---
title: Organizations, projects and access
sidebar_label: orgs, projects, users, roles
description: "clika-cli orgs, projects, users, roles and permissions: the tenancy and access-control commands."
---

Everything on the platform belongs to an **organization**, which is the tenant boundary: its own members, its own devices, its own billing. Inside an organization, a **project** groups resources and scopes who can see them. Every session and every API key is bound to one organization and one project at a time, which is why almost every other command implicitly means "in the project I am currently in".

Access is granted through **roles**. A role is a named bundle of **permissions**, and permissions are the strings the platform checks on each request, for example `devices:read` or `jobs:write`.

Most of this is comfortable in the web app. The commands here exist so you can script onboarding, audit access, and read the current state without clicking.

## Where am I

```
clika-cli auth me
clika-cli auth me-orgs
clika-cli auth me-projects
```

`auth me` prints the account behind your current credential; the other two list what it can reach. Move the session:

```
clika-cli auth switch-org --body '{"org_id":"..."}'
clika-cli auth switch-project --body '{"project_id":"..."}'
```

## Projects

```
clika-cli projects [command]
```

| Subcommand | Purpose |
| --- | --- |
| `list` | Projects you can see. |
| `get <id>` | One project. |
| `create --body '<json>'` | Create a project. Needs an organization `owner` or `admin`; a project role does not confer it. |
| `update <id> --body '<json>'` | Rename or reconfigure one. |
| `delete <id>` | Delete one. Resources belonging to it are reassigned or removed according to the platform's rules, so read `get` first. |
| `members <id>` | Who is on the project. |
| `members-create <id> --body '<json>'` | Add a member. |
| `members-update-user_id <id> <user_id> --body '<json>'` | Change a member's project role. |
| `members-delete-user_id <id> <user_id>` | Remove a member. |

An organization always has a default project, and the last owner of a project cannot be removed, so you cannot lock yourself out by mistake.

Project licenses are covered on the [licensing page](licensing.md); they are `projects licenses*` because a runtime credential is issued to a project.

## Organizations

```
clika-cli orgs [command]
```

The organization surface is large. It divides into five parts.

### Membership

| Subcommand | Purpose |
| --- | --- |
| `list` | Organizations you can see. |
| `get <org_id>` | One organization. |
| `create --body '<json>'` | Create one. |
| `update <org_id> --body '<json>'` | Change its settings. |
| `delete <org_id>` | Delete it. |
| `members <org_id>` | Its members and their roles. |
| `members-create <org_id> --body '<json>'` | Invite a member. |
| `members-update-user_id <org_id> <user_id> --body '<json>'` | Change a member's role. |
| `members-delete-user_id <org_id> <user_id>` | Remove a member. |
| `members-reinvite <org_id> <user_id>` | Send the invitation again, which supersedes the previous one. |
| `transfer-ownership <org_id> --body '<json>'` | Hand ownership to another member. |

### Teams

Teams group members inside an organization so access can be granted to a group rather than person by person.

| Subcommand | Purpose |
| --- | --- |
| `teams <org_id>` | List teams. |
| `teams-team_id <org_id> <team_id>` | Get one team. |
| `teams-create <org_id> --body '<json>'` | Create a team. |
| `teams-update-team_id <org_id> <team_id> --body '<json>'` | Rename or reconfigure it. |
| `teams-delete-team_id <org_id> <team_id>` | Delete it. |
| `teams-members <org_id> <team_id>` | List its members. |
| `teams-members-create <org_id> <team_id> --body '<json>'` | Add a member. |
| `teams-members-delete-user_id <org_id> <team_id> <user_id>` | Remove a member. |

### Single sign-on

| Subcommand | Purpose |
| --- | --- |
| `sso-providers <org_id>` | The identity providers configured for this organization. |
| `sso-providers-id <org_id> <id>` | One provider. |
| `sso-providers-create <org_id> --body '<json>'` | Add one. |
| `sso-providers-update-id <org_id> <id> --body '<json>'` | Change one. |
| `sso-providers-delete-id <org_id> <id>` | Remove one. |
| `sso-domains <org_id>` | Email domains verified for this organization. |
| `sso-domains-verifications <org_id> --body '<json>'` | Start verifying a domain. |
| `sso-domains-verifications-confirm <org_id> --body '<json>'` | Confirm the verification once the DNS record is in place. |
| `sso-domains-delete-id <org_id> <id>` | Remove a verified domain. |

A verified domain is what lets someone with an address at that domain be routed to your identity provider automatically. People who sign in through SSO have no password, so they authenticate the CLI with an [API key](authentication.md#minting-an-api-key-for-ci).

The `sso` group is the deployment-wide counterpart: `sso providers`, `sso providers-create` and `sso providers-id`.

### Billing and plans

| Subcommand | Purpose |
| --- | --- |
| `subscription <org_id>` | The current subscription. |
| `subscription-checkout <org_id> --body '<json>'` | Start a checkout to subscribe. |
| `subscription-change-plan <org_id> --body '<json>'` | Move to another plan. |
| `subscription-cancel <org_id>` | Cancel at the end of the period. |
| `subscription-resume <org_id>` | Undo a pending cancellation. |
| `credits-ledger <org_id>` | Credit balance and history. |
| `credits-checkout <org_id> --body '<json>'` | Buy more credits. |
| `billing-portal <org_id>` | A link to the hosted billing portal. |
| `plan <org_id> --body '<json>'` | Assign the organization's entitlement plan, where an organization administrator is allowed to self-select. |
| `billing catalog` | The plans and prices this deployment offers. |

### Users

`users` is the account surface. On most deployments it is restricted to administrators, because it reaches accounts across the organization.

| Subcommand | Purpose |
| --- | --- |
| `list` | Accounts. |
| `get <id>` | One account. |
| `create --body '<json>'` | Create an account. |
| `update <id> --body '<json>'` | Change one. |
| `delete <id>` | Delete one. |
| `roles <id>` | The roles assigned to an account. |
| `roles-create <id> --body '<json>'` | Assign a role. |
| `roles-delete-role_id <id> <role_id>` | Revoke a role. |
| `export <id>` | Export an account's personal data, the data-subject access request. |
| `erase <id>` | Erase an account, the right-to-erasure request under GDPR Article 17. Distinct from `delete`, and irreversible. |

## Roles and permissions

```
clika-cli permissions list
clika-cli roles list
```

`permissions list` is the catalogue: every permission string the platform checks, with what it governs. Read it before writing a role or scoping an API key, because these strings are the exact values both take.

| Subcommand | Purpose |
| --- | --- |
| `roles list` | Every role. |
| `roles get <id>` | One role and its permissions. |

The role catalogue is fixed: roles are read, assigned and unassigned, never created or edited.

Two rules are worth holding on to, because they explain most refusals:

- **A credential can never exceed its owner.** An API key resolves to the intersection of your permissions and the key's scope, so narrowing an account narrows every key it minted.
- **The surface does not matter.** The web app, the CLI and MCP all pass the same checks. If a command is refused, the same action would be refused in a browser.

## Cross-tenant support access

When CLIKA support needs to look at your organization's data, it is granted through a time-boxed, reason-carrying grant rather than a shared account:

```
clika-cli support-grants list
```

The grant is scoped to one organization, attenuates the capabilities it confers, and expires on its own.

<!-- BEGIN GENERATED COMMAND REFERENCE (NOTES/gen-cli-reference.py) -->

## Full command reference

Every command below is generated from the deployment's own API description, so
one subcommand is exactly one platform operation. Each entry names the method,
the endpoint and the [MCP](mcp.md) tool name, so the same operation is
identifiable whichever surface you drive it from. Path parameters are positional
arguments, query parameters are flags, and a request body is `--body` or
`--body-file`. The hand-written commands, the ones that stream, propagate an
exit code, or hand your terminal to `ssh`, carry no operation line.

The prose above covers the commands most people reach for. This section is the
complete surface, for when you need the flag you have not used before.

### `clika-cli projects`

`projects` has 21 subcommands.

#### `clika-cli projects create`

Create project

```
clika-cli projects create [flags]
```

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/projects`. MCP tool name: `post_projects`.

#### `clika-cli projects delete`

Delete project

```
clika-cli projects delete <id> [flags]
```

Positional arguments: required `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `DELETE /api/projects/{id}`. MCP tool name: `delete_projects_id`.

#### `clika-cli projects get`

Get project

```
clika-cli projects get <id> [flags]
```

Positional arguments: required `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/projects/{id}`. MCP tool name: `get_projects_id`.

#### `clika-cli projects licenses`

List project licenses

```
clika-cli projects licenses <id> [flags]
```

Positional arguments: required `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/projects/{id}/licenses`. MCP tool name: `get_projects_id_licenses`.

#### `clika-cli projects licenses-create`

Issue project license

```
clika-cli projects licenses-create <id> [flags]
```

Positional arguments: required `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/projects/{id}/licenses`. MCP tool name: `post_projects_id_licenses`.

#### `clika-cli projects licenses-delete-lid`

Delete project license

```
clika-cli projects licenses-delete-lid <id> <lid> [flags]
```

Positional arguments: required `<id>`, `<lid>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `DELETE /api/projects/{id}/licenses/{lid}`. MCP tool name: `delete_projects_id_licenses_lid`.

#### `clika-cli projects licenses-hardware`

List a project license's hardware seats

```
clika-cli projects licenses-hardware <id> <lid> [flags]
```

Positional arguments: required `<id>`, `<lid>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--page` | string | `1` | Page number |
| `--page_size` | string | `25, max 200` | Page size |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/projects/{id}/licenses/{lid}/hardware`. MCP tool name: `get_projects_id_licenses_lid_hardware`.

#### `clika-cli projects licenses-hardware-delete-hardware_id`

Release a project license's hardware seat

```
clika-cli projects licenses-hardware-delete-hardware_id <id> <lid> <hardware_id> [flags]
```

Positional arguments: required `<id>`, `<lid>`, `<hardware_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `DELETE /api/projects/{id}/licenses/{lid}/hardware/{hardware_id}`. MCP tool name: `delete_projects_id_licenses_lid_hardware_hardware_id`.

#### `clika-cli projects licenses-hardware-release`

Release a project license's hardware seat by its id in the body

```
clika-cli projects licenses-hardware-release <id> <lid> [flags]
```

Positional arguments: required `<id>`, `<lid>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/projects/{id}/licenses/{lid}/hardware/release`. MCP tool name: `post_projects_id_licenses_lid_hardware_release`.

#### `clika-cli projects licenses-lid`

Get project license

```
clika-cli projects licenses-lid <id> <lid> [flags]
```

Positional arguments: required `<id>`, `<lid>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/projects/{id}/licenses/{lid}`. MCP tool name: `get_projects_id_licenses_lid`.

#### `clika-cli projects licenses-reveal`

Reveal project license key

```
clika-cli projects licenses-reveal <id> <lid> [flags]
```

Positional arguments: required `<id>`, `<lid>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/projects/{id}/licenses/{lid}/reveal`. MCP tool name: `post_projects_id_licenses_lid_reveal`.

#### `clika-cli projects licenses-revoke`

Revoke project license

```
clika-cli projects licenses-revoke <id> <lid> [flags]
```

Positional arguments: required `<id>`, `<lid>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/projects/{id}/licenses/{lid}/revoke`. MCP tool name: `post_projects_id_licenses_lid_revoke`.

#### `clika-cli projects licenses-rotate`

Rotate project license

```
clika-cli projects licenses-rotate <id> <lid> [flags]
```

Positional arguments: required `<id>`, `<lid>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/projects/{id}/licenses/{lid}/rotate`. MCP tool name: `post_projects_id_licenses_lid_rotate`.

#### `clika-cli projects licenses-update-lid`

Update project license

```
clika-cli projects licenses-update-lid <id> <lid> [flags]
```

Positional arguments: required `<id>`, `<lid>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `PATCH /api/projects/{id}/licenses/{lid}`. MCP tool name: `patch_projects_id_licenses_lid`.

#### `clika-cli projects list`

List projects

```
clika-cli projects list [flags]
```

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/projects`. MCP tool name: `get_projects`.

#### `clika-cli projects members`

List project members

```
clika-cli projects members <id> [flags]
```

Positional arguments: required `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/projects/{id}/members`. MCP tool name: `get_projects_id_members`.

#### `clika-cli projects members-create`

Add project member

```
clika-cli projects members-create <id> [flags]
```

Positional arguments: required `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/projects/{id}/members`. MCP tool name: `post_projects_id_members`.

#### `clika-cli projects members-delete-user_id`

Remove project member

```
clika-cli projects members-delete-user_id <id> <user_id> [flags]
```

Positional arguments: required `<id>`, `<user_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `DELETE /api/projects/{id}/members/{user_id}`. MCP tool name: `delete_projects_id_members_user_id`.

#### `clika-cli projects members-update-user_id`

Update project member role

```
clika-cli projects members-update-user_id <id> <user_id> [flags]
```

Positional arguments: required `<id>`, `<user_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `PATCH /api/projects/{id}/members/{user_id}`. MCP tool name: `patch_projects_id_members_user_id`.

#### `clika-cli projects servings`

List a project's model servings

```
clika-cli projects servings <id> [flags]
```

Positional arguments: required `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

#### `clika-cli projects update`

Update project

```
clika-cli projects update <id> [flags]
```

Positional arguments: required `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `PATCH /api/projects/{id}`. MCP tool name: `patch_projects_id`.

### `clika-cli orgs`

`orgs` has 38 subcommands.

#### `clika-cli orgs billing-portal`

Open billing portal

```
clika-cli orgs billing-portal <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/orgs/{org_id}/billing-portal`. MCP tool name: `post_orgs_org_id_billing_portal`.

#### `clika-cli orgs credits-checkout`

Start credit top-up checkout

```
clika-cli orgs credits-checkout <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/orgs/{org_id}/credits/checkout`. MCP tool name: `post_orgs_org_id_credits_checkout`.

#### `clika-cli orgs credits-ledger`

Org credit ledger

```
clika-cli orgs credits-ledger <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--limit` | string | `50, max 200` | Page size |
| `--offset` | string | `0` | Page offset |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/orgs/{org_id}/credits/ledger`. MCP tool name: `get_orgs_org_id_credits_ledger`.

#### `clika-cli orgs delete`

Delete organization

```
clika-cli orgs delete <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--acknowledge_live_resources` | string | none | The details.fingerprint of the LIVE_CLOUD_RESOURCES refusal being acknowledged: the delete proceeds only while the live cloud resources are still exactly those, which are then left running |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `DELETE /api/orgs/{org_id}`. MCP tool name: `delete_orgs_org_id`.

#### `clika-cli orgs get`

Get organization

```
clika-cli orgs get <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/orgs/{org_id}`. MCP tool name: `get_orgs_org_id`.

#### `clika-cli orgs list`

List organizations

```
clika-cli orgs list [flags]
```

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/orgs`. MCP tool name: `get_orgs`.

#### `clika-cli orgs members`

List organization members

```
clika-cli orgs members <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/orgs/{org_id}/members`. MCP tool name: `get_orgs_org_id_members`.

#### `clika-cli orgs members-create`

Add organization member

```
clika-cli orgs members-create <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/orgs/{org_id}/members`. MCP tool name: `post_orgs_org_id_members`.

#### `clika-cli orgs members-delete-user_id`

Remove organization member

```
clika-cli orgs members-delete-user_id <org_id> <user_id> [flags]
```

Positional arguments: required `<org_id>`, `<user_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `DELETE /api/orgs/{org_id}/members/{user_id}`. MCP tool name: `delete_orgs_org_id_members_user_id`.

#### `clika-cli orgs members-password-reset-link`

Issue a password-reset link for an organization member

```
clika-cli orgs members-password-reset-link <org_id> <user_id> [flags]
```

Positional arguments: required `<org_id>`, `<user_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/orgs/{org_id}/members/{user_id}/password-reset-link`. MCP tool name: `post_orgs_org_id_members_user_id_password_reset_link`.

#### `clika-cli orgs members-reinvite`

Re-invite organization member

```
clika-cli orgs members-reinvite <org_id> <user_id> [flags]
```

Positional arguments: required `<org_id>`, `<user_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/orgs/{org_id}/members/{user_id}/reinvite`. MCP tool name: `post_orgs_org_id_members_user_id_reinvite`.

#### `clika-cli orgs members-update-user_id`

Update organization member role

```
clika-cli orgs members-update-user_id <org_id> <user_id> [flags]
```

Positional arguments: required `<org_id>`, `<user_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `PUT /api/orgs/{org_id}/members/{user_id}`. MCP tool name: `put_orgs_org_id_members_user_id`.

#### `clika-cli orgs plan`

Assign org entitlement plan (org admin self-select)

```
clika-cli orgs plan <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `PUT /api/orgs/{org_id}/plan`. MCP tool name: `put_orgs_org_id_plan`.

#### `clika-cli orgs sso-domains`

List verified SSO domains for an org

```
clika-cli orgs sso-domains <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/orgs/{org_id}/sso-domains`. MCP tool name: `get_orgs_org_id_sso_domains`.

#### `clika-cli orgs sso-domains-delete-id`

Delete a verified SSO domain

```
clika-cli orgs sso-domains-delete-id <org_id> <id> [flags]
```

Positional arguments: required `<org_id>`, `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `DELETE /api/orgs/{org_id}/sso-domains/{id}`. MCP tool name: `delete_orgs_org_id_sso_domains_id`.

#### `clika-cli orgs sso-domains-verifications`

Initiate SSO domain verification

```
clika-cli orgs sso-domains-verifications <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/orgs/{org_id}/sso-domains/verifications`. MCP tool name: `post_orgs_org_id_sso_domains_verifications`.

#### `clika-cli orgs sso-domains-verifications-confirm`

Confirm SSO domain verification

```
clika-cli orgs sso-domains-verifications-confirm <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/orgs/{org_id}/sso-domains/verifications/confirm`. MCP tool name: `post_orgs_org_id_sso_domains_verifications_confirm`.

#### `clika-cli orgs sso-providers`

List org SSO providers

```
clika-cli orgs sso-providers <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/orgs/{org_id}/sso/providers`. MCP tool name: `get_orgs_org_id_sso_providers`.

#### `clika-cli orgs sso-providers-create`

Create org SSO provider

```
clika-cli orgs sso-providers-create <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/orgs/{org_id}/sso/providers`. MCP tool name: `post_orgs_org_id_sso_providers`.

#### `clika-cli orgs sso-providers-delete-id`

Delete org SSO provider

```
clika-cli orgs sso-providers-delete-id <org_id> <id> [flags]
```

Positional arguments: required `<org_id>`, `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `DELETE /api/orgs/{org_id}/sso/providers/{id}`. MCP tool name: `delete_orgs_org_id_sso_providers_id`.

#### `clika-cli orgs sso-providers-id`

Get org SSO provider

```
clika-cli orgs sso-providers-id <org_id> <id> [flags]
```

Positional arguments: required `<org_id>`, `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/orgs/{org_id}/sso/providers/{id}`. MCP tool name: `get_orgs_org_id_sso_providers_id`.

#### `clika-cli orgs sso-providers-update-id`

Update org SSO provider

```
clika-cli orgs sso-providers-update-id <org_id> <id> [flags]
```

Positional arguments: required `<org_id>`, `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `PUT /api/orgs/{org_id}/sso/providers/{id}`. MCP tool name: `put_orgs_org_id_sso_providers_id`.

#### `clika-cli orgs subscription`

Org subscription

```
clika-cli orgs subscription <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/orgs/{org_id}/subscription`. MCP tool name: `get_orgs_org_id_subscription`.

#### `clika-cli orgs subscription-cancel`

Cancel subscription at period end

```
clika-cli orgs subscription-cancel <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/orgs/{org_id}/subscription/cancel`. MCP tool name: `post_orgs_org_id_subscription_cancel`.

#### `clika-cli orgs subscription-change-plan`

Change subscription plan

```
clika-cli orgs subscription-change-plan <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/orgs/{org_id}/subscription/change-plan`. MCP tool name: `post_orgs_org_id_subscription_change_plan`.

#### `clika-cli orgs subscription-checkout`

Start subscription checkout

```
clika-cli orgs subscription-checkout <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/orgs/{org_id}/subscription/checkout`. MCP tool name: `post_orgs_org_id_subscription_checkout`.

#### `clika-cli orgs subscription-resume`

Resume subscription

```
clika-cli orgs subscription-resume <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/orgs/{org_id}/subscription/resume`. MCP tool name: `post_orgs_org_id_subscription_resume`.

#### `clika-cli orgs subscription-usage`

Org subscription usage

```
clika-cli orgs subscription-usage <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/orgs/{org_id}/subscription/usage`. MCP tool name: `get_orgs_org_id_subscription_usage`.

#### `clika-cli orgs teams`

List teams

```
clika-cli orgs teams <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/orgs/{org_id}/teams`. MCP tool name: `get_orgs_org_id_teams`.

#### `clika-cli orgs teams-create`

Create team

```
clika-cli orgs teams-create <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/orgs/{org_id}/teams`. MCP tool name: `post_orgs_org_id_teams`.

#### `clika-cli orgs teams-delete-team_id`

Delete team

```
clika-cli orgs teams-delete-team_id <org_id> <team_id> [flags]
```

Positional arguments: required `<org_id>`, `<team_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `DELETE /api/orgs/{org_id}/teams/{team_id}`. MCP tool name: `delete_orgs_org_id_teams_team_id`.

#### `clika-cli orgs teams-members`

List team members

```
clika-cli orgs teams-members <org_id> <team_id> [flags]
```

Positional arguments: required `<org_id>`, `<team_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/orgs/{org_id}/teams/{team_id}/members`. MCP tool name: `get_orgs_org_id_teams_team_id_members`.

#### `clika-cli orgs teams-members-create`

Add team member

```
clika-cli orgs teams-members-create <org_id> <team_id> [flags]
```

Positional arguments: required `<org_id>`, `<team_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/orgs/{org_id}/teams/{team_id}/members`. MCP tool name: `post_orgs_org_id_teams_team_id_members`.

#### `clika-cli orgs teams-members-delete-user_id`

Remove team member

```
clika-cli orgs teams-members-delete-user_id <org_id> <team_id> <user_id> [flags]
```

Positional arguments: required `<org_id>`, `<team_id>`, `<user_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `DELETE /api/orgs/{org_id}/teams/{team_id}/members/{user_id}`. MCP tool name: `delete_orgs_org_id_teams_team_id_members_user_id`.

#### `clika-cli orgs teams-team_id`

Get team

```
clika-cli orgs teams-team_id <org_id> <team_id> [flags]
```

Positional arguments: required `<org_id>`, `<team_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/orgs/{org_id}/teams/{team_id}`. MCP tool name: `get_orgs_org_id_teams_team_id`.

#### `clika-cli orgs teams-update-team_id`

Update team

```
clika-cli orgs teams-update-team_id <org_id> <team_id> [flags]
```

Positional arguments: required `<org_id>`, `<team_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `PUT /api/orgs/{org_id}/teams/{team_id}`. MCP tool name: `put_orgs_org_id_teams_team_id`.

#### `clika-cli orgs transfer-ownership`

Transfer organization ownership

```
clika-cli orgs transfer-ownership <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/orgs/{org_id}/transfer-ownership`. MCP tool name: `post_orgs_org_id_transfer_ownership`.

#### `clika-cli orgs update`

Update organization

```
clika-cli orgs update <org_id> [flags]
```

Positional arguments: required `<org_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `PUT /api/orgs/{org_id}`. MCP tool name: `put_orgs_org_id`.

### `clika-cli users`

`users` has 10 subcommands.

#### `clika-cli users create`

Create user

```
clika-cli users create [flags]
```

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/users`. MCP tool name: `post_users`.

#### `clika-cli users delete`

Delete user

```
clika-cli users delete <id> [flags]
```

Positional arguments: required `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `DELETE /api/users/{id}`. MCP tool name: `delete_users_id`.

#### `clika-cli users erase`

Erase user (GDPR Art 17)

```
clika-cli users erase <id> [flags]
```

Positional arguments: required `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/users/{id}/erase`. MCP tool name: `post_users_id_erase`.

#### `clika-cli users export`

Export my personal data

```
clika-cli users export <id> [flags]
```

Positional arguments: required `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/users/{id}/export`. MCP tool name: `get_users_id_export`.

#### `clika-cli users get`

Get user

```
clika-cli users get <id> [flags]
```

Positional arguments: required `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/users/{id}`. MCP tool name: `get_users_id`.

#### `clika-cli users list`

List users

```
clika-cli users list [flags]
```

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/users`. MCP tool name: `get_users`.

#### `clika-cli users roles`

List user roles

```
clika-cli users roles <id> [flags]
```

Positional arguments: required `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/users/{id}/roles`. MCP tool name: `get_users_id_roles`.

#### `clika-cli users roles-create`

Assign role to user

```
clika-cli users roles-create <id> [flags]
```

Positional arguments: required `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `POST /api/users/{id}/roles`. MCP tool name: `post_users_id_roles`.

#### `clika-cli users roles-delete-role_id`

Revoke role from user

```
clika-cli users roles-delete-role_id <id> <role_id> [flags]
```

Positional arguments: required `<id>`, `<role_id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `DELETE /api/users/{id}/roles/{role_id}`. MCP tool name: `delete_users_id_roles_role_id`.

#### `clika-cli users update`

Update user

```
clika-cli users update <id> [flags]
```

Positional arguments: required `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--body` | string | none | request body (inline JSON) |
| `--body-file` | string | none | request body (path to a JSON file) |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `PUT /api/users/{id}`. MCP tool name: `put_users_id`.

### `clika-cli roles`

`roles` has 2 subcommands.

#### `clika-cli roles get`

Get role

```
clika-cli roles get <id> [flags]
```

Positional arguments: required `<id>`.

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/roles/{id}`. MCP tool name: `get_roles_id`.

#### `clika-cli roles list`

List roles

```
clika-cli roles list [flags]
```

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/roles`. MCP tool name: `get_roles`.

### `clika-cli permissions`

`permissions` has 1 subcommands.

#### `clika-cli permissions list`

List permissions

```
clika-cli permissions list [flags]
```

| Flag | Type | Default | Meaning |
| --- | --- | --- | --- |
| `--raw` | bool | `false` | print raw response without pretty-printing |

Endpoint: `GET /api/permissions`. MCP tool name: `get_permissions`.

<!-- END GENERATED COMMAND REFERENCE -->

## Related

- [Authentication and profiles](authentication.md): the credentials these permissions apply to, and how to scope an API key.
- [Licensing](licensing.md): project licenses, which are issued per project.
- [Organization and project concept](../concepts/organization-and-project.mdx): what an organization and a project are, in prose.
- [CLI overview](index.md): global flags and output formats.