OpenA2A CLI

Command	Adapter	Description
`registry`	AI Trust	Trust Registry queries
`identity`	AIM	Agent identity management
`train`	DVAA	Vulnerable agent training
`crypto`	CryptoServe	PQC readiness
`broker`	Secretless	Credential broker daemon

Global Flags

Flag	Description
`--ci`	CI mode. No interactive prompts, machine-readable output.
`--quiet`	Suppress non-essential output.
`--verbose`	Verbose output with details.
`--format <text\|json\|sarif>`	Output format. Default: text.
`--contribute`	Share anonymized scan results with the community.
`-v, --version`	Show CLI version.
`-h, --help`	Show help.

Guides

Improving Your Trust Score

Step-by-step workflow: check, claim, scan, fix, badge, and monitor.

Trust Badges

Add dynamic trust score badges to your README with GitHub Actions.

CI/CD Integration

GitHub Actions and GitLab CI examples for automated security checks.

Smart Input Modes

Semantic search, contextual hints, natural language, and guided wizard.

Command Categories

The 24 commands are organized into six functional categories that cover the full agent security lifecycle:

Category	Commands	Purpose
Detection	`detect, mcp, status`	Discover unmanaged AI agents, MCP servers, and aggregate security posture.
Identity	`claim, trust, self-register, verify`	Manage agent identities, trust profiles, and binary integrity verification.
Governance	`scan-soul, harden-soul, review`	Evaluate and improve behavioral governance (SOUL.md) against OASB v2 controls.
Scanning	`scan, benchmark, baselines, secrets`	Run security checks, attack simulations, behavioral profiling, and credential scans.
Protection	`init, protect, guard, shield, runtime`	Assess posture, fix findings, sign configs, orchestrate defenses, and monitor at runtime.
Trust	`config, demo`	Manage CLI preferences and run interactive security walkthroughs.

Quick Start

After installation, the fastest way to assess your project is the three-command workflow:

# 1. Assess project security posture and trust score
opena2a init

# 2. Auto-fix credential leaks, .gitignore gaps, and config signing
opena2a protect

# 3. Full multi-phase review with HTML report
opena2a review

For CI/CD pipelines, append --ci --format json to any command for machine-readable output and non-zero exit codes on failures. See the CI/CD Integration guide for full pipeline examples.

Verify Installation

$ opena2a --version
opena2a-cli v0.5.4

$ opena2a --help
Usage: opena2a <command> [options]

Commands:
  init, protect, guard, runtime, verify, shield,
  detect, mcp, trust, claim, demo, scan, secrets,
  benchmark, review, scan-soul, harden-soul, ...

Source: github.com/opena2a-org/opena2a | Published on npm as opena2a-cli