> For the complete documentation index, see [llms.txt](https://docs.nullify.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.nullify.ai/cli/cli.md).

# CLI

The `nullify` CLI brings the Nullify platform to your terminal and CI pipelines. Use it to authenticate, check your security posture, query and remediate findings, gate CI, and expose Nullify as an [MCP](/cli/cli/mcp-setup.md) server for AI assistants.

## In this section

* [Installation](/cli/cli/install.md) — install the binary and configure your host.
* [Authentication](/cli/cli/authentication.md) — log in and manage credentials.
* [MCP Setup](/cli/cli/mcp-setup.md) — run the CLI as an MCP server and wire it into Cursor, Codex, or Claude.

## Quick start

```bash
# Install (macOS/Linux) and point the CLI at your tenant
curl -sSfL https://raw.githubusercontent.com/Nullify-Platform/cli/main/install.sh | sh -s -- --host api.<TENANT>.nullify.ai

# One-time setup wizard (login + host + defaults)
nullify init

# See your overall posture
nullify status

# Query findings across every scanner (or scope with --type)
nullify findings --type sast
```

## Common commands

| Command                                 | What it does                                                                                    |
| --------------------------------------- | ----------------------------------------------------------------------------------------------- |
| `nullify init`                          | One-time setup wizard: authenticate, set your host, and configure defaults.                     |
| `nullify status`                        | Security-posture overview across every finding type.                                            |
| `nullify findings [--type ...]`         | List findings; filter by `--severity`, `--status`, `--type`, `--repo`, `--limit`.               |
| `nullify fix <finding-id>`              | Generate an autofix for a finding, optionally opening a PR with `--create-pr`.                  |
| `nullify pentest ...`                   | Run a pentest against your API (see [Pentests](/capabilities/pentests/engagement-workflow.md)). |
| `nullify ci gate` / `nullify ci report` | Fail a build past a threshold, or produce a markdown summary for a PR comment.                  |
| `nullify repos`                         | List the repositories Nullify monitors.                                                         |
| `nullify whoami`                        | Show who you're authenticated as.                                                               |
| `nullify auth ...`                      | Log in, check status, switch hosts, and manage credentials.                                     |
| `nullify mcp serve`                     | Run the CLI as an [MCP server](/cli/cli/mcp-setup.md) for AI assistants.                        |

Advanced, low-level access to individual service APIs lives under `nullify api ...` (for example `nullify api sast list-findings`); most users should prefer the unified commands above.

See [Installation](/cli/cli/install.md) for host resolution and platform notes, and [Authentication](/cli/cli/authentication.md) for login details.