Skip to Content
Free during beta·npx -y @inkog-io/cli scan .·Get API Key →
CLIOverview

CLI Overview

The Inkog CLI is a lightweight, stateless pre-flight check for AI agent code. It detects logic flaws and security risks locally and performs deep analysis via the Inkog API.

Installation

npx (No Install)

npx -y @inkog-io/cli scan .

Install Script

curl -fsSL https://inkog.io/install.sh | sh

Homebrew

brew tap inkog-io/inkog brew install inkog

Go Install

go install github.com/inkog-io/inkog/cmd/inkog@latest

Binary Download

Download the latest release from GitHub Releases .

See Installation for full details on each method.

API Key Setup

An API key is required for all scans. Get your free key at app.inkog.io .

export INKOG_API_KEY=sk_live_your_key_here

Quick Start

Scan your current directory:

inkog .

Scan a specific path with JSON output:

inkog -output json ./src

Scan with minimum severity threshold:

inkog -severity high ./agents

How It Works

Inkog uses a hybrid privacy model:

  1. Local Detection - Secrets are detected and redacted locally before any data leaves your machine
  2. Server Analysis - Only redacted code is sent for deep AST analysis and risk detection
  3. Merged Results - Local and server findings are combined into a unified report

Your secrets never leave your machine. The server only receives sanitized code with [REDACTED-API_KEY] placeholders.

Architecture

┌─────────────────┐ ┌─────────────────┐ │ Your Code │────▶│ Local Scanner │ └─────────────────┘ │ (Secrets) │ └────────┬────────┘ │ Redacted ┌─────────────────┐ │ Inkog Server │ │ (AST Analysis) │ └────────┬────────┘ ┌─────────────────┐ │ Unified Report │ └─────────────────┘

Next Steps

Last updated on