CLI tools

Every MerchantGuard CLI is published to npm and can be invoked with npx against any project. No global install needed.

GuardScan — local security scan

npx @merchantguard/guardscan .

Scans the current directory through 102 patterns + VirusTotal + AI judge. Use it pre-commit, in CI, or before publishing an SDK. See /docs/products/guardscan.

Mystery Shopper — adversarial agent audit

npx @merchantguard/mystery-shopper https://your-agent.example.com

Sends 10 adversarial probes to the target endpoint and prints a TrustVerdict tier (Diamond / Gold / Verified / Unverified). See /docs/products/mystery-shopper.

AgentGuard CB — keygen + ingest + stage

# Generate Ed25519 signing key (you generate, you hold)
npx agentguard-cb keygen > .dd.ed25519

# Ingest a dispute by ID, sources are connectors you've configured
npx agentguard-cb ingest dp_xxx --sources=stripe,shopify

# Compile + stage with submit:false (default)
npx agentguard-cb stage dp_xxx

See /docs/products/agentguard-cb.

Skill bundle install

npx skills add MerchantGuard/agent-skills

Installs the full MerchantGuard skill bundle into an OpenClaw or compatible agent stack: guardscore, guardscan, mystery-shopper, agent-certify, high-risk-coach.