ai-defense-cli

Cisco AI Defense CLI (cisco-aid-cli) — command-line tool for AI Defense scanning and inventory: model-scan, mcp-scan, and ai-bom. Deterministic exit codes and machine-readable output for CI/CD.

Features

• model-scan — AI/ML model security scans
• mcp-scan — MCP server registration and scanning
• ai-bom — AI Bill of Materials (embedded cisco-aibom analyzer)
• onboard / config — interactive setup; config stored under ~/.ai-defense/ with named profiles
• install — checksum-verified self-update from GitHub Releases
• Exit codes — operational (1–5) vs policy verdicts (10, 20)
• CI output — raw API JSON by default; --envelope + --fail-on / --block-on

Installation

• Users: GitHub Releases · install-upgrade.md — download binaries, verify checksums, upgrade
• Developers: docs/getting-started-developer.md — build from source

Quick build from source:

git clone https://github.com/cisco-ai-defense/ai-defense-cli.git
cd ai-defense-cli
make build-go
./bin/cisco-aid-cli --help

Quick start

# After install from Releases:
cisco-aid-cli onboard

# Or set credentials manually:
export AI_DEFENSE_API_KEY="your-api-key"
export AI_DEFENSE_BASE_URL="https://us.api.aidefense.security.cisco.com"

cisco-aid-cli model-scan list --limit 5

See docs/getting-started-client.md for the full command reference, output modes, and exit-code gating. Documentation index: docs/README.md.

Development

make build-go test-cover-check vet   # daily dev (matches CI test job)
make bundle build-embed          # full embed (local OS)
make build-release-darwin        # macOS release → dist/
make build-release-linux GOARCH=amd64   # Linux release via Docker

Details: docs/getting-started-developer.md · CONTRIBUTING.md · SECURITY.md

License

Distributed under the Apache 2.0 License. See LICENSE for more information.