
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@kyma-api/agent
Advanced tools
Kyma coding agent — one account, many models. AI-powered coding assistant backed by Kyma API.
Terminal-first coding agent powered by Kyma API.
Install one package, sign in once, and use many models through one balance.
npm i -g @kyma-api/agent
On Windows, use npm install -g @kyma-api/agent in PowerShell or Windows Terminal. Do not use curl ... | bash.
This package installs:
kyma for direct coding sessionskyma-ter for the local multi-agent workspaceThe package contains two related tools:
kyma is the coding agent CLIkyma-ter is the browser-based local workspace for running many kyma and shell sessions in parallelkyma-ter is distributed through this same package. The install step downloads the local kyma-ter binary automatically.
kyma # Interactive coding agent
kyma "explain this repo" # Start with a prompt
kyma -p "fix the bug" # One-shot mode (process and exit)
kyma -c # Continue previous session
Launch the workspace with:
kyma-ter
On Windows:
kyma runs natively in PowerShell or Windows Terminalkyma-ter is available, with shell panes optimized for WSL2kyma
# 1. Run /connect to connect your Kyma account
# 2. Run /init in a repo to scaffold KYMA.md
# 3. Start coding
Or start with kyma-ter if you want a local multi-pane workspace first.
Browse and switch models with /models. Filter by keyword:
/models coding # models tagged for code
/models vision # vision-capable models
/models cheap # budget-tier models
Or set a per-project default by pinning model: in your KYMA.md frontmatter — see Project Config below.
| Command | Description |
|---|---|
/connect | Sign in to your Kyma account |
/disconnect | Sign out |
/models | Browse and switch models |
/init | Scaffold KYMA.md for this project |
/mcp | Manage Model Context Protocol servers |
/status | Account, credits, session, and diagnostics (merged /doctor, /balance, /usage) |
/billing | Open billing page |
/dashboard | Open Kyma dashboard |
/upgrade | View tiers and upgrade |
/feedback | Report issues or give feedback |
Create a KYMA.md at your project root to set per-project defaults. /init scaffolds one for you:
---
model: qwen-3-coder
thinking: high
---
# My Project
## Conventions
- All DB access goes through `src/db.ts`
- Run tests before committing
The frontmatter pins model + thinking level at session start. The markdown body is prepended to the system prompt on every turn, so edits apply without restarting.
Kyma loads context from three layers in precedence order (later layers override):
~/.kyma/agent/KYMA.md — user global./KYMA.md (or ./CLAUDE.md or ./AGENTS.md as fallback) — project shared, committed./KYMA.local.md — personal overrides, gitignoredKyma speaks Model Context Protocol over stdio. Drop a config at ~/.kyma/agent/mcp.json (user) or ./.kyma/mcp.json (project):
{
"mcpServers": {
"filesystem": {
"command": "npx",
"args": ["-y", "@modelcontextprotocol/server-filesystem", "/Users/me/projects"],
"enabled": true
}
}
}
Manage servers inside kyma:
/mcp # list configured servers and their tools
/mcp test filesystem # spawn + handshake + list tools (useful for debugging)
/mcp enable filesystem # flip enabled in config
/mcp disable filesystem
Tools are namespaced as mcp__<server>__<tool> in the Pi tool registry.
| Variable | Description |
|---|---|
KYMA_API_KEY | API key (alternative to /login) |
KYMA_BASE_URL | Custom API base URL |
kyma is intended to run natively on Windowskyma-ter on Windows currently works best as a beta experience with WSL2 installed/status inside kyma to verify local setup, kyma-ter, WSL detection, and MCP healthAll models are pay-per-token through your Kyma account. Free credits on signup. See kymaapi.com for pricing details.
MIT
FAQs
Kyma coding agent — one account, many models. AI-powered coding assistant backed by Kyma API.
We found that @kyma-api/agent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.