CLI Reference

Both CLIs use an interactive console. Enter the directory and run the script.

Tip

Run status first to verify which containers are up before issuing start or stop commands.

Manager CLI

cd manager/
./melissae-manager.sh
manager [3 active] >

Note

The number in brackets (e.g. [3 active]) shows how many manager containers are currently running.

Category	Command	Description
Core	status	Show manager services status
	start	Start manager services
	stop	Stop manager services
	restart	Restart manager services
	build	Rebuild manager containers
	update	Stop services, git pull --ff-only, rebuild containers without cache, then prompt to restart
Agents	enroll <name> <host>	Generate enrollment token for new agent
	agents	List registered agents with health status
	agent-exec <name> <action> [mod]	Remote: start/stop/restart/status on agent via mTLS. <action> is one of start, stop, restart, status. [mod] accepts ssh, ftp, proxy (web), modbus, mqtt, telnet, or all (default).
	revoke <name>	Revoke agent certificate and unregister
	agent-logs <name> [n]	Show logs from a specific agent
Certificates	certs list	List all issued certificates with expiry
	certs renew <name>	Renew an agent certificate
Modules	modules	List available honeypot module types
Monitoring	stats	Show attack statistics
	threats	Show top threat IPs with scores
	events [count]	Show recent events (default: 20)
Management	install	Install manager and initialize PKI
	destroy	Stop and remove all containers
Shell	clear, banner, version, exit	Console utilities

Agent CLI

cd agent/
./melissae-agent.sh
agent:my-agent [6 active] >

Note

The agent name (e.g. my-agent) is set during enrollment and matches the CN of the agent’s TLS certificate. The number in brackets shows running honeypot containers. Before enrollment it displays as agent:?.

Category	Command	Description
Core	status	Show all containers + daemon status
	start [module|all]	Start honeypots + agent daemon
	stop [module|all]	Stop modules
	restart	Restart all services
	build	Rebuild containers
	update	Stop modules and daemon, git pull --ff-only, rebuild honeypot containers without cache, then prompt to restart enabled modules
Modules	list	List available modules with status
	enable <module>	Enable a module in configuration
	disable <module>	Disable a module in configuration
Monitoring	buffer	Show SQLite buffer status (pending, size)
	test-connection	Test mTLS connectivity to manager
	logs <module> [n]	Show local raw logs for a module
	daemon-log [n]	Show agent daemon log
Management	install <url> <token>	Install agent and enroll with manager
Shell	clear, banner, version, exit	Console utilities