
Security News
Insecure Agents Podcast: How to Keep AI Agents From Bypassing Security Controls
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.
@toa.io/cli
Advanced tools
--envRun composition.
toa compose [paths]paths Glob patterns to look for components.--kill Shutdown composition after it's started--dock Run in Docker using current .env.--context Path to the Context root (default .).--bindnings Override bindings (obsolete).
Note that your
localhostit is accessible from a container ashost.docker.internal.
Call endpoint.
toa call <endpont> [request]endpoint endpoint to call.request Request object.$ toa call dummies.dummy.create "{ input: { name: 'foo' } }"
Export environment to a .env file.
toa env [environment]environment deployment environment name (default local).--path path to a Context (default .)--as output file path (default .env)--interactive prompt for secret values
Credentials specified in the output file are preserved.
It is recommended to add
.env*to.gitignore.
Replay samples. Reports in TAP format.
toa replay [paths...]paths Path(s) to Component(s) or a Context (default .).--component <id> Replay samples for a specified component id.--integration Replay integration tests only.--autonomous Replay autonomous tests only.--operation <name> Replay samples for specified operation.--title <regexp> Regexp to match sample titles.--dock Run in Docker. Applicable only for component samples.
$ toa replay
$ toa replay ./path/to/component
$ toa replay ./components/a ./components/b --dock
$ toa replay ./components/*
$ toa replay ./path/to/context
$ toa replay --title "should add numbers"
If the path is a Context root (containing context.toa.yaml file), samples for components within
the Context will be
found and replayed sequentially.
toa export manifest--path path to component (default .)
--error print errors only
Some commands use current
kubectlanddockercontext.
Build Docker images.
toa build--path path to a Context (default .)
Deploy a Context.
toa deploy [environment]environment deployment environment name (default default).--path path to a Context (default .)--namespace Kubernetes namespace to apply the Helm chat to--wait wait until all
Pods [are ready](https://helm.sh/docs/intro/using_helm/#helpful-options-for-installupgraderollback)--dry do not apply the Helm chart
Deploy a generic Kubernetes secret with the prefix toa-.
toa conceal <secret> <key-values...>secret Secret name.key-values List of keys and values of the secret as key=value.--namespace Kubernetes namespace where the secret should be deployed.--interactive prompt for secret values--environment environment name for interactive mode--path path to a context for interactive mode
If a secret already exists, then given
key-valueswill be added to it.
$ toa conceal bindings-amqp-default username=developer password=secret
Outputs keys and values of a secret.
toa reveal <secret>
Run interactive shell inside a disposable pod inside a Kubernetes cluster.
toa shell [image]
image Docker image to Run (default alpine).$ toa shell mongo
$ toa shell -- ping 1.1 # extra arguments can be passed
Generate a secret PASETO key.
toa key
--public boolean generate a public/private key pair.FAQs
Toa CLI
The npm package @toa.io/cli receives a total of 926 weekly downloads. As such, @toa.io/cli popularity was classified as not popular.
We found that @toa.io/cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.

Security News
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.