Skip to content

firmis discover - Discover AI Platforms and Components

Terminal window
firmis discover [path] [options]

You cannot secure what you do not know exists. firmis discover maps every AI component in your project before you scan it. It reports platforms, individual tools and skills, AI-related dependencies, and detected model files - with exact file paths for each.

Run this first on any unfamiliar codebase. The output shows exactly what firmis scan will look at and why. If a platform is missing from discover output, it will also be missing from your scan coverage.

firmis discover is read-only. It does not modify any files. For a machine-readable, audit-grade inventory in CycloneDX 1.7 format, use firmis bom instead. For immediate security findings, use firmis scan - it runs discovery automatically as part of the scan pipeline.

Detected platforms include: Claude, MCP, Codex, Cursor, CrewAI, AutoGPT, OpenClaw, and Nanobot.

Discover all platforms in the current directory

Section titled “Discover all platforms in the current directory”
Terminal
npx firmis discover
Terminal
npx firmis discover ./my-agent-project
Terminal
npx firmis discover --platform mcp
Terminal
npx firmis discover --json
Terminal
npx firmis discover --output discovery.json --json

Verbose output - see component metadata including versions and permissions

Section titled “Verbose output - see component metadata including versions and permissions”
Terminal
npx firmis discover --verbose
FlagTypeDefaultDescription
--platform <name>stringauto-detectDiscover a specific platform only. Accepted values: claude, mcp, codex, cursor, crewai, autogpt, openclaw, nanobot.
--jsonbooleanfalseOutput results as JSON instead of the human-readable format.
--output <file>stringstdoutSave discovery results to a file.
--verbosebooleanfalseShow detailed component metadata including version, author, permissions, and dependencies.
--show-depsbooleantrueInclude AI-related npm and pip dependencies in output.
--show-modelsbooleantrueInclude detected model files in output.
CodeMeaning
0Discovery completed successfully. Zero or more platforms found.
1Discovery failed with an unrecoverable error.
  • Platforms - what each detected platform means for your security posture
  • bom - turn discovery results into a CycloneDX 1.7 inventory for compliance audits
  • scan - scan everything discovery finds for actual threats
  • list - faster platform-only summary with no component detail