Skip to content

ThreatOptic Docs

Install the CLI, authenticate with an API key, and look up lookalikes from the terminal.

Install

One-liner for macOS, Linux, and Windows, plus Homebrew and source builds. Get the binary.

Authenticate

Create a top_ key in the dashboard, then run threatoptic auth login. Quickstart.

Look up lookalikes

threatoptic check stripe.com returns live lookalikes for a domain, package, or MCP name. Commands.

Configure

Flags, environment variables, and ~/.config/threatoptic/config.yaml. Configuration.