Quick start

1. Install the agent

Create a free account, then open Install agent in your dashboard and copy the one-line command. It includes a one-time code that signs the agent in automatically. The agent is a single native binary and does not require Node.js to run.

curl -fsSL https://shadowcanopy.dev/install.sh | SHADOWCANOPY_INSTALL_CODE=inic_… bash

Windows (PowerShell): copy the command from the dashboard, or see install.ps1.

2. Install packages through ShadowCanopy

Prefix your normal package commands with scanopy. Malicious or unverified packages are blocked before they touch disk.

scanopy npm install express
scanopy pip install requests
scanopy cargo add serde
scanopy go get github.com/pkg/errors

Run scanopy doctor to see which toolchains are protected, and scanopy ai-protect to route your AI coding tools through the same gate.

Full documentation

Every command, policy, and dashboard option is documented inside your account — including scan profiles, threat-intel settings, allow/deny lists, AI protection, roles, and integrations.