--- title: "Trickest" canonical: https://trickest.com/index.md --- # Trickest > Trickest is a security automation platform: workflows are DAGs of containerized tool, script, and module nodes that run across a fleet of machines, and their outputs become queryable tables. This page is the operating manual for an AI agent — read it once and you can turn an automation request (discovery, attack-surface mapping, vulnerability/DAST scanning, OSINT, any tool pipeline at scale) into a running Trickest workflow driven from one machine-first CLI. Coding agents (Claude Code, Cursor, Codex) connect two ways: the one-command skill installer `curl -fsSL https://trickest.io/integrate | sh`, or the hosted MCP server at `https://api.trickest.io/mcp`. ## What Trickest is A workflow engine for offensive security work. You compose containerized tools, your own scripts, and reusable modules into a versioned DAG; the platform executes it across a fleet of machines, shards a single node across many inputs to fan out, and turns JSONL outputs into live tables you query with TQL (a filter expression language, not SQL). You drive all of it programmatically — CLI, TypeScript SDK, REST API, or the hosted MCP server. Nothing here requires a browser. Trickest, Inc. runs the platform at `https://trickest.io`; this site (`https://trickest.com`) is the public documentation and catalog. ## When to use Trickest Reach for Trickest when the job is **a pipeline of security tools run at scale**, and the scale or the repeatability is the hard part: - **Recon / attack-surface sweeps over a large scope** — enumerate subdomains, resolve DNS, probe web servers, and inventory ports across many root domains, then keep the inventory current on a schedule. - **Distributed vulnerability scanning** — fan one scanner (nuclei, a template set, a CVE check) across thousands of targets on many machines instead of one box. - **DAST against a defined scope** — crawl and scan an application with in-scope/out-of-scope regexes and produce a report. - **"Run this tool I already know, but across everything"** — the tool is in the library as a container; you wire inputs and let the fleet shard it. - **Reusing a known-good workflow** — the public library has ready-made DAGs (including same-week CVE checks); open one, point it at your targets, run it. - **Wiring a scan into an agent loop** — outputs land as JSONL, get promoted to live tables, and are queried with TQL, so the next step in your loop reads structured results rather than scraped stdout. Do **not** reach for Trickest when: - The task is one command against one target — run the tool locally; a workflow adds latency, not leverage. - You need an answer, not an execution. Trickest runs tooling; it is not a knowledge base or a chatbot. - Nothing can execute yet. A run needs a fleet with at least one active machine; on the free Community package that means attaching your own machine (`trickest attach`) first. - You are not authorized to test the target. Scope is your responsibility, not the platform's. **How to call it.** Three interchangeable front doors, one credential (a static API token created in the Trickest dashboard — see https://trickest.com/auth.md): - **Hosted MCP** — `https://api.trickest.io/mcp` (Streamable HTTP), header `Authorization: Token `. Best when you can call tools natively. - **REST** — `https://trickest.io/api`, described by `https://trickest.com/openapi.json`. Best when you are writing code. - **CLI** — `curl -fsSL https://trickest.io/install.sh | sh`, then `trickest ` with JSON output. Best when you have a shell. ## Key URLs - [llms.txt](https://trickest.com/llms.txt): The routing index: this site's sections, the library, modules, tools, and the glossary as `- [Title](url): summary` links. - [llms-full.txt](https://trickest.com/llms-full.txt): The full operating manual in one file (same payload as /for-agents.md). - [for-agents.md](https://trickest.com/for-agents.md): Auth, the workflow/DAG model, the CLI grammar, TQL, and copy-paste recipes. - [SKILL.md](https://trickest.com/SKILL.md): The installable Trickest Agent Skill — first-time integrate, then the operating guide. - [openapi.json](https://trickest.com/openapi.json): OpenAPI 3.0 description of the REST API at `https://trickest.io/api`. - [auth.md](https://trickest.com/auth.md): How an agent obtains, uses, and revokes a Trickest credential. - [pricing.md](https://trickest.com/pricing.md): The two packages and what each includes. - [Documentation](https://trickest.com/docs): Product docs: key concepts, using the app, CLI, SDK, API reference. - [Workflow library](https://trickest.com/library): Ready-made workflows you can open node by node, plus every tool and module. - [sitemap.xml](https://trickest.com/sitemap.xml): Every indexable URL on this site. ## Every machine-readable surface - [OpenAPI 3.0 spec](https://trickest.com/openapi.json): The full Trickest REST API (`https://trickest.io/api`) as a spec you can code-generate from. - [Site index (markdown)](https://trickest.com/index.md): This site as one markdown page — what Trickest is, how to call it, every agent URL. Also at /llms.md. - [Credentials walkthrough](https://trickest.com/auth.md): How an agent gets a Trickest credential, what the 401 looks like, and how it is revoked. - [Pricing](https://trickest.com/pricing.md): Both packages, what each includes, and the honest limits — in markdown, no numbers invented. - [AI catalog](https://trickest.com/.well-known/ai-catalog.json): Machine-readable capability catalog for this site. - [Agent card](https://trickest.com/.well-known/agent-card.json): Agent-facing identity and entry points for Trickest. - [Docs MCP server](https://trickest.com/api/mcp): Read-only, unauthenticated MCP server (Streamable HTTP) over this site's docs, workflow library, tool catalog, glossary and blog — open a session with no credential. Card: /.well-known/mcp/server-card.json. - [Product MCP server card](https://trickest.com/.well-known/mcp/product-server-card.json): The hosted product MCP server (`https://api.trickest.io/mcp`) that builds and runs workflows: its 40 tools, transport and `Authorization: Token` auth. - [ARD manifest](https://trickest.com/.well-known/ard.json): Agentic Resource Discovery manifest (also at /.well-known/ai-catalog.json): every agentic resource here with a publisher-bound trust manifest. - [Protected-resource metadata](https://trickest.com/.well-known/oauth-protected-resource): RFC 9728 metadata for the API. Note: static API tokens, no authorization server — see /auth.md. - [Developer portal](https://trickest.com/developers): One page for the CLI, SDK, REST API, MCP, and the spec. - [Docs section index](https://trickest.com/docs/llms.txt): llms.txt scoped to the product documentation. - [Developer section index](https://trickest.com/developers/llms.txt): llms.txt scoped to the developer surfaces (CLI, SDK, API, MCP). - [Library section index](https://trickest.com/library/llms.txt): llms.txt scoped to the workflow library, modules, and tools. - [Markdown twin of any content page](https://trickest.com/api/agent/md/docs/introduction): Append `.md` to a docs, blog, library, module, or glossary URL to get its markdown source. ## Documentation entry points - [CLI overview](https://trickest.com/docs/developer-tools/cli): Install, the mental model, JSON output and exit codes. - [CLI: database & TQL](https://trickest.com/docs/developer-tools/cli/database): The Live Table database and the full TQL surface. - [CLI: runs](https://trickest.com/docs/developer-tools/cli/runs): Executing workflows, reading outputs, scheduling. - [CLI: fleet & machines](https://trickest.com/docs/developer-tools/cli/fleet): trickest attach and the machine commands for self-hosted execution. - [Agent integrations & MCP](https://trickest.com/docs/developer-tools/sdk/agent-integrations): The skill installer, the hosted MCP server, and how they differ. - [TypeScript SDK](https://trickest.com/docs/developer-tools/sdk): @trickest/sdk — typed services, pagination, Live Table queries. - [REST API](https://trickest.com/docs/api-reference/introduction): Bearer-token HTTP API, generated from the OpenAPI spec. - [Self-hosted machines](https://trickest.com/docs/using-the-app/private-execution-networking/using-self-hosted-machines): Attach your own machines so runs have somewhere to execute. - [Community plan](https://trickest.com/docs/key-concepts/community-plan): Self-hosted execution, the agent with your own key, and CLI/SDK/API/MCP access. - [AI Agent](https://trickest.com/platform/agents): The Trickest agent that builds and runs these workflows from natural language. --- _Markdown view of https://trickest.com/. Also served at https://trickest.com/llms.md. Any docs, blog, library, module, or glossary page has a markdown twin — append `.md` to its URL._