Intro

What is vscan?

vscan finds vulnerabilities in your code and dependencies, then streams AI-generated fixes directly to your codebase using Vaktex models.

It is designed for the moments when you want a security pass without leaving your terminal: before opening a pull request, while reviewing a risky change, or as part of a scripted workflow.

Run it from any project:

npx vscan

For agent workflows, use MCP to let Claude, Codex, or Cursor scan files as they write code.

Features

• AI security models for vulnerability detection and resolution
• Code and dependency scanning
• AI-generated fixes applied from the terminal
• Zero-install CLI with npx vscan
• MCP support for Claude, Codex, and Cursor
• Interactive terminal review and JSONL streaming
• macOS, Linux, and Windows support

Install

Run without installing:

npx vscan

Or install globally:

npm install -g vscan
vscan

Requires Node.js 18 or newer.

Quick Start

# Authenticate
vscan auth

# Scan the current directory
vscan .

# Scan another project
vscan ./repo

# Stream JSONL output
vscan ./repo --format jsonl > report.jsonl

# Auto-apply suggested fixes
vscan ./repo --format jsonl --yes > report.jsonl

# Configure Claude, Codex, or Cursor
vscan mcp init

Modes

Interactive review:

vscan .

Use this when you want a guided terminal flow. Findings appear in the scan session, and you can choose which suggested fixes to apply.

JSONL streaming:

vscan . --format jsonl

Use this when another tool needs to read scan results. JSONL is the non-interactive output format for CI, scripts, and agent pipelines.

MCP:

vscan mcp

Use this when a local coding agent should scan files incrementally during development.

Agent:

vscan agent

Use this when you want an interactive agent that scans, proposes solutions, and applies them with your approval. See Agent Mode.

Commands

Sign in:

vscan auth

Run this before your first scan, or whenever the CLI asks you to authenticate again.

Choose a model:

vscan model
vscan model <id>

Use this when your account has access to multiple Vaktex models and you want to choose which one future scans use.

View account and usage:

vscan about
vscan usage

Use these commands to confirm your active account, available features, and current usage.

Start or install MCP:

vscan mcp
vscan mcp init

Use these commands when connecting vscan to Claude, Codex, Cursor, or another MCP-capable host.

Run the agent:

vscan agent

Use this for an interactive session that scans and resolves findings with you in the current directory.

Show help:

vscan help

Next

• Configuration
• CLI Usage
• Agent Mode
• Integrations