What you get
Once authorised, the agent acts as you — the docs put that up front.
Lark's Official CLI, in Three Command Tiers
Added 2026-08-06Plus-prefixed shortcuts serve humans and agents alike, with smart defaults and dry-run; 100-plus API commands map one-to-one onto platform endpoints; below that, lark-cli api reaches 2,500-plus endpoints raw.

One counter-intuitive convention: a successful JSON envelope has no code or msg field, so success reads from ok or the exit code, not the raw API's code == 0. The README carries a Read Before Use section that is blunter than most: hallucination, unpredictable execution and prompt injection are inherent risks; once authorised the agent acts as you within the granted scope and can leak sensitive data. It advises leaving the default security settings alone and keeping the bot out of group chats.