# Actualis

> A local, read-only command-line tool that reads the session transcripts your
> coding agents already write — Claude Code and Codex — and reports credential
> exposure, shell-command activity, agent binary attestation, and cost. It makes
> no network calls, never writes to your transcripts, and has no runtime
> dependencies.

Licensed AGPL-3.0. Free, and the free feature set is complete rather than a
trial: nothing in it moves behind a paywall.

## What it answers

- Which credentials have been in an agent's context, ranked for rotation, identified by `sha256[:8]` fingerprint and never by value.
- What shell commands agents actually ran, which were flagged, and which were refused — by a human or by policy.
- Whether the installed agent binaries are validly signed by their expected publisher.
- What the recorded token usage would cost at provider list prices, by project, branch, ticket and model.

## What it deliberately does not do

- No network calls, no telemetry, no account.
- It observes; it does not enforce, rotate or block.
- Pattern matching has a ceiling, and a clean report means "nothing matched", not "nothing is there".
- Two agents are supported. Others are not partially supported without saying so.

## Main

- [https://actualis.app/](https://actualis.app/): What Actualis is: a local, read-only CLI that reads coding-agent logs and reports exposure, activity and cost.
- [https://actualis.app/product/](https://actualis.app/product/): The complete free feature set, and the explicit promise that none of it moves behind a paywall.
- [https://actualis.app/pro/](https://actualis.app/pro/): The paid tier, in development: fleet attestation, credential exposure across developers, retained history, policy you can prove held.

## Documentation

- [https://actualis.app/docs/](https://actualis.app/docs/): Documentation index.
- [https://actualis.app/docs/install/](https://actualis.app/docs/install/): Install from PyPI, with uv, or from source. Python 3.9+, no runtime dependencies.
- [https://actualis.app/docs/quickstart/](https://actualis.app/docs/quickstart/): Your first report, and how to read each section of it.
- [https://actualis.app/docs/commands/](https://actualis.app/docs/commands/): Every command-line flag, what it does, and what it costs.
- [https://actualis.app/docs/detections/](https://actualis.app/docs/detections/): What Actualis detects: credential types, shell-audit categories, and coach findings AF001-AF011.
- [https://actualis.app/docs/tray/](https://actualis.app/docs/tray/): The macOS menu bar app: what it shows and how it is built.
- [https://actualis.app/docs/integrations/](https://actualis.app/docs/integrations/): The MCP server and the --json contract, so an agent or a script can query the same data.
- [https://actualis.app/docs/verify/](https://actualis.app/docs/verify/): How to verify the privacy claims yourself rather than trusting them.
- [https://actualis.app/docs/limits/](https://actualis.app/docs/limits/): What Actualis cannot tell you, stated plainly: the boundaries of the data and the method.
- [https://actualis.app/docs/troubleshooting/](https://actualis.app/docs/troubleshooting/): Common problems and what causes them.

## Project

- [Source on GitHub](https://github.com/digital-foundry/actualis): single-file Python CLI, plus a Go menu bar app.
- [Package on PyPI](https://pypi.org/project/actualis/): `pip install actualis`.

- [https://actualis.app/support/](https://actualis.app/support/): How the project is funded and supported.
- [https://actualis.app/privacy/](https://actualis.app/privacy/): Privacy policy. The tool makes no network calls; this covers the website.
- [https://actualis.app/terms/](https://actualis.app/terms/): Terms of use.