Skip to main content

JupiterOne from the command line

Security asset graph, alerts, rules and dashboards. GBrain gives JupiterOne, and every other application you connect, a command line.

Get Personal, $49 a month

One price for one person: JupiterOne and every other application GBrain connects, from a terminal or any AI. Cancel any time.

Install the GBrain command line, then connect JupiterOne

JupiterOne is connected on its own sign-in page, in the browser. A key or a sign-in never passes through the terminal.

# AI agents: read gbrain.io/llms.txt
curl -sSL https://gbrainio.terminalwire.sh | bash
gbrainio terminal connect

The installer is a shell script for macOS and Linux. Read it before you run it.

# Every JupiterOne command, once JupiterOne is connected
gbrainio tool help jupiterone

What GBrain can do with JupiterOne

JupiterOne maps cloud resources, identities, devices and vulnerabilities, and how they connect, into one graph. Connected to a workspace, GBrain can answer “which public S3 buckets hold sensitive data?”, sort through open alerts, or add a rule that watches for a new risk.

Every action runs with the signed-in person’s JupiterOne permissions.

  • Query assets with J1QL
  • Triage active alerts
  • Create and evaluate detection rules
  • Check integrations and build dashboards

What a terminal may do with JupiterOne, and what GBrain keeps

Off or On, for each terminal

Each terminal reaches JupiterOne at the level set for it in the browser: Off, or On, which is every command JupiterOne's server lists. A terminal reads its level and never raises it.

1,000 actions a day for each command

Each of JupiterOne's commands stops at 1,000 actions a day on the account it reaches, whichever terminal or AI asks, and starts again at midnight UTC. Only that command stops.

Every action on one record

Each command a terminal runs on JupiterOne is a row on GBrain's activity log: which terminal, which account, what it did and whether it was allowed, refusals included. gbrainio activity ls --tool jupiterone reads it back.

From a terminal, Claude Code or Codex

JupiterOne's own server lists its commands only to a terminal that has connected it, so they are not on this page. Once JupiterOne is connected, gbrainio tool help jupiterone says what each of them does, and gbrainio tool ls lists them with everything else the terminal can run. Claude Code and Codex run the same commands, at the same level, on the same record.

From JupiterOne

GBrain reaches JupiterOne at its own server, mcp.us.jupiterone.io. On JupiterOne's own pages: its website, how the connection works, its terms of service and its privacy policy.

The GBrain Tools command line works with every other application GBrain connects, each with a page like this one.

Every application's command line

JupiterOne from a terminal, with GBrain Personal

Personal is $49 a month for one person. Connect JupiterOne in the browser, and say how far each terminal and each AI may go with it. Change any of it, or take all of it back, whenever you want.