Documentation
Everything described here is what the product does today. Where something is not available yet, the page says so.
Content reviewed September 26, 2026
Getting started
From sign-up to an exported preflight report: account, e-mail verification, project, upload, analysis, findings and export.
How ERP Preflight is organised
The three pillars Prevent, Explain and Govern, the three products on one platform, and how the domain engines work underneath.
Engine catalog
All analysis engines with their input contracts, finding codes and remediation texts — generated from the live engine catalog.
File formats per engine
Which exports and files each analysis engine accepts, from the engines’ declared input contracts.
Security & data handling
How customer artifacts are isolated, checked, stored and deleted, and what the free tools can see.
API & CLI
Use ERP Preflight from scripts and CI: REST API with API keys, the erp-preflight CLI and the MCP endpoint.
Local agent
Run the outbound-only local agent inside your network: enrollment, signed jobs, local scanning and redaction.
API keys & scopes
Create organization API keys, authenticate API and CLI requests and grant least-privilege scopes — with the complete scope catalog.
CLI (erp-preflight)
The erp-preflight command-line client: installation, API key login, commands, flags, environment variables and exit codes.
CI integration
Use the erp-preflight CLI as a quality gate in CI pipelines: --fail-on semantics, exit codes, GitHub Actions and GitLab CI examples.
Webhooks & events
Receive signed HTTP callbacks for analysis results and other events: event catalog, payload, HMAC-SHA256 signatures, retries and delivery log.
MCP server
Connect coding agents through the Model Context Protocol: JSON-RPC endpoint, authentication, tools with their scopes and the local stdio bridge.
SSO & SCIM
Single sign-on with OpenID Connect, verified e-mail domains, just-in-time accounts and SCIM 2.0 provisioning of members and groups.
Data handling in detail
How uploads are checked, scanned, redacted, stored per tenant and deleted — the technical controls behind the security overview.
FAQ
Short answers to the questions we are asked most.