GuardpupDeveloper Tool Commands
Every guardpup command, grouped by what it's for. guardpup --help
shows the same list in your terminal.
Set Up
| Command | What it does |
|---|---|
guardpup init | Protects every project in Claude Code, and offers the other agents it finds. --project: just this project, kept out of git. |
guardpup init --cursor | The same checks for Cursor. Also --vscode (VS Code's Copilot agent), and --gemini and --devin (built from their docs, being tested). |
guardpup status | Your settings, and whether the check is wired in. |
guardpup doctor | Runs the installed check the way your agent will, and says if anything is wrong. |
Find What's Exposed
| Command | What it does |
|---|---|
guardpup scan [path] | Credential files and secrets already in your project. --json for pipelines, --ci for one line per finding. |
guardpup scan --history | Secrets you sent your coding agents, from the chat history they keep on your computer, and where to rotate each one. --agent cursor for one agent, --json for machines. |
guardpup scan --history --rotated <id> | A key you replaced stops showing. --not-rotated undoes it; --all lists them all. |
guardpup allow <fingerprint> | Stops reporting a finding. --path <glob> for a file or folder. |
See What Happened
| Command | What it does |
|---|---|
guardpup log [-n 20] | The latest decisions: what was stopped, asked about or let through. |
guardpup report [--days 7] Pro | What your agents tried, and what was stopped. |
guardpup connections | Every time Guardpup connected to guardpup.io from this computer, and why. |
Adjust
| Command | What it does |
|---|---|
guardpup level [strict|balanced|relaxed] | How much deploys, merges and the like are asked about. balanced to start. |
guardpup approved | What you've "approve always"d in this project. --forget <rule> or --forget-all to take it back. |
guardpup pause [1h] | Turns Guardpup off for a while: nothing is checked until it ends. |
guardpup resume | Ends a pause now. |
guardpup protect Pro | Adds something of yours to protect, typed in so it never lands in your shell history. --kind secret|id|private|word, --label "Work email password"; --list to see them, --remove <id> to delete one. |
guardpup usage [on|off] | Anonymous weekly usage counts, off unless you turn them on. With no word, shows exactly what would be sent. |
Account and Team
| Command | What it does |
|---|---|
guardpup login | Signs in for Pro: opens your browser to approve. |
guardpup account | Your plan, checked now. |
guardpup join '<link>' | Follows your company's rules, from the team link it shared. |
guardpup team | Your company's rules. guardpup leave to leave. |
guardpup verify [path] | Checks that the Guardpup in your browser is the one that was published. --list: every file. |
Remove
| Command | What it does |
|---|---|
guardpup uninstall | Takes Guardpup out of every agent and project, asks about your data, then offers to remove the command. --all: everything without asking; --keep-data; --project: this project only; --cursor, --gemini, --devin or --vscode: that agent only. |
guardpup hook is what your agent runs for each tool call; you don't need to run it yourself.
Set GUARDPUP_NO_UPDATE_CHECK=1 to turn off the daily new-version check.