CLI reference

Auto-generated from the live Click command tree at build time. If a flag isn’t listed here it doesn’t exist — either add it to the source or stop looking. To verify locally:


mnexus --help

`mnexus`

🔱 MEDUSA NEXUS — unified mobile threat analysis. Run with no args for the interactive REPL.


mnexus <subcommand>

flag	type	default	description
`--version`	BOOLEAN	`False`	Show the version and exit.

`mnexus dev`

Dev mode: install deps if needed, start server with reload, stream status.


mnexus dev

flag	type	default	description
`--host`	TEXT	`127.0.0.1`
`--port`	INTEGER	`8765`

`mnexus doctor`

Verify every engine is installed, reachable, and not lying about its version.


mnexus doctor

`mnexus find`

Grep the project’s static workspace (jadx + apktool + secrets) for a string or regex.


mnexus find <project_id> <pattern>

flag	type	default	description
`--regex`	BOOLEAN	`False`	Treat pattern as a Python regex.
`-i` / `--case-insensitive`	BOOLEAN	`False`	Match without case sensitivity.
`--max`	INTEGER	`200`	Cap the result count (default 200).
`--json`	BOOLEAN	`False`	JSON output for CI.

`mnexus findings`

List findings on a project. Pair with —json for CI consumption.


mnexus findings

flag	type	default	description
`--project`	TEXT	`Sentinel.UNSET`	Project id (PRJ-…).
`--severity`	CHOICE	—	Filter by severity floor (everything at or above).
`--json`	BOOLEAN	`False`	Emit a JSON array on stdout.

`mnexus manifest`

Print the decoded AndroidManifest.xml (or Info.plist) for a project. Pipeable.


mnexus manifest <project_id>

flag	type	default	description
`--output`	PATH	—	Write the XML to this path instead of stdout.
`--json`	BOOLEAN	`False`	Emit the structured parse as JSON instead of the raw XML.

`mnexus mcp-serve`

Run as an MCP (Model Context Protocol) stdio server — wire MedusaNexus into Claude Desktop / Cursor / Zed.


mnexus mcp-serve

flag	type	default	description
`--api-base`	TEXT	—	Override the local Nexus API base URL (default: http://127.0.0.1:8765 or $MNEXUS_API_BASE).

`mnexus play-account`

Manage stored Play identities (the account manager that backs play-scan).


mnexus play-account <subcommand>

`mnexus play-account add`


mnexus play-account add

flag	type	default	description
`--name` / `-n`	TEXT	`Sentinel.UNSET`	Short handle for this identity (alphanumeric / - / _ only).
`--email` / `-e`	TEXT	`Sentinel.UNSET`	Gmail address tied to the account.
`--aas` / `-a`	TEXT	—	AAS master token. Omit to use —password mode.
`--password` / `-p`	TEXT	—	Password / app password; minted to AAS via /auth and not stored.
`--notes`	TEXT	—	Free-form note (e.g. ‘qa rig’, ‘research-2026-q2’).
`--default`	BOOLEAN	`False`	Mark this account as the default for /play-scan.

`mnexus play-account delete`

Remove a stored account by name.


mnexus play-account delete <name>

`mnexus play-account list`

Show stored Play identities (no token values are echoed).


mnexus play-account list

`mnexus play-account show`

Show one account’s metadata (token is redacted).


mnexus play-account show <name>

`mnexus play-account use`

Mark <name> as the default account for /play-scan.


mnexus play-account use <name>

`mnexus play-scan`

Stream an APK from Google Play and scan for Firebase / credential leaks.


mnexus play-scan <package>

flag	type	default	description
`--apk`	PATH	—	Local APK file to scan instead of fetching from Play.
`--account` / `-A`	TEXT	—	Stored Play identity to scan as (default: the one flagged default).
`--no-probes`	BOOLEAN	`False`	Skip the active Firebase / Firestore / Storage probes (offline mode).

`mnexus project`

Project lifecycle — backup + delete with full data wipe.


mnexus project <subcommand>

`mnexus project backup`

Backup one or every project to a .zip archive. Default output: <workspace>/backups/.


mnexus project backup <project_id>

flag	type	default	description
`--all`	BOOLEAN	`False`	Backup every project in the store.
`--output`	PATH	—	Override the output directory (defaults to <workspace>/backups/).
`--json`	BOOLEAN	`False`	JSON output for CI.

`mnexus project delete`

Wipe one or every project from disk + DB. Destructive; pass —yes.


mnexus project delete <project_id>

flag	type	default	description
`--all`	BOOLEAN	`False`	Delete every project. Equivalent to factory reset.
`--yes`	BOOLEAN	`False`	Explicit confirmation. Required.
`--json`	BOOLEAN	`False`	JSON output for CI.

`mnexus projects`

List stored projects. Pair with —json for CI consumption.


mnexus projects

flag	type	default	description
`--json`	BOOLEAN	`False`	Emit a JSON array on stdout.

`mnexus repl`

Open the interactive REPL (default when run with no args).


mnexus repl

`mnexus report`

Generate a report — every template ships a Mitigation Playbook.


mnexus report

flag	type	default
`--project`	TEXT	`Sentinel.UNSET`
`--template`	CHOICE	`technical`
`--format`	CHOICE	`markdown`
`--output`	PATH	`Sentinel.UNSET`

`mnexus scan`

Static scan: ingest an APK, run every static engine, build the attack surface.


mnexus scan <apk_path>

flag	type	default	description
`--package`	TEXT	—	Target package name (auto-detected if omitted).
`--version`	TEXT	—	Version name (auto-detected if omitted).
`--json`	BOOLEAN	`False`	Emit a machine-readable JSON summary on stdout. Suppresses the Rich-formatted panel.
`--fail-on`	CHOICE	—	Exit non-zero if any finding at or above this severity exists. Pair with —against to fail only on new findings vs a prior scan.
`--against`	TEXT	—	Prior project id to diff against when applying —fail-on. Without it, —fail-on counts every finding on the new scan.

`mnexus serve`

Start the FastAPI backend + serve the web UI. Local-first by default.


mnexus serve

flag	type	default	description
`--host`	TEXT	`127.0.0.1`
`--port`	INTEGER	`8765`
`--reload`	BOOLEAN	`False`	Auto-reload on file changes (dev only).

`mnexus vphone`

super-tart-vphone control (research-only).


mnexus vphone <verb> <rest>