config

config is a command for coding agents from px0-ai/px0. It costs 0 tokens per session (1,182 once invoked), scanned A, original, MIT.

A command-line tool for reading and changing a store's config.toml file, which contains application settings. It checks each setting against a defined schema before saving it.

In plain words
What is it for?
Use it to list settings, read or update individual values, remove settings, open the config for editing, and find related paths or credentials.
Why use it?
It prevents misspelled setting names and invalid values from being written to the configuration.

Command

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/px0-ai/px0/config
Clone the repo
git clone --depth 1 https://github.com/px0-ai/px0

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for config

README.md
[![agentmods](https://agentmods.dev/badge/commands/px0-ai/px0/config.svg)](https://agentmods.dev/commands/px0-ai/px0/config)
Your own site
<a href="https://agentmods.dev/commands/px0-ai/px0/config"><img src="https://agentmods.dev/badge/commands/px0-ai/px0/config.svg" alt="Measured on agentmods" height="20"></a>
Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,182 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.01182
Opus 5 $0.00000 $0.00591
Sonnet 5 $0.00000 $0.00236
Haiku 4.5 $0.00000 $0.00118

Measured 4d ago against content hash 10a0b9d6b569, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

config scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

docs/commands/config.md · 189 lines

How it starts

The opening of the file, as written. The whole thing — 189 lines — stays where its author put it; the contents beside it link to each section on GitHub.

px0 config

Read and write config.toml at the store root. Every key is validated against a schema before it is saved, so a typo or a bad value is refused rather than written.

Implemented by px0/config.py. The full key list is in Configuration keys.

px0 config list [--json]
px0 config get <KEY> [--json]
px0 config set <KEY> <VALUE>
px0 config unset <key>
px0 config edit
px0 config path
px0 config model
px0 config composio [key]

px0 config list

Every key with its current value, its default, its type, and a one-line description of what it does.

  • Arguments: none.
  • A value that differs from its default is accented and shows the default beside it, so what you have changed is visible at a glance.

--json

Print the entries as JSON, and nothing else.

px0 config list
px0 config list --json | jq -r '.[].key'

px0 config get

Print one key's current value.

KEY (required)

  • Input: a dotted key, for example brain.path. Unknown keys are refused with a pointer to px0 config list.

--json

Print the value as JSON.

px0 config get brain.path

px0 config set

Validate and save one key.

KEY (required)

  • Input: a dotted key.

VALUE (required)

  • Input: checked against the key's type and allowed values before saving.
Type How to write it
string as-is; quote it if it contains spaces
integer digits — a non-integer is refused
boolean true or false — nothing else is accepted
list comma-separated: "*.excalidraw.md,Templates/*"
px0 config set brain.path ~/Documents/MyVault
px0 config set retrieval.k_default 8
px0 config set logs.retention_days 30
px0 config set brain.ignore "*.excalidraw.md,Templates/*"

Setting brain.path also reports what px0 found there — how many Markdown files, how many were skipped as tool state, whether it looks like an Obsidian vault, and whether anything will be held back by the private folder. See pointing the brain at a vault.

Read the full file on GitHub · 189 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 189 lines · 0 tokens per session scan A 10a0b9d6b569

Subscribe to this mod's changes

config is a command published in the GitHub repository px0-ai/px0 (241 stars, last pushed 7d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,182 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.