@scopeblind/onboard

Bridge from the free @veritasacta/verify CLI to a managed ScopeBlind account.

What it does

1. Detects the .veritasacta/config.json produced by npx @veritasacta/verify init.
2. Reads your project's public key identifier (kid) and framework.
3. Prompts for a plan tier (developer / starter / pro / enterprise) and optionally an email.
4. Generates a pre-filled signup URL at scopeblind.com/start that carries the kid into Stripe Checkout metadata.
5. Writes a .scopeblind/account.json local record with status: "pending" so you can track outstanding signups.
6. Offers to open the URL in a browser.

No credentials or private material leave the local machine. The signup happens entirely in the browser; the managed backend links your submitted kid to the new account automatically on checkout success.

Install

npm install -g @scopeblind/onboard
# or one-off:
npx @scopeblind/onboard

Use

Interactive (recommended)

cd my-agent-project
npx @scopeblind/onboard

The CLI walks you through plan selection and email entry and then offers to open the signup URL.

Non-interactive (CI, scripted setups)

npx @scopeblind/onboard --plan starter --email [email protected] --non-interactive

Flags

| Flag | Purpose | |---|---| | --plan <tier> | developer (free, 50K/mo), starter ($49/mo), pro ($499/mo), enterprise (custom) | | --email <addr> | Pre-fill the signup form | | --project-dir <dir> | Where to look for .veritasacta/ (default .) | | --non-interactive, -y | Skip prompts; requires --plan | | -h, --help | Help |

Relationship to @veritasacta/verify

| Piece | License | Role | |---|---|---| | @veritasacta/verify | Apache-2.0 | Free forever. Offline verification. No account required. | | @scopeblind/onboard | MIT | Optional. Bridges to the managed tier. Only useful if you want ScopeBlind to store receipts, generate compliance reports, or run 24/7 retention. |

You do not need @scopeblind/onboard to use the open verifier. The verifier is complete and supported without any account.

What ScopeBlind's managed tier adds on top of the verifier

• Multi-tenant receipt storage with configurable retention (7d / 30d / 1y / custom)
• SOC 2 / ISO 42001 / EU AI Act export generators (auto-assembled from the receipt chain)
• Team accounts, SSO, audit log access
• 24/7 ingestion SLA, hot failover, read-replica regions
• Enterprise DPA + BYO-cloud option

Full pricing and tier comparison: scopeblind.com/pricing

Privacy

The CLI reads .veritasacta/config.json (which you created locally) and writes .scopeblind/account.json (also local). It makes no network calls itself. The signup URL is the only path to the network; what gets submitted is whatever you fill in the browser.

Your private signing key (in .veritasacta/attester.json by default) is never read or transmitted.

License

MIT.