General
Which frameworks does Switch Trust CLI support?
Which frameworks does Switch Trust CLI support?
Switch Trust Scan analyzes Python files (
.py) that import supported frameworks:- Google ADK (
google.adk) - Google GenAI (
google.genai) - Anthropic SDK (
anthropic) - OpenAI SDK (
openai) - OpenAI Agents SDK (
agents) - LangGraph (
langgraph) - CrewAI (
crewai) - AutoGen (
autogen) - HuggingFace Transformers (
transformers) - HuggingFace smolagents (
smolagents)
Support for additional frameworks and TypeScript/JavaScript is on the roadmap.
Is Switch Trust CLI free?
Is Switch Trust CLI free?
Yes, completely free. No credit card required, no usage limits. You only pay for the API calls to your chosen LLM provider (Google, OpenAI, or Anthropic) when scanning.
Does Switch Trust CLI send my code anywhere?
Does Switch Trust CLI send my code anywhere?
Only to the LLM provider you configure. Switch Trust CLI runs on your machine, but the AI reasoning layer of Switch Trust Scan sends your source code, including whole files, to the LLM set by
GENERATOR_MODEL.What gets sent:- Source files are sent to your chosen LLM provider for AI reasoning during scan. Common secret formats are masked when files are read, but masking is best effort, not a guarantee
- Supported providers: Google Gemini, OpenAI, Anthropic, LiteLLM (proxy to 100+ providers), or Ollama (local models)
- You control which provider via the
GENERATOR_MODELenvironment variable - The dependency check sends the package names and versions in your requirements files, not your code, to the OSV vulnerability database (
api.osv.dev)
- Your code, prompts, and findings never go to SandboxAQ. The CLI sends SandboxAQ usage analytics only with your consent; see Usage analytics
- Your agent HTTP endpoints are only called from your machine
- If you configure Ollama (or any local LiteLLM backend), no code leaves your machine
How do I upgrade switch-trust-cli?
How do I upgrade switch-trust-cli?
Reinstall with pip to get the latest version:Verify the new version:Your existing config and results in
~/.switch-trust/ are preserved across upgrades.
