commands.md

Socket CLI 2.x prerelease command index

Use this index to find a command guide. Run socket <command> --help for the current options.

Command inventory

Every registered route, including hidden commands and local routes, appears once. Use the linked guide for context; run socket <command> --help for current options.

Command	Guide
analytics	Guide
ask	Guide
audit-log	Guide
bundler	Guide
cargo	Guide
ci	Guide
config	Guide
config auto	Guide
config get	Guide
config list	Guide
config set	Guide
config unset	Guide
dependencies	Guide
doctor	Guide
fix	Guide
gem	Guide
go	Guide
install	Guide
install completion	Guide
json	Guide
license	Guide
login	Guide
logout	Guide
manifest	Guide
manifest auto	Guide
manifest bazel	Guide
manifest conda	Guide
manifest gradle	Guide
manifest kotlin	Guide
manifest maven	Guide
manifest scala	Guide
manifest setup	Guide
mcp	Guide
npm	Guide
npx	Guide
nuget	Guide
oops	Guide
optimize	Guide
organization	Guide
organization dependencies	Guide
organization list	Guide
organization policy	Guide
organization policy license	Guide
organization policy security	Guide
organization quota	Guide
package	Guide
package score	Guide
package shallow	Guide
patch	Guide
patch list	Guide
patch remove	Guide
pip	Guide
pnpm	Guide
pycli	Guide
raw-npm	Guide
raw-npx	Guide
repository	Guide
repository create	Guide
repository del	Guide
repository list	Guide
repository update	Guide
repository view	Guide
sbom	Guide
scan	Guide
scan create	Guide
scan del	Guide
scan diff	Guide
scan github	Guide
scan list	Guide
scan metadata	Guide
scan reach	Guide
scan report	Guide
scan setup	Guide
scan view	Guide
security	Guide
sfw	Guide
sfw ca	Guide
sfw ca init	Guide
sfw ca path	Guide
sfw ca trust	Guide
threat-feed	Guide
uninstall	Guide
uninstall completion	Guide
uv	Guide
whoami	Guide
wrapper	Guide
yarn	Guide

Authentication

Command	Purpose	Guide
login	Authenticate with Socket.	Authentication
logout	Clear saved Socket credentials.	Authentication
whoami	Show whether Socket credentials are available.	Authentication

Configuration

Command	Purpose	Guide
config	Read and change local CLI settings.	Configuration
config auto	Discover and optionally save a setting.	Configuration
config get	Read one local CLI setting.	Configuration
config list	List local CLI settings.	Configuration
config set	Save a local CLI setting.	Configuration
config unset	Remove a local CLI setting.	Configuration
json	Show the socket.json file used in a directory.	Configuration
install	Install shell completion.	Configuration
uninstall	Remove shell completion.	Configuration
wrapper	Enable or disable the npm and pnpm exec wrapper.	Configuration

Health and fixes

Command	Purpose	Guide
doctor	Enforce dependency health rules and report setup issues.	Health and fixes
fix	Find and apply dependency vulnerability fixes.	Health and fixes
optimize	Add Socket Registry overrides and update dependencies.	Health and fixes
ask	Turn a natural-language request into a CLI action.	Health and fixes

Scans

Command	Purpose	Guide
ci	Scan a project and set the CI exit status from policy.	Scans
scan	Create, list, inspect, compare, or report Socket scans.	Scans

Manifests

Command	Purpose	Guide
manifest	Generate ecosystem-specific dependency manifests.	Manifests
sbom	Generate a CycloneDX SBOM with bundled sdxgen.	Manifests

Packages

Command	Purpose	Guide
package	Look up package scores and package details.	Packages

Organizations

Command	Purpose	Guide
organization	List organizations, quota, and policy.	Organizations
dependencies	Search dependency records known to an organization.	Organizations
license	Read an organization's license policy.	Organizations
security	Read an organization's security policy.	Organizations

Repositories

Command	Purpose	Guide
repository	Create, view, list, update, or delete registered repositories.	Repositories

Activity and threat data

Command	Purpose	Guide
analytics	Read organization or repository analytics.	Activity
audit-log	Read an organization's audit log.	Activity
threat-feed	Read an organization's threat feed.	Activity

Package managers

Command	Purpose	Guide
bundler	Run Bundler through Socket Firewall.	Package managers
cargo	Run Cargo through Socket Firewall.	Package managers
gem	Run RubyGems through Socket Firewall.	Package managers
go	Run Go through Socket Firewall.	Package managers
npm	Run npm through Socket Firewall.	Package managers
npx	Run npx through Socket Firewall.	Package managers
nuget	Run NuGet through Socket Firewall.	Package managers
pip	Run pip through Socket Firewall.	Package managers
pnpm	Run pnpm through Socket Firewall.	Package managers
uv	Run uv through Socket Firewall.	Package managers
yarn	Run Yarn through Socket Firewall.	Package managers
sfw	Run Socket Firewall directly.	Package managers
raw-npm	Run npm without Socket install gating.	Package managers
raw-npx	Run npx without Socket install gating.	Package managers

Other tools

Command	Purpose	Guide
patch	Manage local CVE patch records or delegate to socket-patch.	Patch
mcp	Run the Socket MCP server over stdio or HTTP.	MCP
pycli	Pass options to the Socket Python CLI.	Python CLI
oops	Trigger an intentional error for development and testing.	Development

Aliases

These names route to the listed command. Hidden aliases remain accepted for compatibility.

Alias	Target
audit	audit-log
audit-logs	audit-log
auditLog	audit-log
auditLogs	audit-log
deps	dependencies
feed	threat-feed
firewall	sfw
manifest yolo	manifest auto
org	organization
organisation	organization
organisations	organization
organization deps	organization dependencies
organization license	organization policy license
organization security	organization policy security
organizations	organization
orgs	organization
package deep	package score
pip3	pip
pkg	package
repo	repository
repos	repository
repositories	repository
scan meta	scan metadata
scan reachability	scan reach

Root command registration lives in src/commands.mts.