python dependency tree

Not Ideal For

  • Anyone wanting an interactive chat or IDE experience — Axe deliberately ships no REPL, GUI or session state, and Hacker News commenters specifically noted the absence of a session concept for tracking state across runs
  • Workloads touching credentials or sensitive SaaS accounts: on Hacker News the maintainer acknowledged prompt injection is unmitigated beyond running the tool in Docker, which does not protect connected services such as Google Calendar
  • Organisations needing vendor support, SLAs or security attestations — this is a single-maintainer project with no commercial entity behind it and 21 open issues and pull requests
  • Cost-sensitive teams without their own guardrails, since sub-agent fan-out multiplies token spend and commenters flagged cost control as unaddressed

Market Analysis

Open-sourceDeveloper-firstUnix-philosophy tooling

Pros

  • Single static binary with no daemon, runtime or Python dependency tree to maintain
  • Agent configs are plain TOML, so they diff, review and version exactly like code
  • Composes with existing Unix tooling instead of demanding a new scheduler or platform
  • Real guardrails shipped rather than promised: path sandboxing, private-IP blocking, depth limits and token budgets
  • Provider-agnostic across Anthropic, OpenAI, Bedrock and local Ollama models

Cons

  • Prompt injection is unsolved; on Hacker News the maintainer's mitigation was running in Docker, which he acknowledged does not protect connected services like Google Calendar
  • No session or state concept between runs beyond markdown memory files, which several Hacker News commenters wanted
  • Cost control for sub-agent fan-out is unaddressed — one commenter noted that fanning out ten agents can cost more than one large context window
  • The 12 MB binary drew criticism as large for its functionality; one commenter argued an equivalent Zig HTTP, TLS and LLM stack lands nearer 400 KB
  • Single maintainer, no commercial support, no security attestations, and Gemini was not supported at launch

Pricing

Open Source (Apache-2.0)

$0

  • Full functionality, no paid tier
  • Pre-built binaries for Linux, macOS and Windows
  • Install via go install github.com/jrswab/axe@latest
  • Docker image at ghcr.io/jrswab/axe
  • You pay your own LLM provider directly

Axe itself is free under Apache-2.0 with no paid tier, no hosted plan and no commercial entity behind it; the real cost is the LLM provider tokens each agent consumes, billed directly by Anthropic, OpenAI or AWS Bedrock, or zero if you point agents at a local Ollama model. Per-agent token budgets are the only built-in spend control, and Hacker News commenters flagged sub-agent fan-out as an unaddressed way to run up cost.

Security & Compliance

soc2
gdpr
hipaa
iso27001
sso
data residency

THE DAILY BRIEF

Enterprise AI insights for technology and business leaders, twice weekly.

beri.net

Subscribe at beri.net/subscribe for twice-weekly AI insights delivered to your inbox.

LinkedIn: linkedin.com/in/rberi  |  X: x.com/rajeshberi

© 2026 Rajesh Beri. All rights reserved.

Axe is a 12 MB Go binary that runs single-purpose AI agents defined in TOML files instead of behind a chat UI or a Python framework. It reads stdin and writes stdout, and is triggered from pipes, git hooks, cron or CI, so LLM steps compose like ordinary Unix commands.

Axe is an open-source command-line tool, written in Go and released under Apache-2.0, that runs single-purpose LLM agents as ordinary Unix programs rather than as a chatbot or a long-running framework. Each agent is a TOML file declaring a name, description, model, system prompt, optional skill and context files, working directory, allowed tools, sub-agents and allowed hosts, plus optional [memory], [[mcp_servers]], [params], [budget] and [retry] blocks. Because agents are plain text they can be committed to a repository and reviewed like any other configuration. The binary reads standard input and writes standard output, so agents compose through pipes — `git diff --cached | axe run pr-reviewer` is the canonical example — and are triggered from git hooks, cron or CI rather than by any scheduler Axe provides; the maintainer describes it as the executor, not the scheduler. It ships built-in tools for file operations sandboxed to the working directory, shell command execution, URL fetching and web search, and speaks MCP for external tools. Supported providers include Anthropic, OpenAI, Ollama for local models, OpenCode and AWS Bedrock. Guardrails include sub-agent nesting capped at depth five, a ceiling of 50 tool-call turns per conversation, token budgets that exit with code 4 when exceeded, exponential, linear or fixed backoff on transient provider errors, and blocking of private and reserved IP ranges regardless of the host allowlist. The repository was created in February 2026, has reached 832 stars and 29 forks, and shipped v1.10.0 in May 2026 alongside a published Docker image at ghcr.io.

Ideal Buyer

Platform and DevOps engineers who already automate with cron, git hooks and CI, and want to add an LLM step without adopting an agent framework or a hosted orchestration product.

Key Benefit

LLM agents become version-controlled TOML files that run and exit like any other Unix command, so they slot into existing pipelines instead of requiring new infrastructure.

At a Glance

Category
AI Agents & Orchestration
Pricing
Free
Target Market
Enterprise Developers, CTOs, Platform Engineers, DevOps Engineers
Deployment
Self-hosted, Open-source
Founded
2026

Key Features

  • TOML agent definitions

    Each agent is a plain-text TOML file you can commit, diff and code-review like any other configuration.

  • Unix composition via stdin/stdout

    Reads standard input and writes standard output, so agents chain through pipes into existing shell tooling.

  • Multi-provider model support

    Targets Anthropic, OpenAI, Ollama local models, OpenCode and AWS Bedrock without rewriting the agent definition.

  • Sub-agent delegation with depth limits

    Parent agents delegate isolated context to sub-agents, hard-capped at nesting depth five to bound runaway fan-out.

  • Token budgets and retry backoff

    Per-agent max_tokens budgets exit with code 4 when exceeded, and transient provider errors retry with exponential, linear or fixed backoff.

  • Sandboxed built-in tools plus MCP

    File operations are confined to the working directory, private IPs are always blocked, and MCP servers extend the tool set.

  • Persistent markdown memory

    Timestamped markdown logs carry context across separate runs without requiring a database or a daemon.

  • Dry-run and JSON output modes

    Dry-run resolves context without calling an LLM, and JSON output lets shell scripts parse results deterministically.

Capabilities

text generation
image generation
video generation
code generation
workflow automation
api access
audio generation
fine tuning
agent orchestration

Use Cases

  • Automated pull-request review

    A git hook pipes the staged diff into a reviewer agent that comments on the change before it ever reaches CI.

  • Overnight log triage

    Cron pipes an application error log into an analyzer agent nightly and forwards only the summarized anomalies to on-call.

  • CI quality gates with cost ceilings

    A build step runs an agent under a token budget and fails the pipeline on exit code 4 when spend is exceeded.

  • Local and air-gapped inference

    Pointing an agent at Ollama keeps prompts and proprietary source code on the developer's own machine, avoiding vendor API egress.

  • Scripted content and data pipelines

    JSON output mode lets shell scripts parse agent results and feed them into downstream deterministic tooling without glue services.

Ideal For

Best For

  • Teams that want LLM steps inside existing cron, git-hook and CI automation rather than a separate orchestration platform
  • Developers who want agent definitions version-controlled as plain text alongside the code those agents act on
  • Non-interactive batch jobs where an agent should run, produce output on stdout and exit cleanly
  • Shops needing local-model inference through Ollama for code or prompts that cannot leave the machine
  • Go and Unix-comfortable engineers who prefer a single static binary to a Python dependency tree

Not Ideal For

  • Anyone wanting an interactive chat or IDE experience — Axe deliberately ships no REPL, GUI or session state, and Hacker News commenters specifically noted the absence of a session concept for tracking state across runs
  • Workloads touching credentials or sensitive SaaS accounts: on Hacker News the maintainer acknowledged prompt injection is unmitigated beyond running the tool in Docker, which does not protect connected services such as Google Calendar
  • Organisations needing vendor support, SLAs or security attestations — this is a single-maintainer project with no commercial entity behind it and 21 open issues and pull requests
  • Cost-sensitive teams without their own guardrails, since sub-agent fan-out multiplies token spend and commenters flagged cost control as unaddressed

Integrations

SDK Available
SDK:Go

Deployment

On-Premise

Market Analysis

Open-sourceDeveloper-firstUnix-philosophy tooling

Pros

  • Single static binary with no daemon, runtime or Python dependency tree to maintain
  • Agent configs are plain TOML, so they diff, review and version exactly like code
  • Composes with existing Unix tooling instead of demanding a new scheduler or platform
  • Real guardrails shipped rather than promised: path sandboxing, private-IP blocking, depth limits and token budgets
  • Provider-agnostic across Anthropic, OpenAI, Bedrock and local Ollama models

Cons

  • Prompt injection is unsolved; on Hacker News the maintainer's mitigation was running in Docker, which he acknowledged does not protect connected services like Google Calendar
  • No session or state concept between runs beyond markdown memory files, which several Hacker News commenters wanted
  • Cost control for sub-agent fan-out is unaddressed — one commenter noted that fanning out ten agents can cost more than one large context window
  • The 12 MB binary drew criticism as large for its functionality; one commenter argued an equivalent Zig HTTP, TLS and LLM stack lands nearer 400 KB
  • Single maintainer, no commercial support, no security attestations, and Gemini was not supported at launch

Pricing

Open Source (Apache-2.0)

$0

  • Full functionality, no paid tier
  • Pre-built binaries for Linux, macOS and Windows
  • Install via go install github.com/jrswab/axe@latest
  • Docker image at ghcr.io/jrswab/axe
  • You pay your own LLM provider directly

Axe itself is free under Apache-2.0 with no paid tier, no hosted plan and no commercial entity behind it; the real cost is the LLM provider tokens each agent consumes, billed directly by Anthropic, OpenAI or AWS Bedrock, or zero if you point agents at a local Ollama model. Per-agent token budgets are the only built-in spend control, and Hacker News commenters flagged sub-agent fan-out as an unaddressed way to run up cost.

Security & Compliance

soc2
gdpr
hipaa
iso27001
sso
data residency

Connect

Newsletter

Stay Ahead of the Curve

Weekly enterprise AI insights for technology leaders. No spam, no vendor pitches—unsubscribe anytime.

Subscribe