README
¶
SafeDep CLI
safedep is SafeDep Cloud on the command line. Manage auth, query endpoint
telemetry, harden AI coding agents, and integrate with your security toolchain —
for humans and the agents they work with.
Protect your AI agents in one command
npx @safedep/cli setup mcp install
One command authenticates you with SafeDep Cloud, detects your AI coding agents (Claude Code, Cursor, Gemini CLI, and more), and injects MCP-based threat protection into each one.
Install
brew install safedep/tap/cli
npm install -g @safedep/cli
pnpm add -g @safedep/cli
bun add -g @safedep/cli
Other installation options
Download prebuilt binaries for Linux, macOS, and Windows from the GitHub Releases page.
Get started
# Authenticate with SafeDep Cloud
safedep auth login
# Check your endpoint fleet
safedep endpoint status
# Query your security telemetry
safedep query exec --sql "select name, version from packages limit 10"
# Protect your AI coding agents
safedep setup mcp install
What safedep can do
Authentication and profiles — safedep auth
Log in to SafeDep Cloud, manage credential profiles, and switch between tenants.
Endpoint fleet intelligence — safedep endpoint
Monitor the health of every endpoint reporting to your tenant, list active machines,
and drill into package inventory and recent activity.
Security telemetry queries — safedep query
Run SQL against SafeDep Cloud's query service. Inspect packages, events, and findings
across your entire fleet.
AI agent protection — safedep protect mcp
Inject or remove the SafeDep MCP server from detected AI coding agents. Supports
Claude Code, Cursor, Gemini CLI, and more.
Integrations — safedep integration
Push SafeDep malware findings to external security tools. JFrog XRay is supported.
Learn more
- Documentation — guides, concepts, and API reference
- SafeDep Cloud — the platform behind the CLI
- GitHub Issues — bug reports and feature requests
Full command reference
| Command | Description |
|---|---|
safedep auth login |
Authenticate with SafeDep Cloud |
safedep auth logout |
Remove credentials for the active profile |
safedep auth status |
Show authentication status |
safedep auth profile list |
List credential profiles |
safedep endpoint status |
Show fleet health |
safedep endpoint list |
List endpoints with filters |
safedep endpoint show |
Show endpoint detail |
safedep endpoint activity list |
List recent endpoint activity |
safedep endpoint inventory list |
List current endpoint inventory |
safedep query exec |
Execute a SQL query against SafeDep Cloud |
safedep query schema get |
Inspect the SafeDep Cloud query schema |
safedep protect mcp install |
Inject SafeDep MCP server config into detected AI agents |
safedep protect mcp uninstall |
Remove SafeDep MCP server config from detected AI agents |
safedep integration jfrog run |
Push SafeDep malware findings to JFrog XRay |
safedep setup mcp install |
Guided onboarding: authenticate and configure AI agents |
safedep version |
Print CLI version |
Directories
¶
| Path | Synopsis |
|---|---|
|
cmd
|
|
|
safedep
command
|
|
|
internal
|
|
|
app
Package app holds the dependency-injection container shared by all commands.
|
Package app holds the dependency-injection container shared by all commands. |
|
auth
Package auth contains the SafeDep CLI's authentication flows.
|
Package auth contains the SafeDep CLI's authentication flows. |
|
cloudquery
Package cloudquery is the orchestration layer for SafeDep Cloud's SQL query service.
|
Package cloudquery is the orchestration layer for SafeDep Cloud's SQL query service. |
|
cmd/auth
Package auth registers the `safedep auth` domain.
|
Package auth registers the `safedep auth` domain. |
|
cmd/endpoint
Package endpoint registers the `safedep endpoint` command tree, the CLI front-end for SafeDep Cloud's EndpointManagementService (Endpoint Hub).
|
Package endpoint registers the `safedep endpoint` command tree, the CLI front-end for SafeDep Cloud's EndpointManagementService (Endpoint Hub). |
|
cmd/integration
Package integration is the umbrella domain for SafeDep's third-party integrations.
|
Package integration is the umbrella domain for SafeDep's third-party integrations. |
|
cmd/integration/jfrog
internal/cmd/integration/jfrog/run.go
|
internal/cmd/integration/jfrog/run.go |
|
cmd/query
Package query registers the `safedep query` domain.
|
Package query registers the `safedep query` domain. |
|
cmd/version
Package version registers the `safedep version` command.
|
Package version registers the `safedep version` command. |
|
config
Package config owns the CLI's persistent configuration.
|
Package config owns the CLI's persistent configuration. |
|
storage
Package storage owns the CLI's persistent-state layer.
|
Package storage owns the CLI's persistent-state layer. |
|
tui
Package tui owns the CLI's data-presentation contract and the theme it pushes into dry/tui at startup.
|
Package tui owns the CLI's data-presentation contract and the theme it pushes into dry/tui at startup. |
|
scripts
module
|