Skip to Content
CLIOverview

CLI Overview

The Inkog CLI is a lightweight, stateless security scanner for AI agent code. It detects vulnerabilities locally and performs deep analysis via the Inkog API.

Installation

curl -fsSL https://inkog.io/install.sh | sh

Go Install

go install github.com/inkog-io/inkog/cmd/inkog@latest
 
# If you get a "module not found" error:
GOPROXY=direct go install github.com/inkog-io/inkog/cmd/inkog@latest

Homebrew

brew tap inkog-io/inkog
brew install inkog

Binary Download

Download the latest release from GitHub Releases .

API Key Setup

An API key is required for all scans. Get your free key at app.inkog.io .

export INKOG_API_KEY=sk_live_your_key_here

Quick Start

Scan your current directory:

inkog .

Scan a specific path with JSON output:

inkog -output json ./src

Scan with minimum severity threshold:

inkog -severity high ./agents

How It Works

Inkog uses a hybrid privacy model:

  1. Local Detection - Secrets are detected and redacted locally before any data leaves your machine
  2. Server Analysis - Only redacted code is sent for deep AST analysis and vulnerability detection
  3. Merged Results - Local and server findings are combined into a unified report

Your secrets never leave your machine. The server only receives sanitized code with [REDACTED-API_KEY] placeholders.

Architecture

┌─────────────────┐     ┌─────────────────┐
│   Your Code     │────▶│  Local Scanner  │
└─────────────────┘     │  (Secrets)      │
                        └────────┬────────┘
                                 │ Redacted
                                 ▼
                        ┌─────────────────┐
                        │  Inkog Server   │
                        │  (AST Analysis) │
                        └────────┬────────┘
                                 │
                                 ▼
                        ┌─────────────────┐
                        │  Unified Report │
                        └─────────────────┘

Next Steps

Last updated on
VS CodeCommands