Command reference
Every regixo command, grouped the way regixo help shows them,
with the flags that matter and one example each. The command line is the whole product on the free
side — it runs headless, so an agent or a CI job drives every command the same way you do.
Read this from your own project — the list of commands, or any one of them in detail:
“Show me what Regixo can do in this project.”
Show the commandHide the commandShow the sentenceHide the sentence
$ regixo help $ regixo help start # or: regixo start --help
An agent reads the same thing as data — every command with its usage, the env vars it reads, and
the full error list (code → message → fix). This is its first call:
“Read Regixo’s command manifest and tell me what it can do.”
Show the commandHide the commandShow the sentenceHide the sentence
$ regixo help --jsonOr hand it the whole job at once — regixo skill prints the playbook that teaches a
coding agent to operate Regixo: the setup order, the guardrails, and where it must hand back to you.
Nothing to install:
“Read Regixo’s operating playbook, then set it up for this project.”
Show the commandHide the commandShow the sentenceHide the sentence
$ regixo skillTiers: free ships in the open-source build · paid needs an unlock · a command marked both is free to draft and paid to seal. Free stays free forever.
Every command
| Command | What it does | Key flags | Example |
|---|---|---|---|
| Get started | |||
start |
Scan your sources’ structure into a local catalog — names and types only, never the row data. A source it can’t reach is reported, not fatal. | --source <id> · --dora · --catalog-only · --json |
regixo start |
open |
Open the map and draft record in your browser; also serves the versioned /api/v1 read API while it runs. |
--no-browser · --port <n> · --json |
regixo open |
invite |
Hand the draft to your compliance team — a forwardable DRAFT PDF plus a claim-in-portal link and a metadata-only snapshot. | --yes · --no-upload · --email <addr> · --no-open · --json |
regixo invite --yes |
share |
Write one self-contained HTML file — the whole map plus lineage — for a teammate who doesn’t run Regixo. Metadata only; a read-only snapshot of the last scan. | --out <path> · --title <name> · --json |
regixo share --out data-map.html |
| Connect sources | |||
add |
Connect a data source — writes regixo.yml, stores only the env-var name, never the secret. A wizard on a terminal, flag-driven when scripted. Also adds a bring-your-own connector: add script --generator … (a small schema-printing script an AI agent authors). |
--ref <ENV> · --from <file> · --generator <file> · --target <id> · --role controller|processor · --region · --id · --label · --skill · --yes · --json |
regixo add postgres --ref DATABASE_URL |
connectors |
Add a connector Regixo doesn’t ship (any SaaS or your own internal API) — with a coding agent. Runs out-of-process; nothing authored runs inside Regixo. --skill prints the agent playbook (interview + how to author); new scaffolds a generator script; list shows yours. Best-effort — excluded from the freshness guarantee. |
list · new <name> · --skill · --force · --json |
regixo connectors --skill |
sources |
List your data sources, or remove one (undo an add). Remove drops it from regixo.yml and clears its mapped data; your .env secret is left untouched. Removing a scanned source needs --yes. |
remove <id> · --yes · --json |
regixo sources remove app-db --yes |
test |
Dry-run each source connection — credentials and reachability — without scanning. Exits non-zero if any source fails. | [source] · --json |
regixo test app-db |
| Inspect | |||
status |
Show what is connected, scanned, and still missing — sources, datasets, PII counts, and a loud coverage number if any source was unreachable. | --probe · --no-probe · --json |
regixo status |
search |
Search the catalog from the terminal — datasets and columns, ranked by the same engine as the dashboard and the API. | --limit <n> · --json |
regixo search payment amount |
doctor |
Check Node and your config, resolve and probe each source connection, then print a specific fix. | --no-probe · --json |
regixo doctor |
log |
Show the append-only change log — what was added or removed in the map, and when. | --since <ISO> · --limit <n> · --json |
regixo log --since 2026-01-01 |
evidence |
Assemble one machine-readable evidence bundle — RoPA and DORA drafts, change-log, source list — with a per-artifact sha256. Draft-only, attests nothing. | verify <file> · --json |
regixo evidence |
| Enrich | |||
describe |
Draft or fill dataset and column descriptions — deterministic, local, no egress. Persists outside the snapshot, so a re-scan never clobbers it. | list|draft|set|confirm|clear · --all · --force · --model · --skill · --json |
regixo describe draft --all |
lineage |
Assert a cross-system data flow no scanner can infer (e.g. Stripe → your users table). Survives a re-scan. | list|add|remove · --origin user|dbt|all · --json |
regixo lineage add stripe/customers app-db/public/users |
glossary |
Define business terms and link them to datasets — semantic context for people and agents. | list|set|suggest|confirm|remove · --datasets=id,id · --suggest · --skill · --json |
regixo glossary set MRR "Monthly recurring revenue" |
classify |
Correct a column’s personal-data flag when the classifier got it wrong. Mechanical and local — it never confirms a legal field. | list|set|clear · personal|special|criminal|not · --skill · --json |
regixo classify set app-db/public/users.nickname personal |
catalog |
Share your team’s notes — export or import the descriptions, terms, corrections and legal answers layered onto the map. No schema, no secrets travel. | export|import · --out <path> · --dry-run · --json |
regixo catalog export |
| Agents | |||
skill |
Print the playbook that teaches your coding agent to run Regixo for you — the whole job, in order. Nothing to install or register. | --json |
regixo skill |
mcp |
Let an AI assistant read your catalog over stdio — eight read tools, read-only by construction, and nothing leaves your machine. | --print-config · --skill |
regixo mcp --print-config |
| Settings | |||
config |
View or change saved settings — for example catalog-only mode, which hides the EU-compliance surfaces. | catalog-only <on|off> · --json |
regixo config catalog-only on |
| Compliance | |||
report |
(Re)generate the GDPR Article 30 RoPA DRAFT — and the DORA register DRAFT, if you are in DORA scope. | --dora · --json |
regixo report --dora |
dorafree draft paid export |
Fill the DORA register a scanner can’t know — contracts, functions, LEIs. Import, set, pull, or check status; export validates and seals the filing package (paid). |
import|set|pull|status|export |
regixo dora status |
annotate |
Fill or confirm the RoPA legal fields a scan can’t decide — purpose, lawful basis, retention, transfers, security measures. --confirm records it as a named human act. |
list|set|clear · --confirm |
regixo annotate set <key> retention "6 years" |
verifypaid |
Turn your draft into the official, signed version. Verifies REGIXO_LICENCE_KEY offline; without the paid layer it reports as the free build. |
--json |
regixo verify |
sealfree pull paid stamp |
Pull the signed, sealed record home from the portal once your compliance lead signs it; seal stamp attaches the RFC 3161 time counter-stamp. |
pull <token> · stamp · --json |
regixo seal pull clm_… |
serve-claim |
Preview the claim locally — what your compliance team sees — before you send it. | --no-browser · --port <n> |
regixo serve-claim |
| Operator (paid module) | |||
adminpaid |
Run the account layer — records, users and roles, machine tokens, licences, audit. Needs the paid module; a free build reports PORTAL_NOT_INSTALLED. |
<command> · --yes · --json |
regixo admin grant --claim clm_… --plan ropa |
| Keep current | |||
watch |
Re-scan for changes: refresh the map, append a dated history of what changed, and flag signed records whose core fields moved for re-signing. One-shot — schedule it from CI or cron. | --ci · --webhook <url> · --json |
regixo watch --ci |
annotate sits under Compliance; admin is the vendor's
operator surface and needs the paid module. Both now appear in the grouped regixo help
list, which is generated from the one owning registry.
Full flags and examples for any command: regixo help <command>.
Dashboard & agent equivalents
The command line is the whole free product, but several commands also have a point-and-click twin in
the local dashboard (regixo open), and the read commands answer to an AI agent too. The
tours: The free portal ·
The compliance portal ·
With an AI agent.
| Command | In the dashboard |
|---|---|
open | The dashboard itself — regixo open serves it on localhost:4319. |
search | The Map search box (“Search datasets and columns…”). |
classify | Map → a column’s Correct select, with Revert to Regixo’s call. |
describe | A dataset’s Draft a description / Confirm / Clear. |
lineage | Map → + Assert a flow (target id + grain). |
glossary | The Glossary composer — + Add term (Term · Definition · Link to datasets). |
evidence | Evidence bundle → ↓ Download / ↻ Regenerate. |
config | Settings toggles — Mode and DORA scope. |
watch | Settings → Keep it current — schedule only; the dashboard can’t run a scan itself. |
mcp | The Agents (MCP) screen — pick a client, Copy snippet. |
verify | The compliance portal — Unlock & pay, then Sign & seal. |
Everything else is CLI-only — no dashboard control: start, add,
connectors, invite, share, serve-claim,
annotate, dora import/set/pull, catalog, admin,
seal, report, test, doctor, status,
sources, log, skill. Scanning, connecting a source, forwarding a
draft, and payment never happen from the free portal by design.
Global flags & exit codes
Every command is agent-drivable: off a terminal (or under CI, or with
--non-interactive) it never prompts. A missing required input is a coded error that
names the flag or env var to supply — not a blocked prompt.
--json— machine-readable output, on every agent-driven command.--help— usage, flags and examples for a command (same asregixo help <command>).--version— the installed version.--yes— accept defaults / confirm a gated action headlessly.
| Exit code | Meaning |
|---|---|
0 | Success. |
1 | A coded error — read error.code and error.fix (see Errors & fixes). |
2 | Usage error or unknown command. |
3 | A core RoPA field changed. Emitted only by regixo watch --ci, so CI can block a merge — plain regixo watch keeps 0/1. |
code and a specific fix. The full
registry is the next page: Errors & fixes.