Redis

What it coversCopy Anchor Link

Use Redis when a cache or Redis-backed queue is suspect. Its diagnostic reads show memory and client pressure, command statistics, slow commands, recent latency and keyspace size.

ConnectCopy Anchor Link

reckon connect redis-prod --org acme --provider redis --for-env prod

Fill in ~/.reckon/orgs/acme/secrets/redis-prod.env:

REDIS_URL=rediss://readonly:replace_me@redis.example.com:6380/0

Reckon passes the URL to redis-cli -u. There is no reckon login for Redis.

reckon verify redis-prod runs redis-cli PING.

Read-only contractCopy Anchor Link

Redis is an approval connection: the agent must ask you before each run, and Claude Code's settings in the org folder mark every reckon run redis-prod or reckon run redis as ask.

redis-cli has no read-only mode, so Reckon also allows only these commands: INFO, SLOWLOG GET, SLOWLOG LEN, LATENCY LATEST, LATENCY HISTORY, LATENCY DOCTOR, LATENCY GRAPH, LATENCY HISTOGRAM, DBSIZE, SCAN, PING, MEMORY STATS, MEMORY USAGE, CLIENT LIST, TYPE, TTL, PTTL, EXISTS, STRLEN, LLEN, SCARD, ZCARD, HLEN, XLEN and XINFO. CONFIG GET is not allowed because it can return the server password. It refuses -u, -h, -p, -a, --user, --pass and --askpass. A Redis ACL user limited to read commands is the server-side barrier.

Use SCAN with a COUNT, never KEYS *, on production.

Key commandsCopy Anchor Link

reckon run redis -- INFO memory
reckon run redis -- INFO stats
reckon run redis -- SLOWLOG GET 20
reckon run redis -- LATENCY LATEST
reckon run redis -- DBSIZE
reckon run redis -- SCAN 0 MATCH 'session:*' COUNT 100

LinksCopy Anchor Link

• Redis CLI documentation