Installation
Chio ships as a single binary plus multi-language SDKs. The default install path does not require Rust or Cargo.
Prerequisites
For the default installer, you need:
curlorwgettar
If you plan to build from source, you also need:
- Rust 1.93+: install via rustup if you don't have it
- A C linker (included with Xcode Command Line Tools on macOS, or
build-essentialon Debian/Ubuntu)
Install with curl
This downloads the matching release archive for your OS and CPU, verifies its SHA-256 checksum, and installs chio into /usr/local/bin:
$ curl -fsSL https://www.chio.world/install.sh | shTo install into a user-writable directory:
$ curl -fsSL https://www.chio.world/install.sh | CHIO_INSTALL_DIR="$HOME/.local/bin" shPin a version or point the installer at a private mirror:
$ curl -fsSL https://www.chio.world/install.sh | CHIO_VERSION=0.1.0 sh
$ curl -fsSL https://www.chio.world/install.sh | \
CHIO_RELEASE_BASE_URL=https://mirror.example.com/chio/releases/v0.1.0 shInstall via Cargo
If you already have a Rust toolchain:
$ cargo install chioHomebrew
On macOS and Linuxbrew, install the release formula directly:
$ curl -fsSL https://www.chio.world/releases/chio/latest/chio.rb -o /tmp/chio.rb \
&& brew install --formula /tmp/chio.rbPrebuilt Binaries
The installer downloads the same release archives directly. Builds are available for these targets:
| Platform | Architecture | Artifact |
|---|---|---|
| macOS | Apple Silicon (aarch64) | chio-0.1.0-aarch64-apple-darwin.tar.gz |
| macOS | Intel (x86_64) | chio-0.1.0-x86_64-apple-darwin.tar.gz |
| Linux | x86_64 | chio-0.1.0-x86_64-unknown-linux-gnu.tar.gz |
| Linux | aarch64 | chio-0.1.0-aarch64-unknown-linux-gnu.tar.gz |
| Windows | x86_64 | chio-0.1.0-x86_64-pc-windows-msvc.zip |
$ VERSION=0.1.0
$ TARGET=aarch64-apple-darwin
$ ARCHIVE="chio-$VERSION-$TARGET.tar.gz"
$ BASE="https://www.chio.world/releases/chio/v$VERSION"
$ curl -fL "$BASE/$ARCHIVE" -o "$ARCHIVE"
$ curl -fL "$BASE/$ARCHIVE.sha256" -o "$ARCHIVE.sha256"
$ shasum -a 256 -c "$ARCHIVE.sha256"
$ tar -xzf "$ARCHIVE"
$ sudo install -m 0755 "chio-$VERSION-$TARGET/chio" /usr/local/bin/chioDocker
Run the Chio kernel as a container. CI runners, ephemeral build agents, and anywhere shipping a native binary is friction.
$ docker pull ghcr.io/backbay-labs/chio-sidecar:latestRun a governed MCP server inside the container:
$ docker run --rm -v ./policy.yaml:/policy.yaml \
ghcr.io/backbay-labs/chio-sidecar:latest \
mcp serve --policy /policy.yaml --server-id srv-files \
-- npx -y @modelcontextprotocol/server-filesystem /workspaceSDK Installation
To embed Chio governance directly in your application instead of running the CLI as a sidecar, use one of the language SDKs.
TypeScript
$ npm install @chio-protocol/sdkOr with your preferred package manager:
$ yarn add @chio-protocol/sdk
$ pnpm add @chio-protocol/sdk
$ bun add @chio-protocol/sdkPython
$ pip install chio-pyGo
$ go get github.com/backbay-labs/chioSDK and CLI complement each other
Verify Installation
Confirm the CLI is installed and reachable:
$ chio --version
chio-cli 0.1.0If you see a version string, you're ready. If you get a command not found error, ensure the install directory is in your PATH.
Next Steps
With the CLI installed, explore the system architecture or jump straight into writing policies:
- Architecture: understand the kernel, guard pipeline, and trust boundaries
- Capabilities: how authority is scoped, delegated, and revoked
- Policy Schema: full guard configuration options