Create an isolated Kimi Code home
This keeps test config, sessions, logs, and credentials away from your default setup.
export KIMI_CODE_HOME="$HOME/.config/kimi-code-agent-test"
mkdir -p "$KIMI_CODE_HOME"
kimi doctor
Agent workflow
Set up a local Kimi K3 agent workflow with Kimi Code, Kimi Claw, OpenClaw, K3Nova, provider IDs, and safety checks.
Use Kimi K3 agent locally by keeping the tool close to your machine and the credentials in a documented configuration path. The agent can run in Kimi Code, Kimi Claw/OpenClaw, or a K3Nova local workspace while Kimi K3 inference is provided through an authorized endpoint.
Start with a small task that proves the agent can read context, call the model, preserve state, and recover from an error before you let it run longer work.
Use an isolated data root when you want a clean local-agent test without disturbing your normal Kimi Code setup.
This keeps test config, sessions, logs, and credentials away from your default setup.
export KIMI_CODE_HOME="$HOME/.config/kimi-code-agent-test"
mkdir -p "$KIMI_CODE_HOME"
kimi doctor
Keep the prompt small so model access and tool behavior are easy to debug.
kimi -m k3-256k -p "Read the current directory name and describe the project type in one sentence."
Use this when the workflow needs a local REST, WebSocket, and browser surface.
kimi web --no-open --port 58628
Unset the isolated home when the test is finished.
unset KIMI_CODE_HOME
Copy this prompt into Kimi Code, K3Nova, or another AI agent. Keep approval manual for file writes, shell commands, account actions, and secrets.
Use this to give the agent the task and safety boundary in one message.
You are my AI agent for this task: run a safe local-agent test with Kimi K3, record the pass condition, and stop before broader file, shell, or credential access.
Start by restating the goal and the permissions you need.
Use official docs or the files I provide before making claims.
Give me a direct answer first, then a short table or checklist.
If commands are needed, show exact copyable commands without a shell prompt.
Ask before writing files, running shell commands, deleting or moving data, logging in, spending money, changing account settings, or handling API keys.
Stop and ask me when a step requires secrets, payment, account access, destructive cleanup, or a permission broader than the task.
| Permission | Give AI | Why |
|---|---|---|
| Read-only project access | Allow Read, Grep, and Glob only in the selected project or config folder. | Lets the agent inspect state before acting. |
| Shell commands | Ask before Bash or any CLI command; run one command at a time. | Commands can change files, packages, sessions, or network state. |
| File edits | Ask before Write or Edit, and require a diff before applying changes. | Prevents hidden config or source edits. |
| Hard stops | Deny payment, login, secret exposure, account changes, and destructive delete commands. | These are not safe to automate casually. |
Choose Kimi Code for coding, OpenClaw for gateway and tool-agent work, or K3Nova for web workspace testing.
Use the exact model ID and base URL expected by that surface. For OpenClaw, check the provider/model list. For Kimi Code, use the Kimi Code model docs.
Ask for a short repo summary, a one-file review, or a small planning memo before granting broader tool access.
Save whether the model answered, tools worked, context persisted, and no credentials appeared in output.
| Check | What to do | Pass condition |
|---|---|---|
| Model access | Ask a one-sentence question | The selected model answers without fallback confusion |
| Tool access | Read a harmless local file or fixture | The agent returns the expected detail |
| State | Send a follow-up in the same session | It remembers the task boundary |
| Safety | Search output for keys or private paths | No secret or irrelevant private data appears |
Even local agents should run with clear permissions, a small first task, and a human review point.
Do not put provider keys in prompts, public files, or screenshots. Use config, local secrets, or server-side environment storage.
K3Nova local pages can test the workspace, pricing boundary, docs, and guides before production model calls are enabled.
Yes, depending on the surface and permissions you configure.
No. A local agent can call a hosted Kimi K3 endpoint.
Check provider/model ID and credential path before changing the task prompt.