Install the Agent

The Agentic Runtime agent is a single binary for macOS, Linux and Windows, with no dependencies. Each developer installs it once; the device registers itself the first time the agent runs.


1. Download the Binary

Bash
curl -fsSL https://get.bytehide.com/agentic | sh

This installs the bytehide-agentic command.


Bash
bytehide-agentic login

The command opens your browser to sign in with ByteHide. Approving it binds this machine to your organization and hands your organization's project token to the CLI over a local loopback address (127.0.0.1), so it never leaves your machine. The CLI saves it to ~/.bytehide/config.json.


3. Install the Daemon

Bash
bytehide-agentic install

The agent installs itself as a background service: a LaunchAgent on macOS (no sudo needed), a systemd service on Linux, or a Task Scheduler task on Windows. It survives reboots.


You're Protected

Coding agents such as claude, codex, aider or gemini are wrapped automatically through shell aliases, with no environment variables or flags. Open a new terminal and use them as usual.

The device appears in Agentic runtime → Devices within a minute of the agent starting.

ByteHide Agentic Runtime Devices screen before any device has registered, with the install instructions and project token buttonsClick to expand


Rolling Out to a Team

Distribute the install commands to your developers. Every device registers with your organization on its own; there is no per-device configuration in the console.

Your organization's project token is in Agentic runtime → Settings. Devices register against it, and resetting it locks out every installed agent until they receive the new value. See Settings.


Next Steps

Policies

Set what the agent observes and blocks

Devices & Members

See every device in your fleet

Previous
Overview