Skip to content
CLI

Run Aevrin from your terminal.

One install does it all. Scan an MCP server or a repository, see what the agents on this computer can do, and give your agent what it needs to reach Aevrin MCP.

Read the docsContact support

Everything is in the docs.

Every command, option, exit code and fix for a problem lives there. This is what it covers.

  • CLI and CI

    Commands, options, JSON output, exit codes, browser sign-in and build checks.

  • Coverage

    What each scanner catches, what it skips, and what Incomplete means.

  • Agent posture

    How Claude Code and Codex settings are read, and what the report holds.

  • Aevrin MCP

    Connecting your agent with your own key, the three tools, and how credits are spent.

  • Dashboard

    History, usage, where scans came from, problems, false alarms and exports.

  • API

    Endpoints, signing in, API keys, and running things safely.

Install and sign in

Install it, then sign in.

Use the commands below. Signing in through your browser is the normal way. API keys are for CI and other scripts that run without you.

Install on macOS

brew install pipx
pipx ensurepath
pipx install aevrin

Check it works, then sign in

aevrin --version
aevrin login

Let your agent install it

Paste this into Claude Code or another agent, and it installs the CLI for you.

  1. 1Finds your system and shell. No sudo, and no changes to the system Python.
  2. 2Picks npm or pipx, never both, and installs the CLI.
  3. 3Waits while you approve the sign-in in your browser.
  4. 4Ends with a local scan you can run to check it works.
14 lines
Show the full prompt
Set up the Aevrin CLI on this machine and verify the installation end to end.

1. Detect the operating system and shell. Do not use sudo and do not modify the system Python.
2. Choose exactly one installation path. If Node.js 18+ and npm are already available, run: npm install --global aevrin. Otherwise use pipx and install it with the matching command:
   - macOS: brew install pipx && pipx ensurepath
   - Linux: python3 -m pip install --user pipx && python3 -m pipx ensurepath
   - Windows PowerShell: py -m pip install --user pipx; py -m pipx ensurepath
3. For pipx, install or upgrade Aevrin with: pipx install aevrin (use pipx upgrade aevrin if already installed). For npm, use: npm install --global aevrin@latest. Do not install both variants in the same run.
4. Run: aevrin --version
5. Run: aevrin login
6. Pause while I approve the browser device-login page. Never ask me to paste a password, API key, or browser token into the terminal.
7. After approval, show me how to run a local check with: aevrin scan . --no-upload --fail-on high

Report every command you executed and its result. If a command fails, stop at that command, preserve the full non-secret error, and explain the smallest corrective action.
Aevrin MCP

Give your agent one address, not another key.

Aevrin MCP is an MCP server Aevrin hosts. Your agent reaches it with the Aevrin key the CLI already saved. There is no second account and no extra key.

Connect Claude Code

aevrin login
claude mcp add-json --scope user aevrin '{
  "type": "http",
  "url": "https://api.mcp.aevrin.net/mcp",
  "headersHelper": "aevrin mcp-header"
}'

aevrin mcp-header prints only the sign-in header, so your key stays out of your agent's settings file. With no key it stops with an error instead of sending an empty one. Start a new session after you add the server.

Searching is free and never counted. Getting a check costs 1 credit. Running one costs 10 credits as well.

How credits are spent

Two kinds of answer, and the result says which

A check either runs on Aevrin or tells your agent how to do it. Neither is a lesser answer. The difference is where the work happens.

  • Aevrin runs itAn admin has approved a version to run. Aevrin runs it on its own servers, in a closed-off sandbox that can only reach the addresses its reviewed list allows. Your agent gets the result. You install nothing and need no keys of your own.
  • Aevrin tells your agent howThere is nothing for Aevrin to run, or the admin chose to have it done on your side. Your agent gets the steps they wrote, with inputs, outputs and examples, and does the work on your machine with your own permissions.

Running a check on Aevrin's servers is not switched on yet. Searching, getting a check and getting its steps work today.

Read the full setup guide