opencomplai-cli

The opencomplai command-line tool for AI compliance assessment. It scans your repository, classifies your AI system against the EU AI Act, reports gaps for every framework your manifest targets (NIST AI RMF 1.0 is derived from the EU AI Act evidence), and produces an auditable, CI-gateable compliance artifact.

Built on opencomplai-core — the same deterministic, rule-based risk engine, with a rich terminal UX.

Install

pip install opencomplai-cli

This pulls in opencomplai-core[reports] automatically. To install the full suite (engine + CLI) in one step, use the opencomplai meta-package instead.

Core commands

Also available as command groups (opencomplai <group> --help for their own subcommands): docs (Annex IV dossier generation), risk (risk classification), sync (metadata sync), keys (signing-key rotation), ai (optional AI-intent plugin configuration), controls (control-register status).

Run opencomplai --help for the full command list, or opencomplai <command> --help for options.

Quick start

The self-serve path: mint a key on the dashboard, export two env vars, sign a scan, push it.

# 1. Scaffold a manifest for your project
opencomplai init

# 2. Cross-check the manifest against your source tree
opencomplai scan --manifest system-manifest.json --repo-root .

# 3. Get an API key from the dashboard's /connect page (Projects -> your
#    project -> Connect), then export it alongside the dashboard's ingest URL
export OPENCOMPLAI_API_KEY=ock_...
export OPENCOMPLAI_DASHBOARD_URL=https://your-dashboard-host/api/ingest

# 4. Run the compliance gate and sign the artifact (writes compliance-artifact.json)
opencomplai check --sign

# 5. Push the signed artifact to the dashboard
opencomplai push

Following this start-to-finish lands the scan on the dashboard's /systems page for that project. /connect also generates ready-to-paste GitHub Actions / GitLab CI snippets that wire the same two env vars into a pipeline — see CI integration.

opencomplai check is the canonical CI gate. Its exit code is contractual:

So you can wire it straight into CI:

opencomplai check || exit $?

To publish an Annex IV dossier instead of (or in addition to) a scan-status artifact, run opencomplai docs generate --system-id ... --push — same OPENCOMPLAI_API_KEY / OPENCOMPLAI_DASHBOARD_URL as opencomplai push above.

Optional: AI intent analysis

Install the opencomplai-ai plugin to unlock the --ai-intent flag, which classifies how each AI callsite is actually used:

pip install opencomplai-ai
opencomplai scan --ai-intent

Documentation

Full CLI reference and guides at docs.opencomplai.com.

License

AGPL-3.0-only. See LICENSE.