> For the complete documentation index, see [llms.txt](https://docs.publicai.io/publicai-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.publicai.io/publicai-documentation/publicai-trajector-cli.md).

# 🛰️ PublicAI Trajector CLI

## Trajector CLI

Trajector is an open-source command-line tool. With your explicit per-project consent it routes that project's Claude Code API traffic through a proxy on your own machine, records the raw request and response, masks secrets locally, and uploads only the redacted result.

Nothing is captured until you opt a project in, and every project you have not opted in is structurally incapable of being captured — not by policy, but because the code path does not exist for it.

{% hint style="info" %}
**Status: beta.** Releases before `1.0.0` are published as pre-releases. macOS and Linux are supported; Windows is in beta.
{% endhint %}

### What it does

`trajector enable`, run inside a project, writes project-local Claude Code settings that point that project's API traffic at a local reverse proxy bound to `127.0.0.1:41100`. The proxy forwards every request verbatim to the configured upstream and records it on the side.

* **Forwarding is sacred.** Any failure on the recording side — disk full, malformed stream, internal error — never interrupts forwarding. Streaming responses pass through unbuffered.
* **Recording is unobservable.** What the proxy sends upstream does not depend on whether the exchange is being recorded.
* **Consent is the routing key.** A per-project token decides what may be recorded. Requests without a valid token are forwarded and never recorded.
* **Credentials never touch disk.** `Authorization` and `x-api-key` are not written to any file, in any state.
* **Consent is revocable.** `disable`, `logout`, and `uninstall` each undo a different amount, immediately.

The proxy starts on demand, exits when idle, and is never a permanent daemon.

### The shape of a session

```
claude  ──►  127.0.0.1:41100  ──►  api.anthropic.com
                    │                (or your own relay)
                    └──►  spool  ──►  redact  ──►  upload
```

Recorded calls wait in a local spool with a bounded disk quota. Secrets are masked on your machine, and only redacted batches are uploaded. An upload is only considered done once the service acknowledges it by batch id.

### Where to go next

| If you want to                          | Read                          |
| --------------------------------------- | ----------------------------- |
| Install it                              | Installation                  |
| Get to a first recorded session         | Quickstart                    |
| Look up a flag or an exit code          | Command reference             |
| Understand what `status` is telling you | Reading `status` and `doctor` |
| Know exactly what is collected          | Data and privacy              |
| Fix something                           | Troubleshooting               |

The client is fully open source at [PublicAI01/trajector-cli](https://github.com/PublicAI01/trajector-cli); every statement in these pages can be checked against the code.