diff --git a/test/cli/testdata/cnquery.ct b/test/cli/testdata/cnquery.ct
index b57d282d1c..91d1d2c569 100644
--- a/test/cli/testdata/cnquery.ct
+++ b/test/cli/testdata/cnquery.ct
@@ -17,10 +17,10 @@ Available Commands:
   login         Register with Mondoo Platform.
   logout        Log out from Mondoo Platform.
   providers     Providers add connectivity to all assets.
-  run           Run a query with your local system
-  sbom          Collect a software bill of materials (SBOM) for your local system
-  scan          Scan your local system
-  shell         Interactive shell with your local system
+  run           Run an MQL query.
+  sbom          Experimental: Generate a software bill of materials (SBOM) for a given asset.
+  scan          Scan assets with one or more query packs.
+  shell         Interactive query shell for MQL.
   status        Verify access to Mondoo Platform.
   vault         Manage vault environments.
   version       Display the cnquery version.
diff --git a/test/cli/testdata/cnquery_run.ct b/test/cli/testdata/cnquery_run.ct
index 18acbf1adf..f15f0bf5fd 100644
--- a/test/cli/testdata/cnquery_run.ct
+++ b/test/cli/testdata/cnquery_run.ct
@@ -6,34 +6,7 @@ Usage:
   cnquery run [command]
 
 Available Commands:
-  arista           Run a query with an Arista EOS device
-  atlassian        Run a query with Atlassian
-  aws              Run a query with an AWS account
-  azure            Run a query with an Azure subscription
-  container        Run a query with a running container or container image
-  docker           Run a query with a running Docker container or Docker image
-  equinix          Run a query with an Equinix Metal organization
-  filesystem       Run a query with a mounted file system target
-  gcp              Run a query with a Google Cloud project
-  github           Run a query with a GitHub organization or repository
-  gitlab           Run a query with a GitLab group or project
-  google-workspace Run a query with a Google Workspace account
-  host             Run a query with a remote host
-  ipmi             Run a query with an IPMI interface
-  k8s              Run a query with a Kubernetes cluster or local manifest file(s)
-  local            Run a query with your local system
-  mock             Run a query with use a recording without an active connection
-  ms365            Run a query with a Microsoft 365 account
-  oci              Run a query with an Oracle Cloud Infrastructure tenancy
-  okta             Run a query with Okta
-  opcua            Run a query with an OPC UA device
-  slack            Run a query with a Slack team
-  ssh              Run a query with a remote system via SSH
-  terraform        Run a query with a Terraform HCL file or directory
-  vagrant          Run a query with a Vagrant host
-  vcd              Run a query with a VMware Cloud Director installation
-  vsphere          Run a query with a VMware vSphere installation
-  winrm            Run a query with a remote system via WinRM
+  mock        Run a query with use a recording without an active connection
 
 Flags:
       --ast                    Parse the query and return the abstract syntax tree (AST).
diff --git a/test/cli/testdata/cnquery_scan.ct b/test/cli/testdata/cnquery_scan.ct
index c18c5abb69..0c09c55878 100644
--- a/test/cli/testdata/cnquery_scan.ct
+++ b/test/cli/testdata/cnquery_scan.ct
@@ -14,34 +14,7 @@ Usage:
   cnquery scan [command]
 
 Available Commands:
-  arista           Scan an Arista EOS device
-  atlassian        Scan Atlassian
-  aws              Scan an AWS account
-  azure            Scan an Azure subscription
-  container        Scan a running container or container image
-  docker           Scan a running Docker container or Docker image
-  equinix          Scan an Equinix Metal organization
-  filesystem       Scan a mounted file system target
-  gcp              Scan a Google Cloud project
-  github           Scan a GitHub organization or repository
-  gitlab           Scan a GitLab group or project
-  google-workspace Scan a Google Workspace account
-  host             Scan a remote host
-  ipmi             Scan an IPMI interface
-  k8s              Scan a Kubernetes cluster or local manifest file(s)
-  local            Scan your local system
-  mock             Scan use a recording without an active connection
-  ms365            Scan a Microsoft 365 account
-  oci              Scan an Oracle Cloud Infrastructure tenancy
-  okta             Scan Okta
-  opcua            Scan an OPC UA device
-  slack            Scan a Slack team
-  ssh              Scan a remote system via SSH
-  terraform        Scan a Terraform HCL file or directory
-  vagrant          Scan a Vagrant host
-  vcd              Scan a VMware Cloud Director installation
-  vsphere          Scan a VMware vSphere installation
-  winrm            Scan a remote system via WinRM
+  mock        Scan use a recording without an active connection
 
 Flags:
       --annotation stringToString    Add an annotation to the asset. (default [])