opencomplai-cli

The opencomplai command-line tool for EU AI Act compliance assessment. It scans your repository, classifies your AI system against the EU AI Act, and produces an auditable, CI-gateable compliance artifact.

Built on opencomplai-core — the same deterministic, rule-based risk engine, with a rich terminal UX.

Install

pip install opencomplai-cli

This pulls in opencomplai-core[reports] automatically. To install the full suite (engine + CLI) in one step, use the opencomplai meta-package instead.

Core commands

Also available as command groups (opencomplai <group> --help for their own subcommands): docs (Annex IV dossier generation), risk (risk classification), sync (metadata sync), keys (signing-key rotation), ai (optional AI-intent plugin configuration), controls (control-register status).

Run opencomplai --help for the full command list, or opencomplai <command> --help for options.

Quick start

The self-serve path: mint a key on the dashboard, export two env vars, sign a scan, push it.

# 1. Scaffold a manifest for your project
opencomplai init

# 2. Cross-check the manifest against your source tree
opencomplai scan --manifest system-manifest.json --repo-root .

# 3. Get an API key from the dashboard's /connect page (Projects -> your
#    project -> Connect), then export it alongside the dashboard's ingest URL
export OPENCOMPLAI_API_KEY=ock_...
export OPENCOMPLAI_DASHBOARD_URL=https://your-dashboard-host/api/ingest

# 4. Run the compliance gate and sign the artifact (writes compliance-artifact.json)
opencomplai check --sign

# 5. Push the signed artifact to the dashboard
opencomplai push

Following this start-to-finish lands the scan on the dashboard's /systems page for that project. /connect also generates ready-to-paste GitHub Actions / GitLab CI snippets that wire the same two env vars into a pipeline — see CI integration.

opencomplai check is the canonical CI gate. Its exit code is contractual:

So you can wire it straight into CI:

opencomplai check || exit $?

To publish an Annex IV dossier instead of (or in addition to) a scan-status artifact, run opencomplai docs generate --system-id ... --push — same OPENCOMPLAI_API_KEY / OPENCOMPLAI_DASHBOARD_URL as opencomplai push above.

Optional: AI intent analysis

Install the opencomplai-ai plugin to unlock the --ai-intent flag, which classifies how each AI callsite is actually used:

pip install opencomplai-ai
opencomplai scan --ai-intent

Documentation

Full CLI reference and guides at docs.opencomplai.com.

License

AGPL-3.0-only. See LICENSE.