KubbiSec CLI (kubbisec)

Command-line assistant for KubbiSec — remediate findings, chat with security context, and run autopilot in your environment.

| | | |---|---| | Package | @kubbisec/ai | | Binary | kubbisec | | Node.js | 20+ |

Platforms: Linux x64, Linux arm64, macOS arm64 (Apple Silicon), Windows x64.

What it does

• Remediate vulnerabilities — AI-assisted fixes from ASPM findings, with optional auto-PR.
• Interactive chat — TUI with KubbiSec skills (pipelines, scanners, remediation, local gh/git when needed).
• Autopilot watch — background daemon that consumes remediation tasks from your org queue.
• CLI hub — when NAUS or ASPM are on PATH, run kubbisec naus … or kubbisec aspm … from one entry point.

LLM calls go through your KubbiSec API using BYOK (Settings → AI in the web app).

Install

npm install -g @kubbisec/ai
kubbisec doctor
kubbisec login

Quick start

Create an API key in the KubbiSec web UI (prefix kbs_), then:

kubbisec login \
  --api-url https://api.your-instance.example \
  --api-key "$KBS_API_KEY" \
  --org "$ORG_ID" \
  --project "$PROJECT_ID"

kubbisec whoami
kubbisec ls

Credentials are stored locally under ~/.kubbisec/ai/kubbisec.json.

Commands

| Command | Description | |---------|-------------| | kubbisec login / logout / whoami | API session | | kubbisec doctor | Config and API diagnostics | | kubbisec ls / show <id> | Findings | | kubbisec fix <id> | AI remediation | | kubbisec chat | Interactive TUI | | kubbisec do | Multi-step agent run | | kubbisec watch | Autopilot daemon (heartbeat + tasks) | | kubbisec daemon list / stop / logs | Manage watch sessions | | kubbisec naus … / kubbisec aspm … | Forward to NAUS/ASPM when installed |

Run kubbisec --help for the full list.

Terms

The kubbisec CLI is distributed as prebuilt binaries for use with the KubbiSec platform. It is not open source. Use is subject to your agreement with KubbiSec.

Trademarks

KubbiSec and related marks are property of their respective owners.