crosscheck-enterprise
v0.0.54
Published
Crosscheck Enterprise — mandatory SSO (Okta/Entra) sign-in and org-managed provider policy, on top of the same BYOK multi-LLM MCP engine as crosscheck-cli. Every provider key stays local, in 1Password.
Readme
crosscheck-enterprise
A thin redistribution package. All real logic lives in
crosscheck-cli's
cli-enterprise.ts — this package exists only so enterprise customers get a
distinct install command (npx -y crosscheck-enterprise@latest install)
from a distinct npm package, without forking the codebase.
crosscheck-cli is a normal, exact-pinned dependency of this package — bump
that pin whenever crosscheck-cli ships a change relevant to enterprise
(SSO, provider policy, keys, serve), and publish both together.
See the main crosscheck-cli README and
crosscheck-cli's src/enterprise/ and src/cli-enterprise.ts for the
actual implementation.
What's different from crosscheck-cli
- Sign-in is always your organization's SSO (Okta / Entra), never Google OAuth.
- Provider keys are stored in 1Password only — no local encrypted file, no OS keychain.
- Which providers are even offered is controlled by your org admin at
/account/enterprise, not by you.
Set up your organization first at /account/enterprise (requires a
superadmin to have flagged your org as enterprise), then have each employee
run:
npx -y crosscheck-enterprise@latest install