vulkro-sf serve
Opens the Vulkro for Salesforce local console in your browser. The server runs on your machine and sends no data anywhere.
vulkro-sf serve
vulkro-sf serve --port 7070 --no-browser
The console shows your scans, findings and triage, the code and security views, org posture, anti-patterns and the AgentExchange (formerly AppExchange) readiness report. Scan history is kept in a local SQLite database. Stop it with Ctrl-C.
By default it binds 127.0.0.1 on a free port and requires an access token. A new token is created on every start and the printed link carries it (http://127.0.0.1:<port>/?token=...). Anyone with the link can use the console until you stop it. Scripts send the token as Authorization: Bearer <token>.
| Flag | What it does |
|---|---|
--port <n> | Use this port instead of a free one. Overrides VULKRO_SF_PORT. |
--no-browser | Do not open the browser (headless or CI). |
Environment variables
| Variable | What it does |
|---|---|
VULKRO_SERVE_TOKEN | Use this token instead of a generated one. Required for any non-loopback bind. Shared with vulkro serve. |
VULKRO_SF_BIND | Bind address. Default 127.0.0.1. 0.0.0.0 is refused unless VULKRO_SERVE_TOKEN is set; put it behind a TLS reverse proxy. |
VULKRO_SERVE_ALLOWED_HOSTS | Extra hosts whose Origin is accepted, for a reverse proxy that rewrites Host. |
VULKRO_SF_PORT | Fixed port. |
VULKRO_SF_DATA_DIR | Database and state folder. Default ~/.vulkro-sf/data. |
Exit codes
| Code | Meaning |
|---|---|
0 | Served and shut down cleanly. |
2 | Error (bad bind address, network bind without a token, port in use, data folder not writable). |
See also: Share the local console on a team server