CLI command reference
These are the commands and options registered by the published executable.
krythiq initkrythiq init [--skip-gitignore]Creates .krythiq/, writes krythiq.config.mjs unless a config already exists, detects a small set of project markers, and normally adds .krythiq/ to .gitignore.
krythiq runkrythiq run <command> [--no-ai] [--model <model>] [--verbose]Runs a trusted command through the operating-system shell, streams both output channels, preserves its exit code, and optionally explains recognized stack traces from stderr with Anthropic.
krythiq scankrythiq scan [path] [--save] [--ci] [--fail-on <severity>] [--format <format>] [--ignore <patterns...>] [--rules <path>] [--publish] [--ai] [--ai-model <model>]Runs a free local static scan with custom regex rules, optional Semgrep, and npm audit. Add --save to store the result in Krythiq.dev Recent Scans at zero Token cost. Without --save, the result stays local.
krythiq connectkrythiq connect [--status] [--disconnect] [--no-browser]Connects this terminal to Krythiq.dev through a short browser approval flow, checks the connection and Token balance, or removes the local connection.
krythiq whoamikrythiq whoamiChecks the saved CLI session with Krythiq.dev and shows the signed-in account, dashboard, Token balance, CLI scan count, and scan Tokens used. It exits with an error when the session is missing, expired, or revoked.
krythiq tokenkrythiq tokenChecks the live Token balance for the connected Krythiq.dev account and shows Tokens used by saved CLI scans. Static scans and --save cost zero Tokens.
krythiq authkrythiq auth [--clear]Validates and stores an Anthropic key in the current user's OS configuration directory, or removes it. ANTHROPIC_API_KEY takes precedence over stored data.
scan --ci exits 1 only when a finding meets the selected threshold. A missing/non-directory scan path exits 2. Commander rejects unsupported formats and severities.
Semgrep, npm-audit, Mistral, and publish failures are warnings and currently do not fail an otherwise completed scan.
There is no fix command, --fix, --watch, or --sandbox option.
