CLI Reference

Usage

tachyonic [OPTIONS] <COMMAND>

-v, --verbose works on every command. Run tachyonic <command> --help for the full flag list.

Command	Description
`tachyonic runtime`	Start and manage runtimes. See Runtimes
`tachyonic verify`	Verify the signature on an evidence bundle. See Verifying Evidence
`tachyonic scan`	Run a local security scan against a target
`tachyonic attacks`	List available attacks. See attacks
`tachyonic report`	Generate a report from scan results. See reports
`tachyonic upload`	Upload local scan results to the platform
`tachyonic login`	Log in to the platform, or store and inspect provider session tokens
`tachyonic logout`	Remove stored session tokens
`tachyonic doctor`	Report resolved paths and attack-library health

tachyonic runtime <COMMAND>

Subcommand	Description
`plan`	Render and validate a runtime bundle without spending budget
`start`	Create and begin a runtime, from a manifest or `--target`
`status`	Show point-in-time status
`watch`	Follow a runtime until it reaches a terminal state
`events`	List lifecycle events
`artifacts`	List result artifacts with signed URLs
`logs`	Fetch or follow the runtime log
`approve`	Approve or deny a gated action
`cancel`	Cancel a running runtime

Flag	Value	Description
`[MANIFEST]`	`path`	Runtime manifest YAML. Mutually exclusive with --target.
`--target`	`<URL>`	Quick-start shorthand. The objective is derived from the host.
`--region`	`<REGION>`	Region for the --target shorthand, for example aws-us-east-1. Omit on Free.

tachyonic verify [OPTIONS] <BUNDLE>

<BUNDLE> is an evidence manifest (.manifest.json), an artifact, or a bundle directory.

Flag	Value	Default	Description
`--pubkey-url`	`<URL>`		Override the signing key URL. The default is `https://tachyonic.sh/.well-known/signing-pubkey.json`.
`--pubkey`	`path`		Local PEM public key. Skips the network fetch.

Run a security scan against an LLM endpoint, AI agent, or MCP server.

tachyonic scan [OPTIONS]

Flag	Value	Default	Description
`-t, --target`	`<URL>`		Target URL or endpoint.
`-p, --provider`	`<NAME>`		Provider preset: open-ai, anthropic, gemini, open-responses, mistral, deep-seek, ollama, groq, together-ai, nvidia, moonshot, zai, baseten.
`-m, --model`	`<NAME>`		Model to use.
`--api-key`	`<KEY>`		API key. Prefer environment variables: CLI arguments show up in process listings.
`--auth-mode`	`api-key \| session \| auto`	`api-key`	Credential resolution mode.
`-c, --config`	`path`		Configuration file. See Configuration.

Flag	Value	Description
`--categories`	`<LIST>`	Comma-separated categories. See the Attack Catalog.
`--max-attacks`	`<N>`	Maximum number of attacks to run.
`--include-builtin`		Add built-in attacks to the external library.
`--no-triage`		Disable triage and emit raw findings.
`--max-cost`	`<USD>`	Stop when the estimated cost exceeds this amount.

Flag	Value	Default	Description
`--parallel`			Enable parallel execution.
`--max-concurrent`	`<N>`	`5`	Concurrent requests in parallel mode.
`--min-delay`	`<MS>`	`100`	Minimum delay between requests.
`--http-timeout-ms`	`<MS>`	`30000`	HTTP request timeout.

Flag	Value	Default	Description
`-f, --format`	`json \| html \| sarif`	`json`	Output format.
`-o, --output`	`path`	`stdout`	Output file.
`--include-raw`			Include raw responses.
`--no-progress`			Hide the progress bar.
`--save-baseline`	`path`		Save results as a baseline.
`--baseline`	`path`		Compare against a saved baseline.

Flag	Value	Description
`--tools-json`, `--tools-file`	`JSON`	Tool definitions to include in HTTP requests.
`--tool-choice`	`string`	Tool choice policy, as JSON or a plain string.
`--tool-call-paths`	`<LIST>`	JSONPaths that extract tool calls from responses.
`--allowed-tool`	`<NAME>`	Expected tool names when tools/list is unavailable.
`--request-overrides`, `--request-overrides-file`	`JSON`	Extra request fields to merge.

Flag	Value	Default	Description
`--mcp-transport`	`stdio \| http`	`stdio`	Transport type.
`--mcp-command`	`<CMD>`		Server command (stdio).
`--mcp-args`	`<ARGS>`		Server arguments (stdio).
`--mcp-url`	`<URL>`		Server URL (HTTP).
`--mcp-timeout-ms`	`<MS>`	`30000`	MCP request timeout.
`--mcp-expected-server-name`	`<NAME>`		Expected initialize.serverInfo.name.
`--disable-tool-schema-poisoning`			Skip tool schema poisoning checks.
`--tool-schema-threshold`	`<0-1>`	`0.75`	Minimum confidence for schema poisoning matches.

See MCP for examples.

Flag	Value	Default	Description
`--verify-llm`			LLM verification of borderline detections.
`--verify-provider`	`<NAME>`		Verification provider. Defaults to the scan provider.
`--verify-model`	`<NAME>`		Verification model.
`--verify-trigger-threshold`	`<0-1>`	`0.85`	Confidence that triggers verification.
`--verify-consensus`			Multi-judge consensus verification.
`--verify-judges`	`<LIST>`		provider:model pairs for consensus judges.
`--verify-consensus-strategy`	`majority \| unanimous \| weighted`	`majority`	How judges combine.

Flag	Value	Description
`--cli-command`	`<CMD>`	CLI command for agent testing.
`--cli-agent`	`<NAME>`	CLI agent name.
`--ssh-host`	`user@host`	Run the CLI agent over SSH.

See CLI agents for capability flags.

Flag	Value	Default	Description
`--cloud`			Submit the scan to the platform instead of running locally. See Cloud scans.

Variable	Description
`ANTHROPIC_API_KEY`, `OPENAI_API_KEY`, `GOOGLE_API_KEY`, `MISTRAL_API_KEY`, `DEEPSEEK_API_KEY`, `GROQ_API_KEY`, `TOGETHER_API_KEY`, `NVIDIA_API_KEY`, `MOONSHOT_API_KEY`, `ZAI_API_KEY`, `BASETEN_API_KEY`	Provider API keys
`TACHYONIC_API_KEY`	Fallback API key for any provider
`TACHYONIC_VERIFY_API_KEY`	API key for the verification provider
`TACHYONIC_LIBRARY_PATH`	Attack library root. Default `~/.tachyonic/library`. `HEURISTICS_PATH` is the older name and still works
`TACHYONIC_HOME`	Credentials, platform session and scan state. Default `~/.tachyonic`
`RUST_LOG`	Log level: `info`, `debug`, `tachyonic=debug`

Run tachyonic doctor to print the resolved paths.

Code	Meaning
`0`	The command completed. Findings do not change the exit code; see CI/CD to fail a build on findings
`1`	The command failed, for example on a network, auth or verification error
`2`	Invalid arguments