Installation

Install the authright CLI on your machine, update it, and uninstall it.

Prerequisites

AuthRight Harness is a Node.js CLI. You need Node.js 20.19.0 or newer.

node --version

If that prints v20.19 or higher, you're set. If not, install a newer Node from nodejs.org or your version manager (nvm, fnm, asdf, volta).

Day-to-day work also uses an AI coding tool. AuthRight ships delivery for Cursor, Codex, and Claude Code (see Agents).

The CLI runs on Node.js. The application you analyze does not have to: Java and Node.js / TypeScript have the strongest coverage today; Python and Go are supported and being strengthened. More languages and stacks will follow. See Concepts.

Package managers

Install the CLI globally. Choosing a global installer is independent of how your application repo manages dependencies.

npm (primary)

npm install -g @authright/cli@latest

pnpm

pnpm add -g @authright/cli@latest

If pnpm reports that its global bin directory is missing, run pnpm setup, restart your shell, then retry.

yarn (Classic / 1.x)

yarn global add @authright/cli@latest

Yarn Berry removed global add. On those versions, use npm, pnpm, or bun for the global CLI instead.

bun

bun add -g @authright/cli@latest

Bun can install the package, but the CLI still runs on Node.js—keep Node 20+ on your PATH.

Verify installation

authright --version

If the command is not found, the package manager's global bin directory is missing from this shell's PATH. Add that directory (or fix your Node version manager shims), then verify again. Do not treat cloning this repository as the install path.

Updating

Upgrade the global package, then refresh generated agent files in each project:

npm install -g @authright/cli@latest   # or pnpm/yarn/bun equivalent
cd your-project
authright update

authright update regenerates managed Cursor/Codex skills and commands for the tools configured in that project.

Uninstalling

There is no authright uninstall command. Removing AuthRight Harness is manual and does not rewrite your application source.

1. Remove the global package:

npm uninstall -g @authright/cli   # or: pnpm rm -g / yarn global remove / bun rm -g

2. Optional — remove project artifacts. Delete .authright/ if you no longer want AuthRight Harness data for that repo. Keep it in git if you still need the decision history.

3. Optional — remove generated agent files. Delete Cursor auth-* commands / authright-* skills and Codex authright-* skills for tools you configured. See Agents.

Next steps

Initialize AuthRight in your project for the AI coding agent you are using. Most people work in one agent at a time.

Interactive: omit --tools. The CLI prompts you to select Cursor, Codex, or Claude Code. Detected host directories are pre-selected on first run.

cd your-project
authright init

In CI or any non-interactive shell, omitting --tools installs hosts detected from the project (for example .cursor/). Pass --tools none when you only want .authright/ with no agent files.

Specify the agent: pass --tools when you already know which one you are in.

cd your-project
authright init --tools cursor    # Cursor
# authright init --tools claude  # Claude Code
# authright init --tools codex   # Codex

Continue with Getting started.