ops0-ai/ops0-cli

68 stars · Last commit 2026-05-16

Stop your AI agent from shipping insecure IaC. ops0 CLI sits between Claude Code, Codex or Gemini and your cloud, scanning every .tf the agent writes and blocking destroy commands before they run.

README preview

<div align="center">

# ops0 CLI

**Policy, lint, vulnerability, and cost guardrails for AI coding agents.**

Sits in front of Claude Code, Codex and Gemini CLI. Every time the agent
finishes writing IaC, the whole working directory gets validated, linted,
policy-checked, security-scanned, and cost-estimated server-side. Failures
come back as a failed tool call so the agent self-remediates. Destructive
commands are blocked before they run.

[![Latest Release](https://img.shields.io/github/v/release/ops0-ai/ops0-cli?display_name=tag&sort=semver)](https://github.com/ops0-ai/ops0-cli/releases/latest)
[![License](https://img.shields.io/badge/license-Apache--2.0-blue.svg)](LICENSE)
[![Go Report Card](https://goreportcard.com/badge/github.com/ops0-ai/ops0-cli)](https://goreportcard.com/report/github.com/ops0-ai/ops0-cli)

```bash
curl -fsSL https://raw.githubusercontent.com/ops0-ai/ops0-cli/main/install.sh | sh
```

View full repository on GitHub →