⚡ AUTONOMOUS CODING AGENT & REVERSE PROXY v2.5

Autonomous Coding.
Zero Master Key Leak.

LEGECY CLI runs frontier models directly in your terminal. All tokens are metered on our secure cloud proxy. 100% tamper-proof credit protection even if the binary is decompiled.

terminal CLI Demo ↓
verified_user
ZERO MASTER LEAK
Reverse Proxy Enforced
bolt
1-CLICK LOGIN
Browser OAuth Sync
card_giftcard
SIGNUP BONUS
100 Free Credits
TERMINAL RUNTIME ENVIRONMENT

CLI Interface & Live Autonomous Flow

Install in seconds. Authenticate with a single keystroke. The agent executes refactors, runs tests, and tracks token consumption in real-time.

legecy-cli — bash — 140x42
Proxy Connected Model: Claude 3.5 Sonnet Credits: 98.0 Cr
# Welcome to LEGECY CLI Terminal Agent v2.5.0 [Node.js Cloud Gateway]
user@workstation:~/my-project$ legecy login
🔑 [CLI AUTH] Initiating 1-Click Browser Handshake...
Listening on temporary callback: http://127.0.0.1:4567/callback
Opening default browser: https://legecycli.onrender.com/cli-auth.html?port=4567
✓ [SUCCESS] Session Approved by developer@legecycli.dev
Credentials saved securely: ~/.legecy/credentials.json (Token: cp_live_••••••••)
user@workstation:~/my-project$ legecy "Refactor authentication layer and connect to secure reverse proxy"
🚀 AUTONOMOUS AGENT EXECUTION Stream: Active (240 tok/s)
🔍 Analyzing codebase: scanned 24 files across src/auth and src/gateway
⚡ Generating diff: replaced local master API keys with tamper-proof proxy bearer tokens
📝 Files updated:
+ src/proxy-client.ts (Created zero-trust proxy connector)
~ src/auth/session.ts (Replaced direct Anthropic endpoint with /v1/chat/completions)
- .env.local (Removed leaked master upstream API keys)
Tokens consumed: 1,240 prompt + 480 completion Credit deduction: −2.0 Cr (Server balance: 98.0 Cr) Status: [DONE]
legecy-agent>
01

Full TUI / Command Mode

Run full interactive terminal user interface or one-shot command execution for CI/CD and scripts.

02

Zero Setup Overhead

No need for separate Anthropic or OpenAI accounts. Your LEGECY CLI token handles all model routing automatically.

03

Anti-Decompile Safety

All token checks and metering execute strictly on the cloud server. Decompiled binaries cannot spoof credit balance.

FRONTIER MODEL ROUTER

Frontier Intelligence, Calibrated for Code

Switch between top-tier coding models on the fly directly in your terminal. All models run on a single unified credit balance.

Recommended 200K ctx

Claude 3.5 Sonnet

The gold standard for multi-file refactoring, deep codebase comprehension, and test debugging.

Token Cost ~2.0 Cr / 1k
Fast Speed 128K ctx

GPT-4o Omniverse

Ultra-rapid response times for interactive coding, regex synthesis, and rapid prototype generation.

Token Cost ~1.8 Cr / 1k
Ultra Value 64K ctx

DeepSeek Coder V3

High-efficiency open weights leader. Exceptional value for high-volume automated test generation.

Token Cost ~1.0 Cr / 1k
Mega Context 2M ctx

Gemini 1.5 Pro

Two-million token window. Ingest entire legacy codebases and monorepos in a single prompt.

Token Cost ~1.5 Cr / 1k
View All Supported Models & Benchmarks arrow_forward
PRE-BUILT AUTONOMOUS PIPELINES

Autonomous Agent Workflows

Turn complex engineering tasks into one-line CLI execution. From full architecture refactoring to self-healing test suites.

auto_fix_high

Multi-File Refactor

Scans AST trees across 50+ files simultaneously and extracts reusable modules with zero breaks.

legecy "refactor auth"
bug_report

TDD Test & Auto-Heal

Executes tests in loop, parses stderr logs, and modifies implementation code until all tests pass.

legecy --fix-tests
shield

Cloud Proxy Migration

Removes plain master API keys from local .env files and connects to your isolated reverse proxy.

legecy "secure keys"
rocket_launch

CI/CD PR Reviewer

Runs headlessly inside GitHub Actions on every pull request, auditing code quality and suggesting diffs.

npx legecy --ci --pr
Explore All Autonomous Workflows & Recipes arrow_forward
REVERSE PROXY ENDPOINTS

OpenAI-Compatible Proxy Gateway API

Drop-in replacement for OpenAI endpoints. Zero configuration changes required in your applications.

POST /v1/chat/completions

Sub-15ms Reverse Proxy Routing

Pass your temporary user session bearer token. Our proxy verifies credit balance, logs metered token usage, and streams responses with zero master API keys exposed.

Header: Authorization: Bearer cp_live_••••••••
Compatible with OpenAI Python & Node.js SDKs
Real-time SSE token streaming support
# Send authenticated request to reverse proxy
curl -X POST https://legecycli.onrender.com/v1/chat/completions \
-H "Authorization: Bearer cp_live_••••••"
-H "Content-Type: application/json"
-d '{
"model": "claude-3.5-sonnet",
"messages": [{"role": "user", "content": "Hello agent!"}],
"stream": true
}'
Read Complete API Documentation & Specs arrow_forward
DOCUMENTATION & ARCHITECTURE

Developer Guides & Quickstart Docs

Everything you need to understand the sovereign CLI architecture, token deduction logic, and credential security.

Guide 01

CLI Installation & Loopback Login

Learn how the 1-click browser authentication handshake stores credentials in ~/.legecy/credentials.json.

Full Installation Guide arrow_forward
Guide 02

Cloud Credit Accounting & Metering

Detailed breakdown of how prompt tokens and completion tokens are measured and billed per thousand tokens.

Read Metering Specs arrow_forward
Guide 03

Anti-Tamper & Binary Hardening

Explanation of why server-side HMAC validation makes it impossible to bypass token credits even if patched.

Read Security Whitepaper arrow_forward
Read Complete Documentation & Guides arrow_forward
SECURITY & PRIVACY GUARANTEE

Zero Data Leak. Total Sovereignty.

Your code is your intellectual property. We enforce strict non-retention and zero-training policies on all reverse proxy traffic.

key_off

Zero Master Key Leak

Upstream provider keys never touch developer workstations, avoiding catastrophic API leaks in git repos.

memory

Zero Code Training

Requests routed through our enterprise endpoints are never used by upstream providers to train foundation models.

lock_clock

Ephemerality First

Prompt tokens and file diffs are buffered in volatile memory only during SSE stream generation and immediately discarded.

policy

GDPR & SOC2 Ready

Full compliance with international privacy directives. Export your audit logs and token transaction history anytime.

Read Privacy Policy & Security Protocol arrow_forward
ENTERPRISE ARCHITECTURE

Uncompromising Power & Zero-Leak Security

Built for teams and individual engineers who demand autonomous CLI power without risking multi-thousand dollar API key leaks.

shield

Zero-Trust Cloud Proxy

Upstream master provider keys (Anthropic, OpenAI, DeepSeek) remain strictly on our isolated Node.js gateway. The local CLI never touches them.

Tamper-proof protection 100%
psychology

Frontier Multi-Model Hub

Switch seamlessly between Claude 3.5 Sonnet, GPT-4o, and DeepSeek-V3 using a single unified balance. No individual provider subscriptions required.

Dynamic Failover < 50ms
verified

Tamper-Proof Credit Vault

Even if the CLI binary is decompiled or modified in Ghidra/IDA, credit balances and rate limits are enforced on the server. Zero credit forging.

Server Enforced HMAC-SHA256
terminal

Interactive CLI & TUI

Inspect file trees, review staged git diffs, run test suites, and execute multi-file refactoring commands autonomously right inside your terminal.

TUI & Headless Cross-Platform
key

1-Click CLI OAuth Sync

Type legecy login. Your default browser opens, approves the session, and writes credentials securely with zero copy-pasting.

Loopback Auth RFC 8252
account_balance_wallet

Transparent Credit Pricing

Every token consumed is metered precisely to the fraction of a cent. Top up credit packs from $5 with no locked monthly minimums.

Pay Per Token Starting at $5
100% Master Key Security
120k+ Autonomous Tasks
< 15ms Gateway Proxy Overhead
99.98% Uptime SLA
WHY ENGINEERS CHOOSE LEGECY CLI

Standard CLI vs LEGECY CLI Gateway

Capability Direct API Keys / LEGECY CLI LEGECY CLI Gateway
security Master Key Protection ❌ Stored plaintext on workstation (.env) ✅ 100% Server Isolated. Zero Local Keys.
psychology Frontier Model Access Requires 3+ separate corporate accounts ($60+/mo) Unified single credit vault for all models
bolt Credit Metering & Tampering Client-side checks (Bypassed if binary is patched) Server HMAC-SHA256 Token Metering
sync_alt 1-Click Browser Login Manual copy-paste of raw API keys Automatic zero-config loopback OAuth handshake
terminal Autonomous Multi-File Refactors Basic code snippet generation Full terminal agent with test running & diff review
TRANSPARENT CREDIT BILLING

Simple, Pay-As-You-Code Credit Packs

No forced monthly recurring subscriptions. Top up your token balance anytime. All models included.

Free Starter

100 Credits Free

Instant credits granted on first signup. Full CLI access.

  • check Claude 3.5 Sonnet & GPT-4o access
  • check Interactive TUI & Command Mode
  • check 1-Click Browser OAuth sync
  • check Standard cloud reverse proxy

Pro Engineer

Most Popular
$20 / 250 Credits

For engineers using the CLI agent for daily refactoring and shipping.

  • check ~3.8M Frontier Tokens
  • check Priority proxy routing queue (<10ms)
  • check Multi-file autonomous test execution
  • check Zero rate-limit throttling

Team & Studio

$50 / 700 Credits

High-volume autonomous code generation and CI/CD pipelines.

  • check ~11M Frontier Tokens
  • check Unlimited parallel CLI sessions
  • check Shared team token pool & audit log
  • check Dedicated reverse proxy endpoint
DEVELOPER INTEGRATION

Install & Code in 30 Seconds

No complex backend proxy setup or proxy certificates needed. Install the sovereign CLI package, sign in via browser, and run autonomous agent tasks immediately.

check_circle Zero Master API keys exposed on client machines
check_circle Native Vim bindings, streaming diff previews, and bash execution
check_circle Automatic failover between Claude 3.5 Sonnet, GPT-4o, and DeepSeek
View Full CLI Documentation arrow_forward
quickstart.sh
bash
# 1. Install sovereign LEGECY CLI agent
npm install -g legecy-cli
# 2. 1-Click Browser Authentication Handshake
legecy login
✓ Browser opened -> Authenticated as user_admin (100 Cr Balance)
# 3. Autonomous Codebase Refactor
legecy "Refactor auth and migrate to secure cloud proxy"
⚡ Agent: Scanned 24 files, generated diffs, verified tests [DONE]
verified_user

Engineered for Total Sovereignty

Our mission is to give software developers unconstrained autonomous AI capabilities without the catastrophic financial risk of leaked API credentials. We meter every token through our ultra-low latency gateway so you can build fearlessly.

< 15ms

Gateway Latency

0 Keys

Ever Stored on Client

99.98%

Proxy Uptime

100%

Tamper-Proof Metering
FREQUENT QUESTIONS

Frequently Asked Questions

Everything you need to know about the LEGECY CLI platform.

How does LEGECY CLI prevent master API key leaks?

expand_more
Master provider keys (for Anthropic, OpenAI, DeepSeek) are stored solely in encrypted environment secrets on our cloud proxy gateway. The CLI client receives only a temporary user session token (cp_live_...). When the CLI performs an autonomous coding task, it sends requests to our reverse proxy (/v1/chat/completions), which validates the user's credits and relays the request to the model provider.

Which AI models are supported?

expand_more
We support the premier frontier coding models including Claude 3.5 Sonnet, GPT-4o, DeepSeek-Coder-V3, and Gemini 1.5 Pro. You can switch between models on the fly in the CLI using --model claude-3.5-sonnet or configure defaults in your project settings.

How does the 1-Click Browser login work?

expand_more
Running legecy login starts a lightweight local loopback server on a random port and opens your default browser to /cli-auth.html. Once you click "Approve Session", your token is transmitted securely to your local CLI and written to ~/.legecy/credentials.json.

What happens if a user decompiles or patches the CLI binary?

expand_more
All credit accounting, token deductions, and rate limits happen exclusively on our cloud server. Modifying the client binary cannot grant free credits, alter balance numbers, or bypass token metering, ensuring 100% commercial security.