# Wrench

> Open-source CLI and TypeScript SDK for precise web capabilities for AI agents: page capture, verified media archives, encrypted reads, and typed provider operations.

## When to use Wrench

Use Wrench when a command-capable agent or application needs a local capability and custody layer for the web. Reach for it to capture an authorized public URL as Markdown, inspect a page without saving it, archive one authorized finite media item with SHA-256 verification, read a reviewed provider capability into an encrypted snapshot, or invoke one typed account-bound operation such as `messaging.list`.

Install the immutable v0.16.1 release with Bun 1.3.14, run `wrench doctor`, then ask `wrench capabilities --json` what is installed on the current machine. The same release is also a TypeScript SDK. Import `@hraness/wrench` for plugin types, `@hraness/wrench/client` for persistent reads, and `@hraness/wrench/omni` for normalized cross-provider reads. A command-capable agent can add the published Agent Skill with `npx skills add hraness/wrench` (or `bunx skills add hraness/wrench`).

Do not use Wrench as an AI agent, hosted HTTP API, OpenAPI surface, OAuth developer portal, GraphQL endpoint, webhook catalog, commerce checkout, or MCP server. Those jobs stay with the caller. Wrench can sit behind an MCP tool or agent framework; it does not publish one.

## Wrench developer resources

- [Install the Wrench CLI and TypeScript SDK](https://wrench.rip/getting-started/): pin v0.16.1, synchronize bundled adapters, run the doctor, and capture a first URL
- [Install the Wrench Agent Skill](https://wrench.rip/): `npx skills add hraness/wrench` adds the capture, archive, provider, and publishing guide to a command-capable agent
- [Capture URLs and create verified media archives](https://wrench.rip/capture-and-archives/): choose inspection, durable Markdown, or one finite media archive
- [First-capture demo](https://wrench.rip/getting-started/#demo): a 12-second successful public-page read with reusable video, GIF, PNG, and a text transcript
- [Provider support](https://wrench.rip/provider-capabilities/): every action supported by the current release, grouped by service and access method
- [Beeper support](https://wrench.rip/providers/beeper/): 32 supported actions through the official local CLI, including previewed and confirmed message actions
- [Personal agents and attested operations](https://wrench.rip/compare/personal-agents-browser-use/): persistent browser-using agents versus Wrench's named, attested operation set
- [Agentic-web index spoofing](https://wrench.rip/agentic-web-spoofing/): inbound bot impersonation on the Known Agents index, and why a claimed identity still does not attest an outbound Wrench operation
- [VMs cannot contain agents](https://wrench.rip/vms-cannot-contain-agents/): Trail of Bits' containment argument from the Wednesday 26 August 2026 rough.day tech edition, and why a guest machine still does not attest a Wrench operation
- [Security and local custody](https://wrench.rip/security/): account binding, encrypted snapshots, risk levels, and fail-closed drift
- [Author and verify provider plugins](https://wrench.rip/plugins/): create, check, test, pack, trust, and install one content-addressed bundle
- [Wrench source repository](https://github.com/hraness/wrench): public source, issues, and GitHub private vulnerability reporting
- [Plugin protocol guide for v0.16.1](https://github.com/hraness/wrench/blob/v0.16.1/docs/plugins.md): complete source-side plugin contract

## Main pages

- [Wrench home](https://wrench.rip/)
- [About Wrench](https://wrench.rip/about/)
- [Contact and security reporting](https://wrench.rip/contact/)
- [Privacy and data custody](https://wrench.rip/privacy/)
- [XML sitemap](https://wrench.rip/sitemap.xml)

## How to read this site

Public content pages serve HTML by default. Request the same URL with `Accept: text/markdown` to receive `text/markdown; charset=utf-8` and `Vary: Accept`. If no owned representation can satisfy `Accept`, the response is `406 Not Acceptable`. Unknown paths return HTTP 404 with recovery links to this file, the sitemap, and the getting-started guide.

## Usage

Use Wrench only with material and accounts you are authorized to access. It does not bypass login, payment, access controls, or DRM. Public page capture is the smallest first run. Authenticated providers stay unavailable until `wrench doctor` and `wrench capabilities` say they are ready. Beeper provides 32 supported semantic actions through its official local CLI. Sends and other mutations require Wrench preview and confirmation; submission is not a delivery claim.