Skip to content

CLI command reference

These are the commands and options registered by the published executable.

krythiq init
krythiq init [--skip-gitignore]

Creates .krythiq/, writes krythiq.config.mjs unless a config already exists, detects a small set of project markers, and normally adds .krythiq/ to .gitignore.

krythiq run
krythiq run <command> [--no-ai] [--model <model>] [--verbose]

Runs a trusted command through the operating-system shell, streams both output channels, preserves its exit code, and optionally explains recognized stack traces from stderr with Anthropic.

krythiq scan
krythiq scan [path] [--save] [--ci] [--fail-on <severity>] [--format <format>] [--ignore <patterns...>] [--rules <path>] [--publish] [--ai] [--ai-model <model>]

Runs a free local static scan with custom regex rules, optional Semgrep, and npm audit. Add --save to store the result in Krythiq.dev Recent Scans at zero Token cost. Without --save, the result stays local.

krythiq connect
krythiq connect [--status] [--disconnect] [--no-browser]

Connects this terminal to Krythiq.dev through a short browser approval flow, checks the connection and Token balance, or removes the local connection.

krythiq whoami
krythiq whoami

Checks the saved CLI session with Krythiq.dev and shows the signed-in account, dashboard, Token balance, CLI scan count, and scan Tokens used. It exits with an error when the session is missing, expired, or revoked.

krythiq token
krythiq token

Checks the live Token balance for the connected Krythiq.dev account and shows Tokens used by saved CLI scans. Static scans and --save cost zero Tokens.

krythiq auth
krythiq auth [--clear]

Validates and stores an Anthropic key in the current user's OS configuration directory, or removes it. ANTHROPIC_API_KEY takes precedence over stored data.

Exit and error behavior

scan --ci exits 1 only when a finding meets the selected threshold. A missing/non-directory scan path exits 2. Commander rejects unsupported formats and severities.

Semgrep, npm-audit, Mistral, and publish failures are warnings and currently do not fail an otherwise completed scan.

There is no fix command, --fix, --watch, or --sandbox option.