Overview
defenseclaw is the Python control-plane CLI. It provisions config, drives
scanners, manages policy, and wraps the gateway sidecar lifecycle. Run it
anywhere you have the Python package installed.
How to use this page
The table below is auto-generated from the Click root group — every command that exists in the Python CLI shows up here. Click the link for the full flag reference, options, env vars, and usage recipes. For globals (--help, --version, --config) see the CLI overview.
Reference
Global synopsis
defenseclaw [--version] [--help] <command> [<args>]
Commands
| Command | Description |
|---|---|
| aibom | AI Bill of Materials — scan live OpenClaw inventory. |
| alerts | View and manage security alerts. |
| audit | Audit trail helpers (activity logging). |
| codeguard | CodeGuard static-analysis skill management. |
| config | Inspect and validate DefenseClaw configuration. |
| doctor | Verify credentials, endpoints, and connectivity. |
| init | Initialize DefenseClaw environment. |
| keys | Inspect and manage DefenseClaw API keys. |
| mcp | Manage MCP servers — scan, block, allow, list, set, unset. |
| plugin | Manage DefenseClaw plugins — install, list, remove, scan, block, allow, disable, enable, quarantine, restore. |
| policy | Manage DefenseClaw security policies — create, list, show, activate, validate, test, edit. |
| quickstart | Zero-prompt end-to-end setup with safe defaults. |
| reset | Wipe ~/.defenseclaw so 'defenseclaw quickstart' starts clean. |
| sandbox | [experimental] Manage openshell-sandbox standalone mode. |
| settings | Operator settings (parity with the TUI setup panel save path). |
| setup | Configure DefenseClaw components. |
| skill | Manage OpenClaw skills — search, install, scan, block, allow, disable, enable, quarantine, restore. |
| status | Show DefenseClaw status. |
| tool | Manage tool-level block/allow lists. |
| tui | Launch the DefenseClaw interactive dashboard (TUI). |
| uninstall | Uninstall DefenseClaw (reversibly by default). |
| upgrade | Upgrade DefenseClaw to the latest version. |
| version | Show DefenseClaw CLI / gateway / plugin versions and flag drift. |
Global options
| Flag | Type | Default | Env var | Required | Description |
|---|---|---|---|---|---|
--version | boolean | — | — | no | Show the version and exit. |
Automation tips
See Automation for CI/CD patterns, exit code handling, and JSON output conventions.