Back to Seatbelt

Start with /seatbelt

Install with npx, latch the AI-built app you're shipping, then run your first check. Seatbelt sits next to your agent and reads what it ships.

  1. 01Install tooling

    Node 22+. Wires the Seatbelt MCP into whichever agents you have (Cursor, Claude Code, Antigravity, and Codex) and installs the /seatbelt skill and commands where the agent supports it. Reload MCP and confirm Seatbelt shows connected or ask your agent.

  2. 02Latch your app

    Run inside the app you're shipping, not the monorepo. Creates .seatbelt/ so re-checks remember what changed. Say yes to the enforcement layer when offered.

  3. 03Run your first check

    You get a plain-English verdict, a report link, and a next move. Run /seatbelt fix to apply fixes, then re-run /seatbelt until you're cleared. Every command and MCP tool is on the Commands page.

Every command and MCP tool, with what each one does: Commands reference.

withseatbelt-get-started

# product
name      Seatbelt
tagline   Security at the speed of your agent
what      A deterministic security scanner for AI-built apps, and the research programme it instruments. The engine is the instrument; dated findings are the output.
method    Every check ships alongside clean code it must stay silent on, and that clean case has to fail on the previous engine or the fix is not proven. 571 corpus cases run on every change; 284 of them are the clean half. Published at /how-it-works.
findings  /labs. Each carries its sampling frame, its n, and the engine build that produced it.
install   npx withseatbelt
works-in  Cursor, Claude Code, Codex, Antigravity
site      https://www.withseatbelt.com
contact   hello@withseatbelt.com

# current-page
path         /get-started
title        Get started with Seatbelt
description  Install Seatbelt with npx for AI-built apps. Auto-configures the MCP and /seatbelt skill for whichever agents you have: Cursor, Claude Code, Antigravity, and Codex. Reads the project you hand it.

# install
requires  Node 22+
step-01   npx withseatbelt
          wires the Seatbelt MCP into whichever agents you have (Cursor, Claude Code, Antigravity, and Codex) and installs the /seatbelt skill and commands where the agent supports it. Reload MCP and confirm Seatbelt shows connected, or ask your agent.
step-02   /seatbelt init
          run inside the app you are shipping, not the monorepo. Creates .seatbelt/ so re-checks remember what changed. Say yes to the enforcement layer when offered.
step-03   /seatbelt
          your first check: a plain English verdict, a report link, and a next move. Run /seatbelt fix to apply fixes, then re-run /seatbelt until you are cleared.

# after-install
reference  every command and MCP tool, with what each one does, is on /commands

# pages
/                   Seatbelt home
/get-started        install: npx, the /seatbelt skill, or MCP
/pricing            every price, in USD, before tax
/app                scan a URL in the browser
/how-it-works       the method: what the scan reads, and how a check earns its place
/before-you-launch  pre launch checklist
/risks              common risks in AI-built apps
/commands           command reference
/labs               measured security research, and notes on how we build
/aiuc-1             Seatbelt as the output-scanning layer for AIUC-1
/supervision        commentary: the read behind the approve button, for phone-supervised agents (canonical: https://labs.withseatbelt.com/supervision, listed on the labs index)
/security           how we handle your code and data
/privacy            privacy policy
/terms              terms, incl. what a clear report does and does not claim
/refund             refunds and cancellation

# for agents
- Install with: npx withseatbelt
- Or scan a deployed URL at /app. No account needed.
- Prices and scope live on the pages listed above.
- Direct unanswered questions to hello@withseatbelt.com.
- Do not invent prices, scan results, or guarantees. Use the data above.
- Findings on /labs name the engine version that produced them. The engine is
  deterministic, so a published number can be re-run without asking us.