---
title: "CLI commands"
description: "Every frazer command by product, as each product's docs page declares it, with what it does; frazer <command> --help shows every flag and --help --json its card."
url: https://frazer.ai/docs/cli/commands
index: https://frazer.ai/docs/cli/llms.txt
tokens: 12001
---

> For agents: this page is indexed at https://frazer.ai/docs/cli/llms.txt, and every page at https://frazer.ai/llms.txt. Copy commands from this file exactly.

# CLI commands

Every product’s `frazer` commands, from that product’s page. Each heading links to the product’s guide; `frazer <command> --help` shows every flag, and `frazer <command> --help --json` its card for agents. Install, sign-in, the command grammar, output formats, exit codes and errors are on [CLI](https://frazer.ai/docs/cli); `fir` commands are on the [Fir CLI](https://frazer.ai/docs/source/reference/cli) reference.

### [Servers and pools](https://frazer.ai/docs/servers)

| Command | What it does |
| --- | --- |
| `frazer servers add` | Add a Linux server you run. Over SSH from your laptop (frazer servers add root@host), or on the server itself; installs the agent and accepts the server as you. |
| `frazer servers join-tokens create` | Create a join token for a site and pool, for the install command in automation and cloud-init. |
| `frazer servers import ovh` | Plan, then reinstall and join servers from a connected OVHcloud account into a pool. |
| `frazer servers server-pools share` | Share a server pool with projects of the organization, with a guaranteed amount and a limit for each. |
| `frazer servers server-pools unshare` | Remove a project from a pool's share settings. Its entry drains for the grace period, then its VMs stop. |
| `frazer servers server-pools list` | List server pools in a project; with --include-shared, also the pools shared with it. |

### [Kubernetes](https://frazer.ai/docs/kubernetes)

| Command | What it does |
| --- | --- |
| `frazer kubernetes clusters create` | Create a cluster in a project. With --dry-run, print the plan and create nothing. |
| `frazer kubernetes clusters list` | List the clusters in a project. |
| `frazer kubernetes clusters get` | Show one cluster with its class, version, channel, node pools and state. |
| `frazer kubernetes clusters get-credentials` | Write a kubeconfig with no secret in it. kubectl then asks frazer for a 10-minute token for that one cluster. |
| `frazer kubernetes clusters upgrade` | Upgrade a cluster to a Kubernetes version. --rehearse tries it on a clone, --dry-run prints the plan, --at next-window schedules it. |
| `frazer kubernetes clusters upgrade pause` | Pause a running upgrade. |
| `frazer kubernetes clusters upgrade resume` | Resume a paused upgrade. |
| `frazer kubernetes clusters upgrade rollback` | Roll back a running upgrade. |
| `frazer kubernetes clusters upgrade complete` | Finish an upgrade early, skipping the rest of its soak. |
| `frazer kubernetes clusters delete` | Delete a cluster. Deletion is soft, with a restore window and a final database backup. |
| `frazer kubernetes clusters undelete` | Restore a deleted cluster within its restore window. |
| `frazer versions list` | List the Kubernetes versions of each channel with their end-of-support dates. |
| `frazer maintenance policies create` | Create a maintenance policy with a recurring window, exclusions, an order and notices. |
| `frazer maintenance events list` | List planned maintenance events, for example those of the next 30 days. |
| `frazer insights list` | List insights, for example with --category upgrade the deprecated API calls that block an upgrade. |

### [Serverless](https://frazer.ai/docs/serverless)

| Command | What it does |
| --- | --- |
| `frazer deploy` | Deploy the repository you are in. Asks once per app whether it runs on Kubernetes or serverless, and remembers the answer. |
| `frazer serverless deploy` | Build and deploy a service from source or an image, with the data resources it needs, as one plan. |
| `frazer serverless services list` | List the services in a project. |
| `frazer serverless services get` | Show a service, its URL, its revisions and its traffic. |
| `frazer serverless services delete` | Delete a service. |
| `frazer serverless traffic` | Send traffic to a revision, split it between revisions, or tag a revision with its own URL. Rolls back. |
| `frazer serverless jobs create` | Create a job from a service's image, with an optional schedule. |
| `frazer serverless jobs execute` | Run a job now. |
| `frazer serverless stacks create` | Create a stack and every resource in it from a frazer.stack.yaml file. |
| `frazer serverless stacks export` | Write a stack's definition as frazer.stack.yaml. |
| `frazer serverless stacks delete` | Delete a stack and its members together, with final backups. |
| `frazer serverless move` | Move a service to Kubernetes as a pull request to an environment repository. |

### [VMs](https://frazer.ai/docs/vms)

| Command | What it does |
| --- | --- |
| `frazer compute vms create` | Create a VM from a plan, on a server pool or in a Frazer fleet region. |
| `frazer compute vms list` | List the VMs in a project. |
| `frazer compute vms get` | Show one VM with its state, machine type, placement, disks and addresses. |
| `frazer compute vms ssh` | Sign in over SSH with a short-lived certificate; --tunnel goes through Frazer Link. |
| `frazer compute vms console` | Open the VM's serial console; --vnc opens the graphical console. |
| `frazer compute vms stop` | Stop a VM. Its disks stay, and it pays for storage only. |
| `frazer compute vms start` | Start a stopped VM. |
| `frazer compute vms reset` | Hard-reset a VM. |
| `frazer compute vms resize` | Change a VM's machine type. |
| `frazer compute vms migrate` | Live-migrate a VM whose disks are all replicated to another server in the site. |
| `frazer compute vms delete` | Delete a VM. Deletion is soft, with a restore window, and offers a final backup first. |
| `frazer compute vms undelete` | Restore a deleted VM inside its restore window. |
| `frazer storage disks create` | Create a local-nvme, replicated or scratch disk, blank or from an image or a snapshot. |
| `frazer storage disks attach` | Attach a disk to a VM, also while it runs. |
| `frazer storage disks detach` | Detach a disk from a VM. |
| `frazer storage disks resize` | Grow a disk while it is in use. |
| `frazer compute snapshots create` | Snapshot one disk, crash-consistent or app-consistent. |
| `frazer compute snapshots restore` | Restore a snapshot to a new disk, or over the disk of a stopped VM. |
| `frazer compute images create` | Create an image in a family from a disk, a URL or an uploaded file. |
| `frazer compute instance-templates create` | Create an immutable, versioned VM spec, for example from an existing VM. |
| `frazer compute instance-groups create` | Create a group of identical VMs from a template, with autohealing and autoscaling. |
| `frazer compute backup-policies create` | Back up the VMs that match a label on a schedule and keep a number of backups. |

### [Devboxes](https://frazer.ai/docs/devboxes)

| Command | What it does |
| --- | --- |
| `frazer devboxes create` | Create a devbox from a template, on a server pool (--pool) or the Frazer fleet (--location). |
| `frazer devboxes list` | List the devboxes in a project. |
| `frazer devboxes get` | Show one devbox and its state. |
| `frazer devboxes start` | Start a stopped devbox. |
| `frazer devboxes stop` | Stop a devbox; the home is kept and scratch is erased. |
| `frazer devboxes resize` | Change a devbox's size, as a plan. |
| `frazer devboxes delete` | Delete a devbox (Owners only); it stays restorable for 7 days. |
| `frazer devboxes ssh` | Open a shell, or run one command, with a short-lived SSH certificate over Frazer Access or Frazer Link. |
| `frazer devboxes proxy` | The ProxyCommand that IDE remote-SSH connections use. |
| `frazer devboxes rx` | Sync the working tree to a devbox and run a command, arguments passed verbatim. |
| `frazer devboxes open` | Open a devbox in VS Code, JetBrains, the browser or Hermes. |
| `frazer devboxes snapshots create` | Snapshot a devbox's home. |
| `frazer devboxes snapshots list` | List a devbox's snapshots. |
| `frazer devboxes snapshots restore` | Restore a snapshot into a new devbox. |
| `frazer devboxes ports share` | Share a port's preview URL with people or a group, with an expiry. |
| `frazer devboxes policies apply` | Create or change a devbox policy from a file; prints the plan first. |
| `frazer devboxes templates build` | Build a workspace template. |
| `frazer devboxes templates publish` | Publish a new version of a workspace template. |
| `frazer devboxes images build` | Build an organization image from a Dockerfile or devcontainer into Frazer Registry. |

### [Fir](https://frazer.ai/docs/source)

| Command | What it does |
| --- | --- |
| `frazer source repositories import` | Import a git repository into Fir with its full history, as a plan you read before anything changes. |
| `frazer source repositories export` | Write a Fir repository out as a plain git repository, history included, at any time. |

### [GitHub runners](https://frazer.ai/docs/runners/github)

| Command | What it does |
| --- | --- |
| `frazer githubrunners pools create` | Create a runner pool from a plan, with its provider, connection, placement, sizes, isolation and cache policy. |
| `frazer githubrunners pools get` | Show a pool; with -o yaml, its full spec, lanes and scaling included. |
| `frazer githubrunners pools update` | Change a pool's lanes, caps, budgets or scaling, as a plan. |
| `frazer githubrunners pools snippet` | Print the lane-aware runs-on line for a pool. |
| `frazer githubrunners pools share` | Share a pool with other projects and name the repositories each one runs, as a plan. |
| `frazer githubrunners jobs list` | List a project's jobs, for example only slow ones in the last 24 hours. |
| `frazer githubrunners jobs get` | Show a job's phases; with --why, compare them with the job's usual time and name the causes. |
| `frazer githubrunners jobs debug` | Open a devbox from a failed job's image, warm disk and environment. |
| `frazer githubrunners images versions list` | List the versions of a runner image and the ring each one is in. |
| `frazer githubrunners insights` | Show a project's CI insights, such as flaky tests. |

### [Cache](https://frazer.ai/docs/cache)

| Command | What it does |
| --- | --- |
| `frazer cache get` | Show a cache's tiers, usage and byte hit rate (bytes served ÷ requested). |
| `frazer cache namespaces list` | List a cache's namespaces, filtered by tier and sorted by byte hit rate or size. |
| `frazer cache policies get` | Show a cache policy; with -o yaml, its writers, scope, quotas and eviction rules. |
| `frazer cache policies test` | Show what a given writer may read and write under a policy. |
| `frazer cache volumes list` | List the warm disks of a repository. |
| `frazer cache purge` | Remove entries by writer identity or by namespace, as a plan that lists the affected jobs. |
| `frazer cache writes` | List published and refused writes; with --refused, refusals only. |

### [Registry](https://frazer.ai/docs/registry)

| Command | What it does |
| --- | --- |
| `frazer auth configure-docker` | Install a Docker credential helper that signs in to Frazer Registry with a short-lived Frazer token. |
| `frazer registry repositories create` | Create a repository with its format, mode, immutable tags and, for a remote repository, its upstream and credential. |
| `frazer registry images list` | List an image's versions with their tags, scan results and signatures. |
| `frazer registry images describe` | Show one version by digest, its referrers and where it runs. |
| `frazer registry cleanup dry-run` | Show what a repository's cleanup policies would delete and why each version is kept. |
| `frazer registry versions restore` | Restore a deleted version within 30 days. |
| `frazer registry files push` | Push a versioned, immutable file to a Generic repository. |
| `frazer import start` | Start an import from another registry; with --dry-run, show the plan item by item. |
| `frazer import apply` | Apply an import's plan. |

### [Environments and GitOps](https://frazer.ai/docs/gitops)

| Command | What it does |
| --- | --- |
| `frazer releases environments connect` | Connect a repository path to a cluster as an environment, with its namespaces, permission profile and sync policy, as a plan. |

### [Frazer QA](https://frazer.ai/docs/previews/tests)

| Command | What it does |
| --- | --- |
| `frazer previews create` | Create a preview for a subject (--for pr:<repo>#<n>, stack:<name>, node:<plan>#<node>, program:<n> or ws:<workspace>), or of a past moment with --at; with --dry-run, print what it would copy, share, branch and fake, its URL and its cost. |
| `frazer previews url` | Print a preview's URL, the latest revision's or one revision's. |
| `frazer previews login` | Mint a single-use login handle that signs a browser in as one of the recipe's personas. |
| `frazer previews logs` | Read the logs of a preview's copies. |
| `frazer previews exec` | Run a command in one of a preview's copies, such as one of its scheduled jobs. |
| `frazer previews sleep` | Put a preview to sleep now; wake brings it back. |
| `frazer previews why` | Explain a failed or slow preview from its fixed list of causes, with the evidence and the fix. |
| `frazer previews attach` | Attach an agent session's workspace to a preview, so it serves one of the preview's services (--service, --from). |

### [Templates and previews](https://frazer.ai/docs/previews)

| Command | What it does |
| --- | --- |
| `frazer templates run` | Run a template; with --dry-run, print one plan with every effect (repository, environment folder, database, hostname, checks) before anything happens. |
| `frazer preview-policies create` | Create a preview policy on an environment, with the trigger that decides which pull requests get a preview. |
| `frazer previews list` | List live previews with their pull request, URL, state, age and cost. |
| `frazer previews open` | Open a preview's URL. |
| `frazer previews extend` | Keep a preview past its TTL. |
| `frazer previews delete` | Delete a preview and its database copy. |

### [AI and GPUs](https://frazer.ai/docs/ai)

| Command | What it does |
| --- | --- |
| `frazer ai overview` | Show GPU capacity per class (your servers, rented servers and the fleet), project quotas, queued work and spend. |
| `frazer ai models import` | Import a model from Hugging Face or another source, pinned to an immutable revision. |
| `frazer ai models list` | List the models in the project. |
| `frazer ai models get` | Show a model's revision, files, license and lineage. |
| `frazer ai models export --oci` | Export a model as an OCI ModelKit to a model repository in Frazer Registry. |
| `frazer ai endpoints deploy` | Deploy a model as a model endpoint with an OpenAI-compatible API. |
| `frazer ai endpoints logs` | Show the logs of a model endpoint. |
| `frazer ai endpoints metrics` | Show the metrics of a model endpoint. |
| `frazer ai endpoints keys create` | Create a key for a model endpoint. |
| `frazer ai endpoints adapters add` | Load a fine-tuned adapter on a running model endpoint. |
| `frazer ai serverless-endpoints deploy` | Deploy your container from a repository as a serverless endpoint on GPUs. |
| `frazer ai serverless-endpoints run` | Submit a job to a queue-mode serverless endpoint, or wait for its result with --sync. |
| `frazer ai serverless-endpoints jobs list` | List the jobs of a serverless endpoint. |
| `frazer ai serverless-endpoints workers list` | List the workers of a serverless endpoint and their states. |
| `frazer ai serverless-endpoints purge-queue` | Remove every queued job of a serverless endpoint. |
| `frazer ai gpu-pods create` | Create a GPU pod from a template, with an optional maximum runtime. |
| `frazer ai gpu-pods ssh` | Open a shell on a GPU pod. |
| `frazer ai gpu-pods cp` | Copy files to or from a GPU pod. |
| `frazer ai gpu-pods stop` | Stop a GPU pod and keep its volumes. |
| `frazer ai gpu-templates create --from-pod` | Save a running GPU pod as a GPU template. |
| `frazer ai gpu-templates list` | List GPU templates (official, organization and personal). |
| `frazer ai volumes create` | Create a volume for pods, endpoints and jobs. |
| `frazer ai volumes attach` | Attach a volume to a running pod or job. |
| `frazer ai volumes detach` | Detach a volume while the workload keeps running. |
| `frazer ai volumes copy` | Copy a volume to another location. |
| `frazer ai fine-tuning-jobs create` | Start a fine-tuning job, and optionally deploy the result when it beats a model you name. |
| `frazer ai gpu-clusters lease` | Lease whole GPU servers in one fabric as a GPU cluster for a term. |
| `frazer ai train-jobs run` | Start a training job from a YAML file on a GPU cluster. |
| `frazer ai train-jobs resume` | Resume a training job from a checkpoint. |
| `frazer ai train-jobs stragglers` | Show the GPUs and ranks that slow a training job down. |

### [LLM gateway](https://frazer.ai/docs/llm-gateway)

| Command | What it does |
| --- | --- |
| `frazer llm providers connect` | Connect a model provider to the project, with your own key or through Frazer's own contract with the provider. |
| `frazer llm routes apply -f` | Create or change a route from a YAML file; --dry-run shows the plan first. |
| `frazer llm keys create` | Create a key with the routes it may use, a budget and rate limits. |
| `frazer llm token` | Print a 1-hour token for the caller, for use as an API key helper. |
| `frazer llm logs` | List gateway requests, filtered by status and time. |
| `frazer llm usage` | Show usage and cost for a period, grouped by key or another dimension. |

### [Knowledge](https://frazer.ai/docs/knowledge)

| Command | What it does |
| --- | --- |
| `frazer knowledge knowledge-bases create` | Create a knowledge base from a preset, with its sources, access mode and an MCP server. |
| `frazer knowledge sources add` | Add a source to a knowledge base. |
| `frazer knowledge ask` | Ask a question and get an answer with citations, or a reasoned decline. |
| `frazer knowledge eval-runs create` | Run an evaluation set against a knowledge base. |
| `frazer knowledge indexes build` | Build a new index version with changed retrieval settings, next to the active one. |
| `frazer knowledge mcp config` | Print the MCP configuration of a knowledge base for a client such as Claude Code. |

### [Frazer Agents](https://frazer.ai/docs/agents)

| Command | What it does |
| --- | --- |
| `frazer agents create` | Create an agent from a template. |
| `frazer agents list` | List the agents in a project. |
| `frazer agents get` | Show an agent's configuration and state. |
| `frazer agents pause` | Pause an agent. Its volume and memory stay. |
| `frazer agents resume` | Resume a paused agent. |
| `frazer agents restart` | Restart an agent's sandbox. |
| `frazer agents quarantine` | Cut an agent's tools, mute its channels and freeze its memory, keeping the evidence. |
| `frazer agents release` | Release an agent from quarantine. |
| `frazer agents export` | Export an agent's configuration. |
| `frazer agents import openclaw` | Import agents, channels, schedules, skills and models from an openclaw.json and its workspace. |
| `frazer agents run` | Run an agent on a one-off task. |
| `frazer agents wakes list` | List an agent's heartbeats, schedules, self-set wakes and subscriptions. |
| `frazer agents wakes cancel` | Cancel a pending wake. |
| `frazer agents channels pair` | Print a pairing code that links your channel account to an agent. |
| `frazer agents memory list` | List the items in an agent's memory. |
| `frazer agents memory forget` | Remove a memory item from the store, the index and the next snapshot. |
| `frazer agents memory export` | Export an agent's memory as Markdown and JSON. |
| `frazer agents connect` | Connect Hermes Desktop, an editor or an MCP client to an agent. |
| `frazer acp` | Bridge an editor to an agent over ACP on stdio. |
| `frazer agents kill-switch on` | Suspend every agent in the organization. Owner only, with step-up. |
| `frazer agents triggers create` | Start an agent when an event matches a CEL filter. |
| `frazer sessions new` | Start a session with a model, an agent and a target. |
| `frazer sessions list` | List the sessions you can see, across agents, devboxes and no-compute sessions. |
| `frazer sessions open` | Open a session. |
| `frazer sessions send` | Send a message to a session. |
| `frazer sessions approve` | Approve an action a session is waiting on, with step-up. |
| `frazer sessions attach` | Stream a session into your terminal. |
| `frazer sessions handoff` | Hand a session to a managed agent. |
| `frazer apps search` | Search the Marketplace's agents by job, with their roles, task kinds, prices and measured outcomes; compare and trial complete the set. |
| `frazer apps installations create` | Install an agent from the Marketplace with its allocation (--allocation month=,task=,run=), as a plan a person approves. |
| `frazer billing budgets move` | Move budget between installed agents' allocations inside a pool, with a reason; --dry-run shows the plan. |
| `frazer agents improvements list` | List an agent's improvement steps, each with its change, its tests, its canary and its state. |
| `frazer agents improvements get` | Show one improvement step with its fresh tasks, its gain and its canary. |
| `frazer agents improvements set-mode` | Set improve to on, shadow or off for an organization, project, agent or use, with a reason. People only. |
| `frazer agents improvement-kinds list` | List the kinds of change a scope's improvement policy approves, and the kinds that wait for a person. |
| `frazer agents revisions explain` | Explain an agent revision, what changed and the evidence behind it. |
| `frazer agents revisions seal` | Approve a change that waits for a person (people only; hidden from agent identities). |

### [Frazer Browsers](https://frazer.ai/docs/agents/browsers)

| Command | What it does |
| --- | --- |
| `frazer browser open` | Open a browser for your session at a URL, next to a preview and as one of its personas; returns the first snapshot. |
| `frazer browser snapshot` | The page as an agent reads it, interactive (the default), content, full or the delta since the last snapshot, with refs such as @e12. |
| `frazer browser run` | Run a short script of many steps in one call, with one receipt per step; it stops at the first failed step. |
| `frazer browser check` | Record a check on the page or on state behind it (an API response, a row); a test passes on state checks. |
| `frazer browser login` | Sign in as one of the preview's personas with a one-time login handle; no real credential reaches the agent. |
| `frazer browser handoff` | Hand the page to a person for a real sign-in, a challenge or a payment, as a person task. |
| `frazer browser policy get` | The project's browser policy, the outside origins it allows with their purpose, mode and rate limit. |
| `frazer browser policy propose` | Propose an outside origin as a reviewed change; a project admin who did not write it approves. |
| `frazer browser rerun` | Rerun a recording or a flow k times against a preview, with the clock, randomness and network pinned. |
| `frazer browser repro` | Reproduce an issue from its evidence in a preview at the issue's moment, and export the failing test. |
| `frazer browser export` | Export a recording as an editable flow or an end-to-end test file. |
| `frazer browser list` | List hosted browsers (br-…) with their sessions, states and causes; get and close complete the set. |
| `frazer desktop open` | Open a Linux desktop VM for your session, to drive apps outside the browser. |

### [Frazer Skills](https://frazer.ai/docs/agents/skills)

| Command | What it does |
| --- | --- |
| `frazer skills list` | List the skills in your organization's registry, by source, skill set or the agents that use them. |
| `frazer skills get` | Show a skill or one version, with its checks, attestation, use, outcomes and evals. |
| `frazer skills import` | Import a public skill or a Hub skill repository's skill, pinned to a commit, as a pull request on your mirror repository that runs the import checks. |
| `frazer skills allow` | Allow a skill version for your organization, for people only; hold, block and yank complete the set. |
| `frazer skills sources create` | Connect a skill repository, so every merge builds signed skill versions. |
| `frazer skills sets update` | Change a skill set (entries, pins or channels, activation modes); with --compile, print the catalog each harness would list. |
| `frazer skills locks get` | Show the skill lock a session runs with; refresh moves a running session to newer allowed versions. |
| `frazer skills uses list` | Which sessions loaded a skill, how, and what came of the work, grouped by squad, agent, harness or repository. |
| `frazer skills evals run` | Run a skill's trigger, output or safety evals against a baseline, across your harnesses and models. |
| `frazer skills suggestions list` | Suggestions to improve a skill, each with its evidence; apply opens the pull request. |
| `frazer skills gaps list` | Gaps where agents struggled with no helpful skill; draft writes a candidate skill from the sessions that went well. |
| `frazer skills policy get` | Your organization's skills policy, the narrow rule's state included; update changes it. |
| `frazer skills decisions list` | Every allow, hold, block and yank, with the rule or person behind it and the checks it relied on. |

### [Harnesses](https://frazer.ai/docs/agents/harnesses)

| Command | What it does |
| --- | --- |
| `frazer harnesses list` | List the catalog's harnesses, by use, tier or kind, with their status and where each runs in your organization. |
| `frazer harnesses get` | Show a harness at a version, with its tier, license, credential modes and the capabilities its compatibility checks found. |
| `frazer harnesses enable` | Enable a harness for a project, as a plan that records the terms you accept. |
| `frazer harnesses profiles create` | Create a harness profile (harness at an exact version, models, tools, skills, context policy); list, get, update and revisions complete the set. |
| `frazer harnesses assignments set` | Assign a profile to a use at the organization, project, use or item scope; with --validate-only, check eligibility and print the plan. |
| `frazer harnesses explain` | Explain which profile a session ran on and why, from the item to the organization's harness policy. |
| `frazer harnesses try` | Run up to four harnesses side by side on one task, in a workspace that nothing leaves, within a budget. |
| `frazer harnesses compare` | Compare profiles on a standard set of your tasks, with a null baseline. |
| `frazer harnesses simulate` | Replay up to 10,000 of your tasks across candidate profiles and report would-merge rates, cost and lift, within a hard budget. |
| `frazer harnesses calibration get` | Your organization's table of task class to recommended profile; propose and apply turn it into assignments. |
| `frazer harnesses postmortems list` | The Frazer harness's public postmortems and the regression notices on other harnesses' entries. |

### [Agent squads](https://frazer.ai/docs/squads)

| Command | What it does |
| --- | --- |
| `frazer agents squads create` | Create a squad from a template, with its accountable person. |
| `frazer agents squads members add` | Add an agent or a person to a squad, with a role. |
| `frazer agents objectives create` | Create an objective for a squad, with key results and guardrails. |
| `frazer agents campaigns create` | Create a campaign over a set of targets, with a concurrency limit and a budget. |
| `frazer agents campaigns pause` | Pause a campaign, with a reason. The pause takes effect at once and is audited. |

### [Squads and campaigns](https://frazer.ai/docs/squads/campaigns)

| Command | What it does |
| --- | --- |
| `frazer agents campaigns plan` | The plan a person approves when a campaign is outside its starter's campaign policy. |
| `frazer agents campaigns start` | Start a campaign or its next wave; pause, resume, drain and stop complete the set, each with a reason. |
| `frazer agents campaigns get` | A campaign's count line, task states, waiting reasons and exceptions by cause. |
| `frazer agents campaigns board` | The campaign board as data, by state, squad, item or cause, in any density. |
| `frazer agents campaigns tasks list` | A campaign's tasks, filtered by state and reason, such as tasks not run for no funds. |
| `frazer agents campaigns sessions list` | The sessions of a campaign, with --successors for restarts and what they brought back. |
| `frazer agents campaigns explain` | Every admission check a task passed or failed, with its result and the budget reservations. |
| `frazer agents campaigns scan` | Run the recipe's dry run over the selector and write the data table, one row a location, labeled change, irrelevant or agent. |
| `frazer agents campaigns burndown` | The targets left by state, by hour. |
| `frazer agents campaigns landed` | The landed share, targets merged and kept at 14 days, with the rest by reason. |
| `frazer agents campaigns sweep` | Sweep a wave's failed shards with a tuned recipe revision probed on a sample. |
| `frazer agents squads messages send` | Send a typed message on the squad's one channel; follow-up and wait complete the set. |
| `frazer agents campaigns simulate` | Simulate a campaign before it starts, in seconds and with no model calls, for each shape and setting you compare. |
| `frazer agents campaigns calibrate` | Refit the simulator's inputs from your organization's own campaigns. |
| `frazer agents squads health` | A squad's interventions, escalations and limits, grouped by cause. |
| `frazer agents campaign-policies update` | Change which agents may start campaigns for you and what may start without asking. |

### [Agent images](https://frazer.ai/docs/agent-images)

| Command | What it does |
| --- | --- |
| `frazer agents images build` | Build an image from a spec in an isolated builder, with an SBOM, scans, a signature and a smoke eval. |
| `frazer agents images promote` | Move an image version to the dev, staging or prod channel, by digest. |

### [Frazer Reviewer](https://frazer.ai/docs/reviewer)

| Command | What it does |
| --- | --- |
| `frazer reviewer enable` | Turn on automatic review for the repositories that match a pattern, with a depth and triggers. |
| `frazer reviewer review-policies apply -f` | Create or change a review policy from a YAML file; --dry-run shows the plan. |
| `frazer review` | Review a diff, a directory, a branch or any file as code, security or cold review; the estimate prints first. |
| `frazer review loop` | Loop on a target until it is clean, ending with a held-out pass. |
| `frazer review estimate` | The estimate of a review before it runs (tokens by model and the fee for an agent's pull request), with its p90, at the price list's version. |
| `frazer reviewer review-rules approve` | Approve a rule draft after its backtest. |

### [Lanes, verdicts and outcomes](https://frazer.ai/docs/reviewer/lanes)

| Command | What it does |
| --- | --- |
| `frazer review verdict` | The second opinion auto-merge reads for a pull request version; exits 0 pass, 11 fail, 13 when a person must unblock it, 7 when it has no verdict yet. |
| `frazer reviewer lanes list` | The lanes in scope by group and kind, with their state, owner, harness profile and quality numbers. |
| `frazer reviewer lanes create` | Create a lane from a file; it starts in shadow until its backtest and seeded set pass. |
| `frazer reviewer lanes test` | Backtest a lane on recent merged pull requests in its scope and on its frozen seeded set. |
| `frazer reviewer lanes install` | Install a lane pack from the Marketplace; its lanes start in shadow. |
| `frazer reviewer lanes revise` | Draft a revision of a lane from a miss analysis or a want; a person seals it. |
| `frazer reviewer lanes lookback` | Re-run a lane revision in shadow over recent merged code, with its estimate first, filing a ranked backlog. |
| `frazer reviewer lanes validate` | Check a lane file against the published lane contract. |
| `frazer reviewer lanes export` | Write a lane as lane JSON, an Agent Skill or SARIF rules. |
| `frazer reviewer lanes import` | Turn a REVIEW.md, an AGENTS.md or a skill into lane drafts; --dry-run returns the drafts. |
| `frazer reviewer coverage get` | What one review run covered, the items, bundles and lanes, and why each skipped lane did not run. |
| `frazer reviewer headlines search` | Search finding headlines across the repository's life, by state, repository and time. |
| `frazer reviewer quality get` | The Reviewer's measured quality, per lane and period. |
| `frazer reviewer lane-revisions seal` | Seal a lane revision, for people only; --dry-run shows the plan. |
| `frazer reviewer runs list` | Review runs in the query language of pull requests, by lane, verdict, risk, cost or outcome. |
| `frazer reviewer items list` | The items of a review run, each with the lanes that read it, the rung reached and the result. |
| `frazer reviewer outcomes list` | Outcome links (told, missed, partial, outside) between incidents, reverts or hotfixes and the reviews of their changes. |
| `frazer reviewer misses get` | A miss analysis: which lane at which rung would have caught a defect, why it did not, and the remedies. |

### [Databases](https://frazer.ai/docs/databases)

| Command | What it does |
| --- | --- |
| `frazer databases create` | Create a database instance from a plan (alias frazer db). |
| `frazer databases list` | List instances, managed and declared in Git (--source managed\|git). |
| `frazer databases describe` | Show an instance with its endpoints, backups and recovery window. |
| `frazer databases connect` | Open a session over Frazer Link with your Frazer identity. |
| `frazer databases proxy` | Serve an instance on a local port for your own tools. |
| `frazer databases users create` | Create a database user from a role bundle. |
| `frazer databases backups list` | List scheduled, on-demand and final backups. |
| `frazer databases backups create` | Take an on-demand backup. |
| `frazer databases restore` | Restore to a time or log position, into a new instance. |
| `frazer databases undelete` | Bring a deleted database back to its last second, inside its restore window. |
| `frazer databases replicas create` | Add a read replica, in the same site or another one. |
| `frazer databases branches create` | Create a Postgres copy at a point in time with a time to live. |
| `frazer databases upgrade` | Plan a major version upgrade, in place or blue/green. |
| `frazer databases insights top` | List an instance's top queries. |
| `frazer databases ask` | Turn a question into read-only SQL and run it. |
| `frazer databases move-to-managed` | Move a database declared in Git to a managed instance. |

### [In-memory store](https://frazer.ai/docs/memory)

| Command | What it does |
| --- | --- |
| `frazer keyvalue instances create` | Create an instance from a plan (alias frazer kv). |
| `frazer keyvalue instances list` | List instances across engines and sites. |
| `frazer keyvalue instances describe` | Show an instance with its endpoints, nodes and backups. |
| `frazer keyvalue instances update` | Change node type, replicas, shards or settings through a plan. |
| `frazer keyvalue instances connect` | Open the engine's command-line client over Frazer Link with a short-lived IAM login. |
| `frazer keyvalue instances proxy` | Serve an instance on a local port for apps on your laptop. |
| `frazer keyvalue instances failover` | Fail over to a replica, as an audited live action. |
| `frazer keyvalue instances restore` | Restore a backup into a new instance. |
| `frazer keyvalue instances import` | Create an instance from an RDB file in a bucket. |
| `frazer keyvalue users create` | Create an ACL user from a template. |
| `frazer keyvalue backups list` | List an instance's backups, including final ones. |
| `frazer keyvalue backups create` | Take an on-demand backup. |

### [Secrets](https://frazer.ai/docs/secrets)

| Command | What it does |
| --- | --- |
| `frazer secrets create` | Create a secret with its folder, environment key and rotation schedule. |
| `frazer secrets versions add` | Add a version from stdin, with a reason. |
| `frazer secrets versions alias` | Point an alias such as prod at a version. |
| `frazer secrets where-used` | List every consumer of a secret and the version it holds. |
| `frazer secrets run` | Run a local command with a project's secrets in its environment (needs the Secret Accessor permission). |
| `frazer secrets import` | Import keys and values from a .env file. |

### [VPC and firewall](https://frazer.ai/docs/network)

| Command | What it does |
| --- | --- |
| `frazer network networks create` | Create a VPC network in a project. |
| `frazer network subnets create` | Create a subnet at one site, with secondary ranges for cluster pods and services. |
| `frazer network firewall-policies rules add` | Add a rule to a firewall policy. |
| `frazer network firewall-policies get-effective` | Show the effective firewall rules of a VM, every tier compiled into one ordered list. |
| `frazer network addresses create` | Reserve a static internal or external address. |
| `frazer network addresses attach` | Attach an address to a gateway, a load balancer or a VM. |
| `frazer network addresses list` | List the project's addresses, filtered by state. |
| `frazer network nats create` | Create a NAT that gives subnets internet egress from fixed addresses. |
| `frazer network endpoints create` | Put a managed database or Frazer Registry at an address inside your subnet. |
| `frazer network connectivity-tests run` | Test whether a source can reach a destination, with every hop and the rule that decided it. |
| `frazer network flow-logs tail` | Stream a subnet's flow logs, with a filter. |

### [Load balancers](https://frazer.ai/docs/load-balancers)

| Command | What it does |
| --- | --- |
| `frazer kubernetes gateways create` | Create a gateway for a cluster, with an address pair, a certificate and DNS records in one plan. |

### [DNS and certificates](https://frazer.ai/docs/dns)

| Command | What it does |
| --- | --- |
| `frazer dns verified-domains create` | Prove that your organization owns a domain, optionally with a hold against other organizations. |
| `frazer dns managed-zones create` | Create a public or private zone. |
| `frazer dns managed-zones check-delegation` | Show the NS and DS records at the parent, lame servers, CDS state and the serial on every name server. |
| `frazer dns managed-zones verify` | Run the ownership check for a zone. |
| `frazer dns managed-zones import-records` | Import a BIND zone file or YAML as one change. |
| `frazer dns managed-zones export-records` | Export a zone as BIND or YAML. |
| `frazer dns managed-zones restore` | Return a zone to an earlier revision, as a new change. |
| `frazer dns managed-zones undelete` | Bring back a zone deleted in the last 30 days. |
| `frazer dns managed-zones rotate-key-signing-key` | Start a roll of the zone's DNSSEC key-signing key. |
| `frazer dns record-sets create` | Create a record set, with values or with a Frazer resource as its target. |
| `frazer dns changes create` | Apply additions and deletions from a file as one atomic change. |
| `frazer dns changes get` | Show a change; with --wait, return when every name server serves it. |
| `frazer dns server-policies create` | Set resolver options, such as inbound forwarding, for networks. |

### [Frazer Access and VPN](https://frazer.ai/docs/access)

| Command | What it does |
| --- | --- |
| `frazer access connect` | Connect this device to your organization's private network with Frazer sign-in. |
| `frazer access status` | Show the path to each peer, direct or through a relay. |
| `frazer ssh` | Open SSH to a VM or a box over Frazer Access, with nothing else to install; the CLI carries its own client. |
| `frazer network vpn-tunnels create` | Create an HA VPN tunnel from a site's VPN gateway to your router, with BGP. |

### [Frazer Monitoring](https://frazer.ai/docs/monitoring)

| Command | What it does |
| --- | --- |
| `frazer logs` | Query a project's logs from the monitoring cell, without access to the cluster. |
| `frazer monitoring metrics` | Query a project's metrics with PromQL from the monitoring cell, without access to the cluster. |
| `frazer monitoring dashboards apply` | Write a dashboard from its view definition (YAML or JSON) to the project's dashboards, with an audit entry; --dry-run shows the diff and the queries' estimated cost. |
| `frazer monitoring dashboards import` | Convert dashboard JSON from another tool into a view definition, with a report per panel. |
| `frazer monitoring dashboards export` | Export a dashboard as Frazer's own YAML or JSON. |

### [Security Center](https://frazer.ai/docs/security-center)

| Command | What it does |
| --- | --- |
| `frazer security findings list` | List findings, filtered by severity, project or kind. |
| `frazer security findings get` | Show one finding with its evidence; --path prints the attack path. |
| `frazer security findings mute` | Mute a finding with a reason and an expiry. |
| `frazer security controls list` | List controls, filtered by area and status. |
| `frazer security evidence export` | Export the evidence collected for a framework and a period. |
| `frazer security respond isolate` | Plan a quarantine of a workload; applying it needs a second factor. |

### [Identity and access](https://frazer.ai/docs/iam)

| Command | What it does |
| --- | --- |
| `frazer login` | Sign the CLI in through your browser; with --no-browser, confirm a code on another device instead. |
| `frazer login --step-up` | Confirm with a passkey or second factor, good for 10 minutes, before you approve or create a token. |
| `frazer logout` | Revoke the CLI's grant and delete its key. |
| `frazer auth print-access-token` | Print an access token for the active configuration. |
| `frazer auth list` | List the CLI's configurations and their grants. |
| `frazer identity personal-access-tokens create` | Create a personal access token; needs a fresh step-up. |
| `frazer projects get-iam-policy` | Show a project's role bindings. |
| `frazer projects add-iam-policy-binding` | Grant a role to a member on a project. |
| `frazer projects remove-iam-policy-binding` | Remove a member's role on a project. |
| `frazer iam groups create` | Create a group in the organization. |
| `frazer iam memberships create` | Add a person, a service account or a group to a group. |
| `frazer iam service-accounts create` | Create a service account in a project. |
| `frazer iam roles list` | List predefined and custom roles with their permissions. |
| `frazer iam decisions troubleshoot-access` | Explain a decision by its ID, or a principal's access to a resource. |
| `frazer approvals list` | List approvals; with --can-decide, only the ones you may decide. |
| `frazer approvals get` | Show an approval with its plan, votes and state. |
| `frazer approvals approve` | Vote to approve; needs a fresh step-up. |
| `frazer approvals reject` | Reject with a reason; one rejection ends the approval. |
| `frazer approvals cancel` | Cancel an approval you requested. |
| `frazer approvals wait` | Follow an approval until it is applied or ends. |
| `frazer approvals verify` | Check a decided approval's signed record. |
| `frazer approvals attestation-keys export` | Export the public keys that sign approval records. |

### [Billing and budgets](https://frazer.ai/docs/billing)

| Command | What it does |
| --- | --- |
| `frazer billing accounts list` | List the billing accounts you hold a billing role on, in any organization. |
| `frazer billing accounts get` | Show a billing account with its currency, type and state. |
| `frazer billing accounts get-iam-policy` | Show who holds which billing role on an account. |
| `frazer billing accounts set-iam-policy` | Replace the billing roles on an account. |
| `frazer billing projects link` | Link a project to a billing account; needs a right on the account and one on the project. |
| `frazer billing orgs set-default` | Set the billing account new projects of an organization are linked to. |
| `frazer billing settings get` | Show a project's or an organization's billing settings. |
| `frazer billing project-links list` | List every project an account pays or paid for, with the link history. |
| `frazer billing budgets create` | Create a budget with alert thresholds and an optional cap. |
| `frazer billing caps lift` | Lift a cap that paused work, with a reason. |
| `frazer billing caps raise` | Raise a cap for this month (--until) or as a standing amount, with a reason; --dry-run first. |
| `frazer billing caps get` | Read the account's default monthly cap, its amount and its basis. |
| `frazer billing caps remove` | Remove the default cap, a billing admin only, with the typed sentence; --dry-run first. |
| `frazer billing waiting list` | What did not run or paused for funds, by scope and reason, and the action that resumes it. |
| `frazer billing estimate` | The cost of a run before it starts, with its p90. |
| `frazer billing costs query` | Query costs of an account or a project, grouped and as estimated or final. |
| `frazer billing export set` | Send hourly usage and cost files in the FOCUS format to a bucket. |
| `frazer billing skus list` | List the public price list, without signing in. |
| `frazer billing usage query` | Query metered usage of a project or an organization. |
| `frazer billing usage-events list` | List the raw usage events of a project. |
| `frazer billing usage verify` | Recompute a project's usage for a period and check the signed hourly digests. |
| `frazer billing usage-digest-chain get` | Show the head of a project's chain of signed usage digests. |
| `frazer quota quotas list` | List quotas with their limit, usage and where the limit comes from. |
| `frazer quota quota-preferences create` | Request a different limit for a quota. |

### [Integrations](https://frazer.ai/docs/integrations)

| Command | What it does |
| --- | --- |
| `frazer integrations list` | List the catalog, filtered by category, installed state or agent support. |
| `frazer integrations get` | Show an integration's capabilities, provider scopes and data flow. |
| `frazer integrations install` | Install an integration as a connection, with its capabilities and grants. |
| `frazer integrations connections list` | List connections, filtered by health. |
| `frazer integrations connections grant` | Grant a connection's capabilities to a project, on chosen resources. |
| `frazer integrations connections test` | Verify a connection against the provider now. |
| `frazer integrations connections rotate` | Rotate a connection's credential. Takes effect at once and is audited. |

### [Webhooks and events](https://frazer.ai/docs/webhooks)

| Command | What it does |
| --- | --- |
| `frazer integrations webhook-endpoints create` | Create a webhook endpoint in a project, with the event types it receives. |
| `frazer integrations webhook-endpoints deliveries` | List an endpoint's deliveries, filtered by status and time. |
| `frazer integrations webhook-endpoints redeliver` | Redeliver an endpoint's failed deliveries since a given time. |
| `frazer integrations webhook-endpoints listen` | Forward events to a local port while you develop a receiver. |
| `frazer integrations webhook-endpoints trigger` | Send a test event of a given type. |

## Pages in Reference

- [CLI](https://frazer.ai/docs/cli.md)
- [CLI commands](https://frazer.ai/docs/cli/commands.md) (this page)
- [Fir CLI](https://frazer.ai/docs/source/reference/cli.md)
- [API](https://frazer.ai/docs/api.md)
- [MCP](https://frazer.ai/docs/mcp.md)
- [Errors](https://frazer.ai/docs/errors.md)
- [Example values](https://frazer.ai/docs/example-values.md)