Last updated: 2026-09-06The CLI ships as a standalone binary compiled with Bun. There is nothing else to install: no Node.js, no package manager, no runtime dependencies.
macOS and Linux
- Detects your OS and architecture (
darwinorlinux,arm64orx64). - Downloads
orca-<os>-<arch>.tar.gzfrom the latest GitHub release. - Verifies the archive against the release’s
SHA256SUMSmanifest and refuses to install on a mismatch. - Installs the binary to
~/.local/bin/orcaand, on macOS, clears the Gatekeeper quarantine attribute so the first run is not blocked. - Tells you if
~/.local/binis not on yourPATH, with the exact line to add to your shell profile.
curl or wget, tar, and either sha256sum or shasum. If no checksum tool is present the install proceeds without verification and says so.
Windows
Downloadorca-windows-x64.tar.gz from the releases page, extract it, and place orca-windows-x64.exe on your PATH (renaming it to orca.exe is fine). Self-update is not available on Windows because a running executable cannot replace itself; download a new archive to upgrade.
From source
If you want to run the CLI from a checkout, for example to try an unreleased change:package.json and cannot self-update; use git pull instead.
The npm package name
@agent-orc/cli appears in the source tree, but the package is not published to the npm registry. Use the installer or a source checkout.Updating
The standalone binary updates itself:orca update downloads the release archive, verifies it against SHA256SUMS, and swaps it over the running binary atomically. See the orca update reference for every flag.
orca --version also prints a one-line hint on stderr when a newer release exists. That check is cached for 24 hours in update-check.json next to the config file, only runs when stderr is a terminal, times out after two seconds, and never blocks the version output. Set ORCA_NO_UPDATE_CHECK=1 to disable it. If you hit GitHub API rate limits, set GITHUB_TOKEN and the check will use it.
Uninstalling
orca auth logout --revoke before deleting the directory if you want the key revoked server-side, or revoke it from the dashboard under Settings, then API Keys.