agent safety

Agent safety answer

oci-cli controls Oracle Cloud resources and account state.

Credential access

Reads OCI config, API keys, tenancy data, and environment credentials.

Remote mutation

Can create, delete, or modify Oracle Cloud resources.

Publish/artifact risk

Can upload artifacts and deploy infrastructure changes.

Recommended control

Gate mutating oci commands and credential file access.

Agent-use guidance

Allow read-only listing; require approval for writes, deletes, and credential changes.

install

Additional install commands

macOS

Homebrewverified · 100%

brew install oci-cli

local Homebrew formula metadata

MacPortsverified · 94%

sudo port install oci-cli

MacPorts ports tree · net/oci-cli/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%

sudo apk add oci-cli

Alpine Linux edge package indexes · oci-cli · source: dl-cdn.alpinelinux.org

Fedora dnfverified · 92%

sudo dnf install oci-cli

Fedora Rawhide package metadata · oci-cli · source: dl.fedoraproject.org

Nixverified · 92%

nix profile install nixpkgs#oci-cli

nixpkgs package indexes · pkgs/by-name/oc/oci-cli/package.nix · source: api.github.com

openSUSE zypperverified · 92%

sudo zypper install oci-cli

openSUSE Tumbleweed package metadata · oci-cli · source: download.opensuse.org

Windows

Scoopverified · 92%

scoop install main/oci-cli

Scoop official bucket manifest trees · bucket/oci-cli.json · source: api.github.com

overview

Package summary

Oracle Cloud Infrastructure CLI

Project links

Commands and aliases

create_backup_from_onprem
oci

history

Project history and usage

OCI CLI is Oracle's open source command-line interface for Oracle Cloud Infrastructure. It gives operators and developers a scriptable interface to OCI objects and services, covering the same core administrative surface as the web Console while adding command-line workflows such as automation and batch execution.

Project history

The upstream project is maintained by Oracle and distributed from the oracle/oci-cli repository. The README identifies it as the command-line interface for Oracle Cloud Infrastructure, with Oracle as maintainer and community contributions accepted through the public repository.

The README copyright line covers 2016 and 2019, matching OCI CLI's role as part of Oracle's post-Oracle Cloud Infrastructure tooling generation. Later project evolution is visible in the repository's changelog and release stream, while Oracle documentation remains the canonical user-facing reference for installation, configuration, troubleshooting, and command documentation.

The project expanded beyond a basic noninteractive command runner with interactive mode, shell guidance, suggestions, color-coded required and optional parameters, quick references, offline installation assets, and a container image published through GitHub Container Registry.

Adoption history

OCI CLI became a standard cross-platform entry point for OCI automation because Oracle documents installation paths for macOS, Linux, Oracle Linux, Fedora, and Windows, and because Homebrew packages it as `oci-cli` with the `oci` executable.

Homebrew's formula API generated on 2026-07-01 reports 40,195 installs over 365 days and 11,792 installs over 90 days, showing sustained package-manager use outside Oracle's own installers. The same API lists binary bottles for macOS and Linux variants, making the package available to both workstation and automation environments.

How it is used

Users configure OCI credentials and profiles, then run `oci` commands to inspect and manage cloud resources. Oracle's documentation frames the tool as usable on its own or alongside the Console, and the README points users to example commands, help output, interactive mode, and troubleshooting documentation.

The package matters operationally because cloud teams can place OCI actions in shell scripts, CI jobs, recovery procedures, and offline administrative environments. The container image path adds a reproducible way to run the CLI where installing Python dependencies directly is inconvenient.

Why package nerds care

For package cataloging, OCI CLI is a large vendor cloud CLI with its own release cadence, Python packaging lineage, OS-specific installers, Homebrew bottles, and a container distribution channel. It is also a useful example of a cloud provider CLI that straddles package managers, language packaging, and official documentation.

Timeline

2016: The repository license/copyright record begins in the same period as Oracle's public OCI tooling.
2019: The README license line still names Oracle and the dual UPL-1.0 / Apache-2.0 licensing.
2026-07-01: Homebrew formula metadata lists stable version 3.89.0 and 40,195 installs over the previous 365-day analytics window.

Related projects

OCI CLI sits beside Oracle's OCI SDK documentation and configuration model, and its container image is published from Oracle's GitHub container packages. It also overlaps with helper projects and integrations that wrap or invoke the `oci` executable in CI and shell workflows.

Sources

security posture

Risk level: orange

infrastructure mutation or orchestration signal.

Risk classifier

orange risk · medium confidence · infrastructure

Why

infrastructure mutation or orchestration signal

Signals

text:infrastructure,cloud

Install behavior

No Homebrew post-install hook is recorded in formula metadata.
Homebrew bottle metadata is available for 6 platform targets.
Installs with 4 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: ~/.oci/config
Windows: $Env:UserProfile\.oci\config

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: ~/.oci/oci_api_key.pem
Windows: %HOMEDRIVE%%HOMEPATH%\.oci\oci_api_key.pem

executables

Installed executables

Command	Kind	Exposure	Note
`create_backup_from_onprem`	cli	global executable
`oci`	cli	global executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08

manager version3.89.0

manager updated2026-07-01

local dataok

upstreamnot checked

latest detectednot detected

https://docs.cloud.oracle.com/iaas/Content/API/Concepts/cliconcepts.htm

infoRelease/tag comparison is only available for GitHub repositories.https://docs.cloud.oracle.com/iaas/Content/API/Concepts/cliconcepts.htmnone confidence

install metadata

Package metadata

Package key	brew:oci-cli
Version	3.89.0
Package manager	Homebrew
Package manager page	https://formulae.brew.sh/formula/oci-cli
Homepage	https://docs.cloud.oracle.com/iaas/Content/API/Concepts/cliconcepts.htm
Repository	https://github.com/oracle/oci-cli
Upstream docs	https://docs.oracle.com/en-us/iaas/Content/API/Concepts/cliconcepts.htm
License	UPL-1.0 OR Apache-2.0
Source archive	https://files.pythonhosted.org/packages/ba/36/935d19fd65be951730a74ad85a5d3ada84950606433b4e5a91da6e653a98/oci_cli-3.89.0.tar.gz
Last updated	2026-07-01T13:20:46Z
Pulse	updated
Dependencies	certifi, cryptography, libyaml, python@3.14
Bottle	available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	not defined
Service	none declared

registry facts

Source database details

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	oci-cli
Version Scheme	0
Revision	0
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	head stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

oci-cli

nix profile install nixpkgs#oci-cli

normalized package name match
Matched by: Oci Cli

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/oc/oci-cli/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

apk95%

oci-cli 3.77.0-r0

Oracle Cloud Infrastructure CLI

https://docs.oracle.com/en-us/iaas/Content/API/Concepts/cliconcepts.htm

sudo apk add oci-cli

License: UPL-1.0 OR Apache-2.0
Architecture: x86_64
Source Package: oci-cli
1 dependencies
1 provides
normalized package name match
Matched by: Oci Cli

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: oci-cli from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

apk95%

oci-cli-pyc 3.77.0-r0

Precompiled Python bytecode for oci-cli

https://docs.oracle.com/en-us/iaas/Content/API/Concepts/cliconcepts.htm

sudo apk add oci-cli-pyc

License: UPL-1.0 OR Apache-2.0
Architecture: x86_64
Source Package: oci-cli
1 dependencies
normalized package name match
Matched by: Oci Cli

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: oci-cli-pyc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

dnf95%

oci-cli 3.85.0-2.fc45

Command Line Interface for Oracle Cloud Infrastructure

https://github.com/oracle/oci-cli

sudo dnf install oci-cli

License: UPL-1.0
Category: Unspecified
Architecture: noarch
Source Package: oci-cli
4 dependencies
3 provides
normalized package name match
Matched by: Oci Cli

Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: oci-cli from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst

zypper95%

oci-cli 3.83.0-1.1

Oracle Cloud Infrastructure CLI

https://docs.us-phoenix-1.oraclecloud.com/Content/API/SDKDocs/cli.htm

sudo zypper install oci-cli

License: Apache-2.0
Category: Development/Languages/Python
Architecture: noarch
Source Package: oci-cli
15 dependencies
3 provides
normalized package name match
Matched by: Oci Cli

openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: oci-cli from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

MacPorts95%

oci-cli

sudo port install oci-cli

normalized package name match
Matched by: Oci Cli

MacPorts ports tree · api.github.com · MacPorts ports tree: net/oci-cli/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

Scoop95%

main/oci-cli

scoop install main/oci-cli

normalized package name match
Matched by: Oci Cli

Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/oci-cli.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/oci-cli.yml

Used sources

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated agent safety answer
curated configuration and credential file locations
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

Install oci-cli with Homebrew, apk, dnf, MacPorts, Nix, scoop, zypper

Agent safety answer

Credential access

Remote mutation

Publish/artifact risk

Recommended control

Agent-use guidance

Additional install commands

macOS

Linux

Windows

Package summary

Project links

Commands and aliases

Project history and usage

Project history

Adoption history

How it is used

Why package nerds care

Timeline

Related projects

Sources

Risk level: orange

Risk classifier

Why

Signals

Install behavior

Recommended review

Configuration and credential file locations

Configuration files

Credential files

Installed executables

Version and freshness

Package metadata

Source database details

Other package-manager records

Internal package links

Topical hubs

Related tools

Same workflow

Agent security guides

Generated from repository data

Combined YAML source

Used sources