Operate Runtime and Console
Use this section after installation when you need to operate Caracal locally or understand which operator surface owns a task.
Caracal has two local operator surfaces:
| Surface | Use it for | Do not use it for |
|---|---|---|
caracal | Local stack lifecycle, readiness checks, local reset, token-injected process execution, and Console launch. | Zones, applications, providers, resources, policies, audit, agents, delegation, or Control setup. |
caracal console / caracal-console | Human management for zones, applications, providers, resources, policies, policy sets, authority sessions, Control, audit, request traces, agent sessions, delegation, and diagnostics. | Starting or stopping the stack, purging local runtime state, or running workloads. |
The runtime CLI stays small so lifecycle and workload execution do not depend on admin tokens, zone selection, or Control credentials. Product management belongs to the Console, Control API, or Admin SDK.
Recommended Path
Section titled “Recommended Path”- Choose the Right Surface to confirm whether a task belongs in
caracal, Console, Control API, or Admin SDK. - Start and Check the Stack with
caracal upandcaracal status --ready. - Use the Console to run guided setup and create the first runtime profile.
- Configure Workloads when a workload needs explicit profile, credential, or service endpoint settings.
- Run Workloads with
caracal run -- <command>. - Manage Product Objects for ongoing zone, application, provider, resource, policy, policy-set, and Control work.
- Inspect Diagnostics and Audit when debugging health, readiness, audit, or request decisions.
- Manage Agents and Delegation when workloads create agent sessions or delegation edges.
Command Map
Section titled “Command Map”| Outcome | Surface |
|---|---|
| Start, stop, check, or purge the local runtime stack | caracal |
| Launch the terminal Console | caracal console |
| Run an agent process with scoped resource tokens | caracal run -- <command> |
| Create a zone, app, provider, resource, policy, or policy set | Console |
| Enable Control automation | Console control |
| Script management workflows | Control API or Admin SDK |
| Inspect audit events, request traces, diagnostics, agents, or delegation | Console |
Next Step
Section titled “Next Step”Start with Choose the Right Surface if you are deciding where an operation belongs. If you already know you need a local stack, go directly to Start and Check the Stack.

