CLI

The nullify CLI brings the Nullify platform to your terminal and CI pipelines. Use it to authenticate, check your security posture, query and remediate findings, gate CI, and expose Nullify as an MCP server for AI assistants.

In this section

• Installation — install the binary and configure your host.

• Authentication — log in and manage credentials.

• MCP Setup — run the CLI as an MCP server and wire it into Cursor, Codex, or Claude.

Quick start

# Install (macOS/Linux) and point the CLI at your tenant
curl -sSfL https://raw.githubusercontent.com/Nullify-Platform/cli/main/install.sh | sh -s -- --host api.<TENANT>.nullify.ai

# One-time setup wizard (login + host + defaults)
nullify init

# See your overall posture
nullify status

# Query findings across every scanner (or scope with --type)
nullify findings --type sast

Common commands

Command	What it does
nullify init	One-time setup wizard: authenticate, set your host, and configure defaults.
nullify status	Security-posture overview across every finding type.
nullify findings [--type ...]	List findings; filter by --severity, --status, --type, --repo, --limit.
nullify fix <finding-id>	Generate an autofix for a finding, optionally opening a PR with --create-pr.
nullify pentest ...	Run a pentest against your API (see Pentests).
nullify ci gate / nullify ci report	Fail a build past a threshold, or produce a markdown summary for a PR comment.
nullify repos	List the repositories Nullify monitors.
nullify whoami	Show who you're authenticated as.
nullify auth ...	Log in, check status, switch hosts, and manage credentials.
nullify mcp serve	Run the CLI as an MCP server for AI assistants.

Advanced, low-level access to individual service APIs lives under nullify api ... (for example nullify api sast list-findings); most users should prefer the unified commands above.

See Installation for host resolution and platform notes, and Authentication for login details.