CLI commands

Every product’s frazer commands, from that product’s page. Each heading links to the product’s guide; frazer <command> --help shows every flag, and frazer <command> --help --json its card for agents. Install, sign-in, the command grammar, output formats, exit codes and errors are on CLI; fir commands are on the Fir CLI reference.

Servers and pools

Command	What it does
frazer servers add	Add a Linux server you run. Over SSH from your laptop (frazer servers add root@host), or on the server itself; installs the agent and accepts the server as you.
frazer servers join-tokens create	Create a join token for a site and pool, for the install command in automation and cloud-init.
frazer servers import ovh	Plan, then reinstall and join servers from a connected OVHcloud account into a pool.
frazer servers server-pools share	Share a server pool with projects of the organization, with a guaranteed amount and a limit for each.
frazer servers server-pools unshare	Remove a project from a pool's share settings. Its entry drains for the grace period, then its VMs stop.
frazer servers server-pools list	List server pools in a project; with --include-shared, also the pools shared with it.

Kubernetes

Command	What it does
frazer kubernetes clusters create	Create a cluster in a project. With --dry-run, print the plan and create nothing.
frazer kubernetes clusters list	List the clusters in a project.
frazer kubernetes clusters get	Show one cluster with its class, version, channel, node pools and state.
frazer kubernetes clusters get-credentials	Write a kubeconfig with no secret in it. kubectl then asks frazer for a 10-minute token for that one cluster.
frazer kubernetes clusters upgrade	Upgrade a cluster to a Kubernetes version. --rehearse tries it on a clone, --dry-run prints the plan, --at next-window schedules it.
frazer kubernetes clusters upgrade pause	Pause a running upgrade.
frazer kubernetes clusters upgrade resume	Resume a paused upgrade.
frazer kubernetes clusters upgrade rollback	Roll back a running upgrade.
frazer kubernetes clusters upgrade complete	Finish an upgrade early, skipping the rest of its soak.
frazer kubernetes clusters delete	Delete a cluster. Deletion is soft, with a restore window and a final database backup.
frazer kubernetes clusters undelete	Restore a deleted cluster within its restore window.
frazer versions list	List the Kubernetes versions of each channel with their end-of-support dates.
frazer maintenance policies create	Create a maintenance policy with a recurring window, exclusions, an order and notices.
frazer maintenance events list	List planned maintenance events, for example those of the next 30 days.
frazer insights list	List insights, for example with --category upgrade the deprecated API calls that block an upgrade.

Serverless

Command	What it does
frazer deploy	Deploy the repository you are in. Asks once per app whether it runs on Kubernetes or serverless, and remembers the answer.
frazer serverless deploy	Build and deploy a service from source or an image, with the data resources it needs, as one plan.
frazer serverless services list	List the services in a project.
frazer serverless services get	Show a service, its URL, its revisions and its traffic.
frazer serverless services delete	Delete a service.
frazer serverless traffic	Send traffic to a revision, split it between revisions, or tag a revision with its own URL. Rolls back.
frazer serverless jobs create	Create a job from a service's image, with an optional schedule.
frazer serverless jobs execute	Run a job now.
frazer serverless stacks create	Create a stack and every resource in it from a frazer.stack.yaml file.
frazer serverless stacks export	Write a stack's definition as frazer.stack.yaml.
frazer serverless stacks delete	Delete a stack and its members together, with final backups.
frazer serverless move	Move a service to Kubernetes as a pull request to an environment repository.

VMs

Command	What it does
frazer compute vms create	Create a VM from a plan, on a server pool or in a Frazer fleet region.
frazer compute vms list	List the VMs in a project.
frazer compute vms get	Show one VM with its state, machine type, placement, disks and addresses.
frazer compute vms ssh	Sign in over SSH with a short-lived certificate; --tunnel goes through Frazer Link.
frazer compute vms console	Open the VM's serial console; --vnc opens the graphical console.
frazer compute vms stop	Stop a VM. Its disks stay, and it pays for storage only.
frazer compute vms start	Start a stopped VM.
frazer compute vms reset	Hard-reset a VM.
frazer compute vms resize	Change a VM's machine type.
frazer compute vms migrate	Live-migrate a VM whose disks are all replicated to another server in the site.
frazer compute vms delete	Delete a VM. Deletion is soft, with a restore window, and offers a final backup first.
frazer compute vms undelete	Restore a deleted VM inside its restore window.
frazer storage disks create	Create a local-nvme, replicated or scratch disk, blank or from an image or a snapshot.
frazer storage disks attach	Attach a disk to a VM, also while it runs.
frazer storage disks detach	Detach a disk from a VM.
frazer storage disks resize	Grow a disk while it is in use.
frazer compute snapshots create	Snapshot one disk, crash-consistent or app-consistent.
frazer compute snapshots restore	Restore a snapshot to a new disk, or over the disk of a stopped VM.
frazer compute images create	Create an image in a family from a disk, a URL or an uploaded file.
frazer compute instance-templates create	Create an immutable, versioned VM spec, for example from an existing VM.
frazer compute instance-groups create	Create a group of identical VMs from a template, with autohealing and autoscaling.
frazer compute backup-policies create	Back up the VMs that match a label on a schedule and keep a number of backups.

Devboxes

Command	What it does
frazer devboxes create	Create a devbox from a template, on a server pool (--pool) or the Frazer fleet (--location).
frazer devboxes list	List the devboxes in a project.
frazer devboxes get	Show one devbox and its state.
frazer devboxes start	Start a stopped devbox.
frazer devboxes stop	Stop a devbox; the home is kept and scratch is erased.
frazer devboxes resize	Change a devbox's size, as a plan.
frazer devboxes delete	Delete a devbox (Owners only); it stays restorable for 7 days.
frazer devboxes ssh	Open a shell, or run one command, with a short-lived SSH certificate over Frazer Access or Frazer Link.
frazer devboxes proxy	The ProxyCommand that IDE remote-SSH connections use.
frazer devboxes rx	Sync the working tree to a devbox and run a command, arguments passed verbatim.
frazer devboxes open	Open a devbox in VS Code, JetBrains, the browser or Hermes.
frazer devboxes snapshots create	Snapshot a devbox's home.
frazer devboxes snapshots list	List a devbox's snapshots.
frazer devboxes snapshots restore	Restore a snapshot into a new devbox.
frazer devboxes ports share	Share a port's preview URL with people or a group, with an expiry.
frazer devboxes policies apply	Create or change a devbox policy from a file; prints the plan first.
frazer devboxes templates build	Build a workspace template.
frazer devboxes templates publish	Publish a new version of a workspace template.
frazer devboxes images build	Build an organization image from a Dockerfile or devcontainer into Frazer Registry.

Fir

Command	What it does
frazer source repositories import	Import a git repository into Fir with its full history, as a plan you read before anything changes.
frazer source repositories export	Write a Fir repository out as a plain git repository, history included, at any time.

GitHub runners

Command	What it does
frazer githubrunners pools create	Create a runner pool from a plan, with its provider, connection, placement, sizes, isolation and cache policy.
frazer githubrunners pools get	Show a pool; with -o yaml, its full spec, lanes and scaling included.
frazer githubrunners pools update	Change a pool's lanes, caps, budgets or scaling, as a plan.
frazer githubrunners pools snippet	Print the lane-aware runs-on line for a pool.
frazer githubrunners pools share	Share a pool with other projects and name the repositories each one runs, as a plan.
frazer githubrunners jobs list	List a project's jobs, for example only slow ones in the last 24 hours.
frazer githubrunners jobs get	Show a job's phases; with --why, compare them with the job's usual time and name the causes.
frazer githubrunners jobs debug	Open a devbox from a failed job's image, warm disk and environment.
frazer githubrunners images versions list	List the versions of a runner image and the ring each one is in.
frazer githubrunners insights	Show a project's CI insights, such as flaky tests.

Cache

Command	What it does
frazer cache get	Show a cache's tiers, usage and byte hit rate (bytes served ÷ requested).
frazer cache namespaces list	List a cache's namespaces, filtered by tier and sorted by byte hit rate or size.
frazer cache policies get	Show a cache policy; with -o yaml, its writers, scope, quotas and eviction rules.
frazer cache policies test	Show what a given writer may read and write under a policy.
frazer cache volumes list	List the warm disks of a repository.
frazer cache purge	Remove entries by writer identity or by namespace, as a plan that lists the affected jobs.
frazer cache writes	List published and refused writes; with --refused, refusals only.

Registry

Command	What it does
frazer auth configure-docker	Install a Docker credential helper that signs in to Frazer Registry with a short-lived Frazer token.
frazer registry repositories create	Create a repository with its format, mode, immutable tags and, for a remote repository, its upstream and credential.
frazer registry images list	List an image's versions with their tags, scan results and signatures.
frazer registry images describe	Show one version by digest, its referrers and where it runs.
frazer registry cleanup dry-run	Show what a repository's cleanup policies would delete and why each version is kept.
frazer registry versions restore	Restore a deleted version within 30 days.
frazer registry files push	Push a versioned, immutable file to a Generic repository.
frazer import start	Start an import from another registry; with --dry-run, show the plan item by item.
frazer import apply	Apply an import's plan.

Environments and GitOps

Command	What it does
frazer releases environments connect	Connect a repository path to a cluster as an environment, with its namespaces, permission profile and sync policy, as a plan.

Frazer QA

Command	What it does
frazer previews create	Create a preview for a subject (--for pr:<repo>#<n>, stack:<name>, node:<plan>#<node>, program:<n> or ws:<workspace>), or of a past moment with --at; with --dry-run, print what it would copy, share, branch and fake, its URL and its cost.
frazer previews url	Print a preview's URL, the latest revision's or one revision's.
frazer previews login	Mint a single-use login handle that signs a browser in as one of the recipe's personas.
frazer previews logs	Read the logs of a preview's copies.
frazer previews exec	Run a command in one of a preview's copies, such as one of its scheduled jobs.
frazer previews sleep	Put a preview to sleep now; wake brings it back.
frazer previews why	Explain a failed or slow preview from its fixed list of causes, with the evidence and the fix.
frazer previews attach	Attach an agent session's workspace to a preview, so it serves one of the preview's services (--service, --from).

Templates and previews

Command	What it does
frazer templates run	Run a template; with --dry-run, print one plan with every effect (repository, environment folder, database, hostname, checks) before anything happens.
frazer preview-policies create	Create a preview policy on an environment, with the trigger that decides which pull requests get a preview.
frazer previews list	List live previews with their pull request, URL, state, age and cost.
frazer previews open	Open a preview's URL.
frazer previews extend	Keep a preview past its TTL.
frazer previews delete	Delete a preview and its database copy.

AI and GPUs

Command	What it does
frazer ai overview	Show GPU capacity per class (your servers, rented servers and the fleet), project quotas, queued work and spend.
frazer ai models import	Import a model from Hugging Face or another source, pinned to an immutable revision.
frazer ai models list	List the models in the project.
frazer ai models get	Show a model's revision, files, license and lineage.
frazer ai models export --oci	Export a model as an OCI ModelKit to a model repository in Frazer Registry.
frazer ai endpoints deploy	Deploy a model as a model endpoint with an OpenAI-compatible API.
frazer ai endpoints logs	Show the logs of a model endpoint.
frazer ai endpoints metrics	Show the metrics of a model endpoint.
frazer ai endpoints keys create	Create a key for a model endpoint.
frazer ai endpoints adapters add	Load a fine-tuned adapter on a running model endpoint.
frazer ai serverless-endpoints deploy	Deploy your container from a repository as a serverless endpoint on GPUs.
frazer ai serverless-endpoints run	Submit a job to a queue-mode serverless endpoint, or wait for its result with --sync.
frazer ai serverless-endpoints jobs list	List the jobs of a serverless endpoint.
frazer ai serverless-endpoints workers list	List the workers of a serverless endpoint and their states.
frazer ai serverless-endpoints purge-queue	Remove every queued job of a serverless endpoint.
frazer ai gpu-pods create	Create a GPU pod from a template, with an optional maximum runtime.
frazer ai gpu-pods ssh	Open a shell on a GPU pod.
frazer ai gpu-pods cp	Copy files to or from a GPU pod.
frazer ai gpu-pods stop	Stop a GPU pod and keep its volumes.
frazer ai gpu-templates create --from-pod	Save a running GPU pod as a GPU template.
frazer ai gpu-templates list	List GPU templates (official, organization and personal).
frazer ai volumes create	Create a volume for pods, endpoints and jobs.
frazer ai volumes attach	Attach a volume to a running pod or job.
frazer ai volumes detach	Detach a volume while the workload keeps running.
frazer ai volumes copy	Copy a volume to another location.
frazer ai fine-tuning-jobs create	Start a fine-tuning job, and optionally deploy the result when it beats a model you name.
frazer ai gpu-clusters lease	Lease whole GPU servers in one fabric as a GPU cluster for a term.
frazer ai train-jobs run	Start a training job from a YAML file on a GPU cluster.
frazer ai train-jobs resume	Resume a training job from a checkpoint.
frazer ai train-jobs stragglers	Show the GPUs and ranks that slow a training job down.

LLM gateway

Command	What it does
frazer llm providers connect	Connect a model provider to the project, with your own key or through Frazer's own contract with the provider.
frazer llm routes apply -f	Create or change a route from a YAML file; --dry-run shows the plan first.
frazer llm keys create	Create a key with the routes it may use, a budget and rate limits.
frazer llm token	Print a 1-hour token for the caller, for use as an API key helper.
frazer llm logs	List gateway requests, filtered by status and time.
frazer llm usage	Show usage and cost for a period, grouped by key or another dimension.

Knowledge

Command	What it does
frazer knowledge knowledge-bases create	Create a knowledge base from a preset, with its sources, access mode and an MCP server.
frazer knowledge sources add	Add a source to a knowledge base.
frazer knowledge ask	Ask a question and get an answer with citations, or a reasoned decline.
frazer knowledge eval-runs create	Run an evaluation set against a knowledge base.
frazer knowledge indexes build	Build a new index version with changed retrieval settings, next to the active one.
frazer knowledge mcp config	Print the MCP configuration of a knowledge base for a client such as Claude Code.

Frazer Agents

Command	What it does
frazer agents create	Create an agent from a template.
frazer agents list	List the agents in a project.
frazer agents get	Show an agent's configuration and state.
frazer agents pause	Pause an agent. Its volume and memory stay.
frazer agents resume	Resume a paused agent.
frazer agents restart	Restart an agent's sandbox.
frazer agents quarantine	Cut an agent's tools, mute its channels and freeze its memory, keeping the evidence.
frazer agents release	Release an agent from quarantine.
frazer agents export	Export an agent's configuration.
frazer agents import openclaw	Import agents, channels, schedules, skills and models from an openclaw.json and its workspace.
frazer agents run	Run an agent on a one-off task.
frazer agents wakes list	List an agent's heartbeats, schedules, self-set wakes and subscriptions.
frazer agents wakes cancel	Cancel a pending wake.
frazer agents channels pair	Print a pairing code that links your channel account to an agent.
frazer agents memory list	List the items in an agent's memory.
frazer agents memory forget	Remove a memory item from the store, the index and the next snapshot.
frazer agents memory export	Export an agent's memory as Markdown and JSON.
frazer agents connect	Connect Hermes Desktop, an editor or an MCP client to an agent.
frazer acp	Bridge an editor to an agent over ACP on stdio.
frazer agents kill-switch on	Suspend every agent in the organization. Owner only, with step-up.
frazer agents triggers create	Start an agent when an event matches a CEL filter.
frazer sessions new	Start a session with a model, an agent and a target.
frazer sessions list	List the sessions you can see, across agents, devboxes and no-compute sessions.
frazer sessions open	Open a session.
frazer sessions send	Send a message to a session.
frazer sessions approve	Approve an action a session is waiting on, with step-up.
frazer sessions attach	Stream a session into your terminal.
frazer sessions handoff	Hand a session to a managed agent.
frazer apps search	Search the Marketplace's agents by job, with their roles, task kinds, prices and measured outcomes; compare and trial complete the set.
frazer apps installations create	Install an agent from the Marketplace with its allocation (--allocation month=,task=,run=), as a plan a person approves.
frazer billing budgets move	Move budget between installed agents' allocations inside a pool, with a reason; --dry-run shows the plan.
frazer agents improvements list	List an agent's improvement steps, each with its change, its tests, its canary and its state.
frazer agents improvements get	Show one improvement step with its fresh tasks, its gain and its canary.
frazer agents improvements set-mode	Set improve to on, shadow or off for an organization, project, agent or use, with a reason. People only.
frazer agents improvement-kinds list	List the kinds of change a scope's improvement policy approves, and the kinds that wait for a person.
frazer agents revisions explain	Explain an agent revision, what changed and the evidence behind it.
frazer agents revisions seal	Approve a change that waits for a person (people only; hidden from agent identities).

Frazer Browsers

Command	What it does
frazer browser open	Open a browser for your session at a URL, next to a preview and as one of its personas; returns the first snapshot.
frazer browser snapshot	The page as an agent reads it, interactive (the default), content, full or the delta since the last snapshot, with refs such as @e12.
frazer browser run	Run a short script of many steps in one call, with one receipt per step; it stops at the first failed step.
frazer browser check	Record a check on the page or on state behind it (an API response, a row); a test passes on state checks.
frazer browser login	Sign in as one of the preview's personas with a one-time login handle; no real credential reaches the agent.
frazer browser handoff	Hand the page to a person for a real sign-in, a challenge or a payment, as a person task.
frazer browser policy get	The project's browser policy, the outside origins it allows with their purpose, mode and rate limit.
frazer browser policy propose	Propose an outside origin as a reviewed change; a project admin who did not write it approves.
frazer browser rerun	Rerun a recording or a flow k times against a preview, with the clock, randomness and network pinned.
frazer browser repro	Reproduce an issue from its evidence in a preview at the issue's moment, and export the failing test.
frazer browser export	Export a recording as an editable flow or an end-to-end test file.
frazer browser list	List hosted browsers (br-…) with their sessions, states and causes; get and close complete the set.
frazer desktop open	Open a Linux desktop VM for your session, to drive apps outside the browser.

Frazer Skills

Command	What it does
frazer skills list	List the skills in your organization's registry, by source, skill set or the agents that use them.
frazer skills get	Show a skill or one version, with its checks, attestation, use, outcomes and evals.
frazer skills import	Import a public skill or a Hub skill repository's skill, pinned to a commit, as a pull request on your mirror repository that runs the import checks.
frazer skills allow	Allow a skill version for your organization, for people only; hold, block and yank complete the set.
frazer skills sources create	Connect a skill repository, so every merge builds signed skill versions.
frazer skills sets update	Change a skill set (entries, pins or channels, activation modes); with --compile, print the catalog each harness would list.
frazer skills locks get	Show the skill lock a session runs with; refresh moves a running session to newer allowed versions.
frazer skills uses list	Which sessions loaded a skill, how, and what came of the work, grouped by squad, agent, harness or repository.
frazer skills evals run	Run a skill's trigger, output or safety evals against a baseline, across your harnesses and models.
frazer skills suggestions list	Suggestions to improve a skill, each with its evidence; apply opens the pull request.
frazer skills gaps list	Gaps where agents struggled with no helpful skill; draft writes a candidate skill from the sessions that went well.
frazer skills policy get	Your organization's skills policy, the narrow rule's state included; update changes it.
frazer skills decisions list	Every allow, hold, block and yank, with the rule or person behind it and the checks it relied on.

Harnesses

Command	What it does
frazer harnesses list	List the catalog's harnesses, by use, tier or kind, with their status and where each runs in your organization.
frazer harnesses get	Show a harness at a version, with its tier, license, credential modes and the capabilities its compatibility checks found.
frazer harnesses enable	Enable a harness for a project, as a plan that records the terms you accept.
frazer harnesses profiles create	Create a harness profile (harness at an exact version, models, tools, skills, context policy); list, get, update and revisions complete the set.
frazer harnesses assignments set	Assign a profile to a use at the organization, project, use or item scope; with --validate-only, check eligibility and print the plan.
frazer harnesses explain	Explain which profile a session ran on and why, from the item to the organization's harness policy.
frazer harnesses try	Run up to four harnesses side by side on one task, in a workspace that nothing leaves, within a budget.
frazer harnesses compare	Compare profiles on a standard set of your tasks, with a null baseline.
frazer harnesses simulate	Replay up to 10,000 of your tasks across candidate profiles and report would-merge rates, cost and lift, within a hard budget.
frazer harnesses calibration get	Your organization's table of task class to recommended profile; propose and apply turn it into assignments.
frazer harnesses postmortems list	The Frazer harness's public postmortems and the regression notices on other harnesses' entries.

Agent squads

Command	What it does
frazer agents squads create	Create a squad from a template, with its accountable person.
frazer agents squads members add	Add an agent or a person to a squad, with a role.
frazer agents objectives create	Create an objective for a squad, with key results and guardrails.
frazer agents campaigns create	Create a campaign over a set of targets, with a concurrency limit and a budget.
frazer agents campaigns pause	Pause a campaign, with a reason. The pause takes effect at once and is audited.

Squads and campaigns

Command	What it does
frazer agents campaigns plan	The plan a person approves when a campaign is outside its starter's campaign policy.
frazer agents campaigns start	Start a campaign or its next wave; pause, resume, drain and stop complete the set, each with a reason.
frazer agents campaigns get	A campaign's count line, task states, waiting reasons and exceptions by cause.
frazer agents campaigns board	The campaign board as data, by state, squad, item or cause, in any density.
frazer agents campaigns tasks list	A campaign's tasks, filtered by state and reason, such as tasks not run for no funds.
frazer agents campaigns sessions list	The sessions of a campaign, with --successors for restarts and what they brought back.
frazer agents campaigns explain	Every admission check a task passed or failed, with its result and the budget reservations.
frazer agents campaigns scan	Run the recipe's dry run over the selector and write the data table, one row a location, labeled change, irrelevant or agent.
frazer agents campaigns burndown	The targets left by state, by hour.
frazer agents campaigns landed	The landed share, targets merged and kept at 14 days, with the rest by reason.
frazer agents campaigns sweep	Sweep a wave's failed shards with a tuned recipe revision probed on a sample.
frazer agents squads messages send	Send a typed message on the squad's one channel; follow-up and wait complete the set.
frazer agents campaigns simulate	Simulate a campaign before it starts, in seconds and with no model calls, for each shape and setting you compare.
frazer agents campaigns calibrate	Refit the simulator's inputs from your organization's own campaigns.
frazer agents squads health	A squad's interventions, escalations and limits, grouped by cause.
frazer agents campaign-policies update	Change which agents may start campaigns for you and what may start without asking.

Agent images

Command	What it does
frazer agents images build	Build an image from a spec in an isolated builder, with an SBOM, scans, a signature and a smoke eval.
frazer agents images promote	Move an image version to the dev, staging or prod channel, by digest.

Frazer Reviewer

Command	What it does
frazer reviewer enable	Turn on automatic review for the repositories that match a pattern, with a depth and triggers.
frazer reviewer review-policies apply -f	Create or change a review policy from a YAML file; --dry-run shows the plan.
frazer review	Review a diff, a directory, a branch or any file as code, security or cold review; the estimate prints first.
frazer review loop	Loop on a target until it is clean, ending with a held-out pass.
frazer review estimate	The estimate of a review before it runs (tokens by model and the fee for an agent's pull request), with its p90, at the price list's version.
frazer reviewer review-rules approve	Approve a rule draft after its backtest.

Lanes, verdicts and outcomes

Command	What it does
frazer review verdict	The second opinion auto-merge reads for a pull request version; exits 0 pass, 11 fail, 13 when a person must unblock it, 7 when it has no verdict yet.
frazer reviewer lanes list	The lanes in scope by group and kind, with their state, owner, harness profile and quality numbers.
frazer reviewer lanes create	Create a lane from a file; it starts in shadow until its backtest and seeded set pass.
frazer reviewer lanes test	Backtest a lane on recent merged pull requests in its scope and on its frozen seeded set.
frazer reviewer lanes install	Install a lane pack from the Marketplace; its lanes start in shadow.
frazer reviewer lanes revise	Draft a revision of a lane from a miss analysis or a want; a person seals it.
frazer reviewer lanes lookback	Re-run a lane revision in shadow over recent merged code, with its estimate first, filing a ranked backlog.
frazer reviewer lanes validate	Check a lane file against the published lane contract.
frazer reviewer lanes export	Write a lane as lane JSON, an Agent Skill or SARIF rules.
frazer reviewer lanes import	Turn a REVIEW.md, an AGENTS.md or a skill into lane drafts; --dry-run returns the drafts.
frazer reviewer coverage get	What one review run covered, the items, bundles and lanes, and why each skipped lane did not run.
frazer reviewer headlines search	Search finding headlines across the repository's life, by state, repository and time.
frazer reviewer quality get	The Reviewer's measured quality, per lane and period.
frazer reviewer lane-revisions seal	Seal a lane revision, for people only; --dry-run shows the plan.
frazer reviewer runs list	Review runs in the query language of pull requests, by lane, verdict, risk, cost or outcome.
frazer reviewer items list	The items of a review run, each with the lanes that read it, the rung reached and the result.
frazer reviewer outcomes list	Outcome links (told, missed, partial, outside) between incidents, reverts or hotfixes and the reviews of their changes.
frazer reviewer misses get	A miss analysis: which lane at which rung would have caught a defect, why it did not, and the remedies.

Databases

Command	What it does
frazer databases create	Create a database instance from a plan (alias frazer db).
frazer databases list	List instances, managed and declared in Git (--source managed|git).
frazer databases describe	Show an instance with its endpoints, backups and recovery window.
frazer databases connect	Open a session over Frazer Link with your Frazer identity.
frazer databases proxy	Serve an instance on a local port for your own tools.
frazer databases users create	Create a database user from a role bundle.
frazer databases backups list	List scheduled, on-demand and final backups.
frazer databases backups create	Take an on-demand backup.
frazer databases restore	Restore to a time or log position, into a new instance.
frazer databases undelete	Bring a deleted database back to its last second, inside its restore window.
frazer databases replicas create	Add a read replica, in the same site or another one.
frazer databases branches create	Create a Postgres copy at a point in time with a time to live.
frazer databases upgrade	Plan a major version upgrade, in place or blue/green.
frazer databases insights top	List an instance's top queries.
frazer databases ask	Turn a question into read-only SQL and run it.
frazer databases move-to-managed	Move a database declared in Git to a managed instance.

In-memory store

Command	What it does
frazer keyvalue instances create	Create an instance from a plan (alias frazer kv).
frazer keyvalue instances list	List instances across engines and sites.
frazer keyvalue instances describe	Show an instance with its endpoints, nodes and backups.
frazer keyvalue instances update	Change node type, replicas, shards or settings through a plan.
frazer keyvalue instances connect	Open the engine's command-line client over Frazer Link with a short-lived IAM login.
frazer keyvalue instances proxy	Serve an instance on a local port for apps on your laptop.
frazer keyvalue instances failover	Fail over to a replica, as an audited live action.
frazer keyvalue instances restore	Restore a backup into a new instance.
frazer keyvalue instances import	Create an instance from an RDB file in a bucket.
frazer keyvalue users create	Create an ACL user from a template.
frazer keyvalue backups list	List an instance's backups, including final ones.
frazer keyvalue backups create	Take an on-demand backup.

Secrets

Command	What it does
frazer secrets create	Create a secret with its folder, environment key and rotation schedule.
frazer secrets versions add	Add a version from stdin, with a reason.
frazer secrets versions alias	Point an alias such as prod at a version.
frazer secrets where-used	List every consumer of a secret and the version it holds.
frazer secrets run	Run a local command with a project's secrets in its environment (needs the Secret Accessor permission).
frazer secrets import	Import keys and values from a .env file.

VPC and firewall

Command	What it does
frazer network networks create	Create a VPC network in a project.
frazer network subnets create	Create a subnet at one site, with secondary ranges for cluster pods and services.
frazer network firewall-policies rules add	Add a rule to a firewall policy.
frazer network firewall-policies get-effective	Show the effective firewall rules of a VM, every tier compiled into one ordered list.
frazer network addresses create	Reserve a static internal or external address.
frazer network addresses attach	Attach an address to a gateway, a load balancer or a VM.
frazer network addresses list	List the project's addresses, filtered by state.
frazer network nats create	Create a NAT that gives subnets internet egress from fixed addresses.
frazer network endpoints create	Put a managed database or Frazer Registry at an address inside your subnet.
frazer network connectivity-tests run	Test whether a source can reach a destination, with every hop and the rule that decided it.
frazer network flow-logs tail	Stream a subnet's flow logs, with a filter.

Load balancers

Command	What it does
frazer kubernetes gateways create	Create a gateway for a cluster, with an address pair, a certificate and DNS records in one plan.

DNS and certificates

Command	What it does
frazer dns verified-domains create	Prove that your organization owns a domain, optionally with a hold against other organizations.
frazer dns managed-zones create	Create a public or private zone.
frazer dns managed-zones check-delegation	Show the NS and DS records at the parent, lame servers, CDS state and the serial on every name server.
frazer dns managed-zones verify	Run the ownership check for a zone.
frazer dns managed-zones import-records	Import a BIND zone file or YAML as one change.
frazer dns managed-zones export-records	Export a zone as BIND or YAML.
frazer dns managed-zones restore	Return a zone to an earlier revision, as a new change.
frazer dns managed-zones undelete	Bring back a zone deleted in the last 30 days.
frazer dns managed-zones rotate-key-signing-key	Start a roll of the zone's DNSSEC key-signing key.
frazer dns record-sets create	Create a record set, with values or with a Frazer resource as its target.
frazer dns changes create	Apply additions and deletions from a file as one atomic change.
frazer dns changes get	Show a change; with --wait, return when every name server serves it.
frazer dns server-policies create	Set resolver options, such as inbound forwarding, for networks.

Frazer Access and VPN

Command	What it does
frazer access connect	Connect this device to your organization's private network with Frazer sign-in.
frazer access status	Show the path to each peer, direct or through a relay.
frazer ssh	Open SSH to a VM or a box over Frazer Access, with nothing else to install; the CLI carries its own client.
frazer network vpn-tunnels create	Create an HA VPN tunnel from a site's VPN gateway to your router, with BGP.

Frazer Monitoring

Command	What it does
frazer logs	Query a project's logs from the monitoring cell, without access to the cluster.
frazer monitoring metrics	Query a project's metrics with PromQL from the monitoring cell, without access to the cluster.
frazer monitoring dashboards apply	Write a dashboard from its view definition (YAML or JSON) to the project's dashboards, with an audit entry; --dry-run shows the diff and the queries' estimated cost.
frazer monitoring dashboards import	Convert dashboard JSON from another tool into a view definition, with a report per panel.
frazer monitoring dashboards export	Export a dashboard as Frazer's own YAML or JSON.

Security Center

Command	What it does
frazer security findings list	List findings, filtered by severity, project or kind.
frazer security findings get	Show one finding with its evidence; --path prints the attack path.
frazer security findings mute	Mute a finding with a reason and an expiry.
frazer security controls list	List controls, filtered by area and status.
frazer security evidence export	Export the evidence collected for a framework and a period.
frazer security respond isolate	Plan a quarantine of a workload; applying it needs a second factor.

Identity and access

Command	What it does
frazer login	Sign the CLI in through your browser; with --no-browser, confirm a code on another device instead.
frazer login --step-up	Confirm with a passkey or second factor, good for 10 minutes, before you approve or create a token.
frazer logout	Revoke the CLI's grant and delete its key.
frazer auth print-access-token	Print an access token for the active configuration.
frazer auth list	List the CLI's configurations and their grants.
frazer identity personal-access-tokens create	Create a personal access token; needs a fresh step-up.
frazer projects get-iam-policy	Show a project's role bindings.
frazer projects add-iam-policy-binding	Grant a role to a member on a project.
frazer projects remove-iam-policy-binding	Remove a member's role on a project.
frazer iam groups create	Create a group in the organization.
frazer iam memberships create	Add a person, a service account or a group to a group.
frazer iam service-accounts create	Create a service account in a project.
frazer iam roles list	List predefined and custom roles with their permissions.
frazer iam decisions troubleshoot-access	Explain a decision by its ID, or a principal's access to a resource.
frazer approvals list	List approvals; with --can-decide, only the ones you may decide.
frazer approvals get	Show an approval with its plan, votes and state.
frazer approvals approve	Vote to approve; needs a fresh step-up.
frazer approvals reject	Reject with a reason; one rejection ends the approval.
frazer approvals cancel	Cancel an approval you requested.
frazer approvals wait	Follow an approval until it is applied or ends.
frazer approvals verify	Check a decided approval's signed record.
frazer approvals attestation-keys export	Export the public keys that sign approval records.

Billing and budgets

Command	What it does
frazer billing accounts list	List the billing accounts you hold a billing role on, in any organization.
frazer billing accounts get	Show a billing account with its currency, type and state.
frazer billing accounts get-iam-policy	Show who holds which billing role on an account.
frazer billing accounts set-iam-policy	Replace the billing roles on an account.
frazer billing projects link	Link a project to a billing account; needs a right on the account and one on the project.
frazer billing orgs set-default	Set the billing account new projects of an organization are linked to.
frazer billing settings get	Show a project's or an organization's billing settings.
frazer billing project-links list	List every project an account pays or paid for, with the link history.
frazer billing budgets create	Create a budget with alert thresholds and an optional cap.
frazer billing caps lift	Lift a cap that paused work, with a reason.
frazer billing caps raise	Raise a cap for this month (--until) or as a standing amount, with a reason; --dry-run first.
frazer billing caps get	Read the account's default monthly cap, its amount and its basis.
frazer billing caps remove	Remove the default cap, a billing admin only, with the typed sentence; --dry-run first.
frazer billing waiting list	What did not run or paused for funds, by scope and reason, and the action that resumes it.
frazer billing estimate	The cost of a run before it starts, with its p90.
frazer billing costs query	Query costs of an account or a project, grouped and as estimated or final.
frazer billing export set	Send hourly usage and cost files in the FOCUS format to a bucket.
frazer billing skus list	List the public price list, without signing in.
frazer billing usage query	Query metered usage of a project or an organization.
frazer billing usage-events list	List the raw usage events of a project.
frazer billing usage verify	Recompute a project's usage for a period and check the signed hourly digests.
frazer billing usage-digest-chain get	Show the head of a project's chain of signed usage digests.
frazer quota quotas list	List quotas with their limit, usage and where the limit comes from.
frazer quota quota-preferences create	Request a different limit for a quota.

Integrations

Command	What it does
frazer integrations list	List the catalog, filtered by category, installed state or agent support.
frazer integrations get	Show an integration's capabilities, provider scopes and data flow.
frazer integrations install	Install an integration as a connection, with its capabilities and grants.
frazer integrations connections list	List connections, filtered by health.
frazer integrations connections grant	Grant a connection's capabilities to a project, on chosen resources.
frazer integrations connections test	Verify a connection against the provider now.
frazer integrations connections rotate	Rotate a connection's credential. Takes effect at once and is audited.

Webhooks and events

Command	What it does
frazer integrations webhook-endpoints create	Create a webhook endpoint in a project, with the event types it receives.
frazer integrations webhook-endpoints deliveries	List an endpoint's deliveries, filtered by status and time.
frazer integrations webhook-endpoints redeliver	Redeliver an endpoint's failed deliveries since a given time.
frazer integrations webhook-endpoints listen	Forward events to a local port while you develop a receiver.
frazer integrations webhook-endpoints trigger	Send a test event of a given type.