Claude Code CLI and hook configuration¶

kyvvu claude setup¶

Interactive setup: configure API connection and register agent.

• --fail-mode: Allow failures (open) or deny PreToolUse on failure (closed).

• --api-url: Kyvvu API URL. Default: kyvvu auth login, else https://platform.kyvvu.com.

• --api-key: Kyvvu agent API key (Workspace → API Keys). Default: prompt. Prefer the KV_API_KEY variable: an option is visible in the process list and shell history.

• --owner: Email of the workspace member accountable for this agent (EU AI Act owner). Default: the API key owner's email, filled in by the platform.

• --agent-key: Agent key to register under. Default: claude-code--.

• --environment: development, qa, staging or production. Default: KV_ENVIRONMENT, else production.

kyvvu claude hooks install¶

Install Claude Code hooks for compliance monitoring.

• --project: Write to .claude/settings.json in cwd

kyvvu claude hooks remove¶

Remove Kyvvu's hooks from Claude Code settings.

• --project: Remove from .claude/settings.json in cwd

kyvvu claude set¶

Set one Claude integration option in the saved configuration.

kyvvu claude status¶

Show current kyvvu claude status.

kyvvu claude policies¶

Display cached policies as a table.

kyvvu claude refresh¶

Force policy refresh from the API.

Installed hooks¶

kyvvu claude hooks install merges the following entries into ~/.claude/settings.json, or .claude/settings.json with --project. The command path shown is illustrative; installation uses the script's absolute path.

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "",
        "hooks": [
          {
            "type": "command",
            "command": "/path/to/kyvvu-claude-hook",
            "timeout": 10
          }
        ]
      }
    ],
    "PostToolUse": [
      {
        "matcher": "",
        "hooks": [
          {
            "type": "command",
            "command": "/path/to/kyvvu-claude-hook",
            "timeout": 10
          }
        ]
      }
    ],
    "SessionStart": [
      {
        "matcher": "",
        "hooks": [
          {
            "type": "command",
            "command": "/path/to/kyvvu-claude-hook",
            "timeout": 30
          }
        ]
      }
    ],
    "SessionEnd": [
      {
        "matcher": "",
        "hooks": [
          {
            "type": "command",
            "command": "/path/to/kyvvu-claude-hook",
            "timeout": 30
          }
        ]
      }
    ],
    "SubagentStart": [
      {
        "matcher": "",
        "hooks": [
          {
            "type": "command",
            "command": "/path/to/kyvvu-claude-hook",
            "timeout": 10
          }
        ]
      }
    ],
    "SubagentStop": [
      {
        "matcher": "",
        "hooks": [
          {
            "type": "command",
            "command": "/path/to/kyvvu-claude-hook",
            "timeout": 10
          }
        ]
      }
    ]
  }
}

Saved configuration¶

Settings live in ~/.kyvvu/integrations/claude-code/config.json. The file has user-only read/write permissions (0600), inside a 0700 directory.