Every rebasely command and flag. This page is generated from the CLI's own help, so it matches what rebasely help prints.
Install
curl-fsSL https://rebasely.com/install | sh
The CLI is one file and needs Node.js 22.18 or later. duragit is an alias of rebasely. Every command takes --json for scripts, CI and agents. Exit codes: 0 when it worked, 1 when a check failed, 2 for a usage error or outside a git repository.
private at once with an owner's token; public (or a token that may not) asks an owner to approve with a passkey on <host>/approve and waits: [--no-wait]
add the Rebasely agent skill to this repo (.claude/skills/rebasely/): [--dir path] [--force] [--print]
rebasely agent create
ask an owner to approve a new agent identity: --org O--name N--scopes a,b --repos r1,r2[:pattern...] [--role writer|reader] [--description D] [--expires days] [--caps key=value,...] [--no-wait]; its token comes back once, into the system keychain [--print-token]
rebasely agent token <org>/<name>
print an agent's token from the keychain (REBASELY_TOKEN=$(...))
rebasely approval wait <id>
follow an approval request (started by an MCP tool, say) to its answer
sign git in with an access token you approve in the browser: [--org <slug>]... [--scopes <list>] [--expires <days>] [--yes] [--allow-plaintext-store]; --all-orgs instead of --org: one token for every organization you belong to, including ones you join later (90 days unless --expires is shorter, 365 at most)
rebasely auth status
the stored token's account, organizations, scopes and expiry
rebasely auth logout
revoke the stored token and remove it from git's credential helper
edit a live branch in a real directory, synced as you save; works anywhere, and inside a clone <org>/<repo> may be left out. <path> defaults to ./<repo>-<branch>: [--host url] [--create] [--adopt] [--burst ask|send|hold] [--daemon] [--no-link] (--repo org/repo also names the repository)
rebasely unmount <branch|path> stop syncing and remove the mount: [--discard] [--repo org/repo]
Actions and sandbox commands (runs, dispatch, sandbox) talk to the origin remote's server and repo, or to --host <url|staging|production> and --repo <org>/<repo>. The token comes from REBASELY_TOKEN (or DURAGIT_TOKEN), else from git's credential helper for that host; it is never printed. auth talks to rebasely.com, or to --env staging or --host <url>; it never prints a token. Git over SSH was retired in 2026-11: use HTTPS. The managed home (mounts) is $REBASELY_HOME, else ~/.rebasely, or ~/.duragit when that is the one that exists. Every REBASELY_ variable may also be given by its older DURAGIT_ name.