Skip to content
Patronus
Website

Patronus Security CLI

Install the CLI and scan local files, public URLs, and MCP servers.

The Patronus Security CLI scans local files, public URLs, and MCP servers. It also installs the Codex, Claude Code, and DeepSeek Harness integrations.

Follow the public INSTALL.md. It verifies the release and checksum, installs the CLI on macOS or Linux, and starts onboarding.

For agent-assisted setup, use this prompt:

Set up Patronus Security using https://github.com/patronus-protect/patronus-security-cli/blob/main/INSTALL.md

Approve writes outside the project and complete browser authentication yourself. Agents must not request or expose API keys, login tokens, or anonymous identity cookies.

Local file scans do not require an account:

Terminal window
patronus-security-scanner scan file README.md

Public URL scans can use the rate-limited anonymous API:

Terminal window
patronus-security-scanner scan url https://example.com

Uploading a supported document is explicit:

Terminal window
patronus-security-scanner scan file report.pdf --anonymous-api

Use patronus-security-scanner auth login for higher allowances and authenticated cloud features. Run patronus-security-scanner onboarding again to change the setup or add a newly installed agent host.