@shieldx/cli

Enterprise Java JAR obfuscation — runs 100% locally on your machine.

Install

# macOS / Linux (recommended)
curl -fsSL https://shieldx.zoniexlabs.xyz/install.sh | sh

# Windows (PowerShell as Administrator)
iwr -useb https://shieldx.zoniexlabs.xyz/install.ps1 | iex

# Direct npm install
npm install -g @shieldx/cli

Requires Node.js ≥ 18. The install scripts handle Node.js installation automatically.

Commands

shieldx panel

Interactive terminal panel — the easiest way to use ShieldX. Menu-driven upload, obfuscation, job history, and download. No browser, no account.

? What would you like to do?
❯ ⬆  Upload & Obfuscate JAR
  📋  View job history
  📊  System status

shieldx obfuscate <file>

Protect a JAR directly from the terminal.

shieldx obfuscate MyPlugin.jar                        # auto-detect profile
shieldx obfuscate MyPlugin.jar --profile paper        # Paper/Spigot
shieldx obfuscate MyMod.jar    --profile fabric       # Fabric mods
shieldx obfuscate App.jar      --profile enterprise   # Java applications
shieldx obfuscate App.jar      --profile aggressive   # maximum obfuscation

shieldx serve

Start a full local web dashboard at http://localhost:3001.

shieldx serve              # start with cached frontend
shieldx serve --build      # rebuild frontend first (~30s, cached after)
shieldx serve --port 8080  # custom port
shieldx serve --no-open    # don't auto-open browser

shieldx jobs

Manage job history.

shieldx jobs               # list all jobs
shieldx jobs list --limit 20
shieldx job <id>           # show single job detail
shieldx jobs delete <id>   # delete job and files

shieldx doctor

System health check — Node version, local storage stats, optional remote server ping.

shieldx doctor

shieldx config

View and edit CLI configuration.

shieldx config show
shieldx config set url https://your-server.com
shieldx config set defaultProfile paper
shieldx config reset

Protection Profiles

| Profile | Target | Notes | |---|---|---| | paper-safe | Paper / Spigot plugins | ★ Recommended — auto-excludes plugin.yml classes | | fabric-safe | Fabric mods | Mixin-aware, preserves fabric.mod.json refs | | forge-safe | Forge / NeoForge mods | Preserves @Mod and event bus classes | | velocity-safe | Velocity proxy | Preserves @Plugin classes | | bungee-safe | BungeeCord proxy | Preserves plugin.yml classes | | library-safe | Shared libraries | Public API surface preserved | | enterprise-safe | Java applications | Balanced protection for production apps | | aggressive | Any | Maximum — all transforms, may break reflection |

Local Storage

All data is stored locally at ~/.config/shieldx/:

~/.config/shieldx/
  config.json          CLI configuration
  jobs.json            Job history
  jobs/<id>/
    input.jar          Original JAR (uploaded)
    output.jar         Protected JAR (download this)
    mapping.txt        Full rename mapping

Features

• AES-256 string encryption — string literals encrypted at bytecode level
• Control flow obfuscation — opaque predicates, flow flattening
• Class/method/field renaming — deterministic, collision-free
• Smart Safe Mode — auto-excludes plugin manifest classes and reflection users
• Protection score — per-job breakdown (string, flow, rename, watermark)
• Mapping file — deobfuscate stack traces with the generated map
• 9 built-in profiles — pre-tuned for every major Java platform

License

MIT © Zoniex Labs