watchmen-cli

Developer environment intelligence platform — 16 scanners, 58 MCP tools, zero dependencies.

Install

npm install -g watchmen-cli

Or use directly:

npx watchmen-cli version

How install works (no postinstall download)

watchmen-cli is a small JS shim. The platform binary ships inside one of three sibling packages, picked by npm via optionalDependencies based on your host's os + cpu:

| Platform | Package | |---|---| | macOS arm64 (Apple Silicon and Rosetta x86_64) | watchmen-cli-darwin-arm64 | | Linux x86_64 | watchmen-cli-linux-x64 | | Windows x86_64 | watchmen-cli-win32-x64 |

There is no postinstall script, no network download at install time, and no SHA-256 round-trip. npm itself verifies the tarball checksum of every package it downloads from the registry.

What it does

WatchmenCLI scans your development environment across 16 dimensions (packages, runtimes, secrets, Docker, network, permissions, databases, browser extensions, disk, macOS security posture, and more), adds supply-chain exposure scanning that reads lockfiles without executing the package manager, indexes 30+ document formats with OCR, and exposes everything as 58 MCP tools (66 with the Enterprise edition) for AI coding assistants.

Usage

wm scan              # Full environment scan
wm health            # Disk, memory, security score 0-100
wm secrets live      # Show secret values (local only)
wm monitor           # Real-time TUI dashboard
wm mcp               # Start MCP server for Claude/Cursor
wm doctor            # Self-diagnostic

Links

• Website: https://trywatchmen.cloud
• Trust & verification: https://trywatchmen.cloud/trust
• Public metadata repo: https://github.com/watchmencli/watchmen-cli-public
• Docs: https://trywatchmen.cloud/docs