Organizations, projects and access

Everything on the platform belongs to an organization, which is the tenant boundary: its own members, its own devices, its own billing. Inside an organization, a project groups resources and scopes who can see them. Every session and every API key is bound to one organization and one project at a time, which is why almost every other command implicitly means "in the project I am currently in".

Access is granted through roles. A role is a named bundle of permissions, and permissions are the strings the platform checks on each request, for example devices:read or jobs:write.

Most of this is comfortable in the web app. The commands here exist so you can script onboarding, audit access, and read the current state without clicking.

Where am I

clika-rt auth me
clika-rt auth me-orgs
clika-rt auth me-projects

auth me prints the account behind your current credential; the other two list what it can reach. Move the session:

clika-rt auth switch-org --body '{"org_id":"..."}'
clika-rt auth switch-project --body '{"project_id":"..."}'

Projects

clika-rt projects [command]

Subcommand	Purpose
list	Projects you can see.
get <id>	One project.
create --body '<json>'	Create a project.
update <id> --body '<json>'	Rename or reconfigure one.
delete <id>	Delete one. Resources belonging to it are reassigned or removed according to the platform's rules, so read get first.
members <id>	Who is on the project.
members-create <id> --body '<json>'	Add a member.
members-update-user_id <id> <user_id> --body '<json>'	Change a member's project role.
members-delete-user_id <id> <user_id>	Remove a member.

An organization always has a default project, and the last owner of a project cannot be removed, so you cannot lock yourself out by mistake.

Project licenses are covered on the licensing page; they are projects licenses* because a runtime credential is issued to a project.

Organizations

clika-rt orgs [command]

The organization surface is large. It divides into five parts.

Membership

Subcommand	Purpose
list	Organizations you can see.
get <org_id>	One organization.
create --body '<json>'	Create one.
update <org_id> --body '<json>'	Change its settings.
delete <org_id>	Delete it.
members <org_id>	Its members and their roles.
members-create <org_id> --body '<json>'	Invite a member.
members-update-user_id <org_id> <user_id> --body '<json>'	Change a member's role.
members-delete-user_id <org_id> <user_id>	Remove a member.
members-reinvite <org_id> <user_id>	Send the invitation again, which supersedes the previous one.
transfer-ownership <org_id> --body '<json>'	Hand ownership to another member.

Teams

Teams group members inside an organization so access can be granted to a group rather than person by person.

Subcommand	Purpose
teams <org_id>	List teams.
teams-team_id <org_id> <team_id>	Get one team.
teams-create <org_id> --body '<json>'	Create a team.
teams-update-team_id <org_id> <team_id> --body '<json>'	Rename or reconfigure it.
teams-delete-team_id <org_id> <team_id>	Delete it.
teams-members <org_id> <team_id>	List its members.
teams-members-create <org_id> <team_id> --body '<json>'	Add a member.
teams-members-delete-user_id <org_id> <team_id> <user_id>	Remove a member.

Single sign-on

Subcommand	Purpose
sso-providers <org_id>	The identity providers configured for this organization.
sso-providers-id <org_id> <id>	One provider.
sso-providers-create <org_id> --body '<json>'	Add one.
sso-providers-update-id <org_id> <id> --body '<json>'	Change one.
sso-providers-delete-id <org_id> <id>	Remove one.
sso-domains <org_id>	Email domains verified for this organization.
sso-domains-verifications <org_id> --body '<json>'	Start verifying a domain.
sso-domains-verifications-confirm <org_id> --body '<json>'	Confirm the verification once the DNS record is in place.
sso-domains-delete-id <org_id> <id>	Remove a verified domain.

A verified domain is what lets someone with an address at that domain be routed to your identity provider automatically. People who sign in through SSO have no password, so they authenticate the CLI with an API key.

The sso group is the deployment-wide counterpart: sso providers, sso providers-create and sso providers-id.

Billing and plans

Subcommand	Purpose
subscription <org_id>	The current subscription.
subscription-checkout <org_id> --body '<json>'	Start a checkout to subscribe.
subscription-change-plan <org_id> --body '<json>'	Move to another plan.
subscription-cancel <org_id>	Cancel at the end of the period.
subscription-resume <org_id>	Undo a pending cancellation.
credits-ledger <org_id>	Credit balance and history.
credits-checkout <org_id> --body '<json>'	Buy more credits.
billing-portal <org_id>	A link to the hosted billing portal.
plan <org_id> --body '<json>'	Assign the organization's entitlement plan, where an organization administrator is allowed to self-select.
billing catalog	The plans and prices this deployment offers.

Users

users is the account surface. On most deployments it is restricted to administrators, because it reaches accounts across the organization.

Subcommand	Purpose
list	Accounts.
get <id>	One account.
create --body '<json>'	Create an account.
update <id> --body '<json>'	Change one.
delete <id>	Delete one.
roles <id>	The roles assigned to an account.
roles-create <id> --body '<json>'	Assign a role.
roles-delete-role_id <id> <role_id>	Revoke a role.
export <id>	Export an account's personal data, the data-subject access request.
erase <id>	Erase an account, the right-to-erasure request under GDPR Article 17. Distinct from delete, and irreversible.

Roles and permissions

clika-rt permissions list
clika-rt roles list

permissions list is the catalogue: every permission string the platform checks, with what it governs. Read it before writing a role or scoping an API key, because these strings are the exact values both take.

Subcommand	Purpose
roles list	Every role.
roles get <id>	One role and its permissions.
roles create --body '<json>'	Create a role.
roles update <id> --body '<json>'	Rename or reconfigure it.
roles permissions-create <id> --body '<json>'	Set the role's permissions.
roles permissions-delete-perm_id <id> <perm_id>	Revoke one permission from the role.
roles delete <id>	Delete it.

Two rules are worth holding on to, because they explain most refusals:

• A credential can never exceed its owner. An API key resolves to the intersection of your permissions and the key's scope, so narrowing an account narrows every key it minted.
• The surface does not matter. The web app, the CLI and MCP all pass the same checks. If a command is refused, the same action would be refused in a browser.

Cross-tenant support access

When CLIKA support needs to look at your organization's data, it is granted through a time-boxed, reason-carrying grant rather than a shared account:

clika-rt support-grants list

The grant is scoped to one organization, attenuates the capabilities it confers, and expires on its own.

Full command reference

Every command below is generated from the deployment's own API description, so one subcommand is exactly one platform operation. Each entry names the method, the endpoint and the MCP tool name, so the same operation is identifiable whichever surface you drive it from. Path parameters are positional arguments, query parameters are flags, and a request body is --body or --body-file. The hand-written commands, the ones that stream, propagate an exit code, or hand your terminal to ssh, carry no operation line.

The prose above covers the commands most people reach for. This section is the complete surface, for when you need the flag you have not used before.

clika-rt projects

projects has 16 subcommands.

clika-rt projects create

Create project

clika-rt projects create [flags]

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/projects. MCP tool name: post_projects.

clika-rt projects delete

Delete project

clika-rt projects delete <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: DELETE /api/projects/{id}. MCP tool name: delete_projects_id.

clika-rt projects get

Get project

clika-rt projects get <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/projects/{id}. MCP tool name: get_projects_id.

clika-rt projects licenses

List project licenses

clika-rt projects licenses <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/projects/{id}/licenses. MCP tool name: get_projects_id_licenses.

clika-rt projects licenses-create

Issue project license

clika-rt projects licenses-create <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/projects/{id}/licenses. MCP tool name: post_projects_id_licenses.

clika-rt projects licenses-lid

Get project license

clika-rt projects licenses-lid <id> <lid> [flags]

Positional arguments: required <id>, <lid>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/projects/{id}/licenses/{lid}. MCP tool name: get_projects_id_licenses_lid.

clika-rt projects licenses-reveal

Reveal project license key

clika-rt projects licenses-reveal <id> <lid> [flags]

Positional arguments: required <id>, <lid>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/projects/{id}/licenses/{lid}/reveal. MCP tool name: post_projects_id_licenses_lid_reveal.

clika-rt projects licenses-revoke

Revoke project license

clika-rt projects licenses-revoke <id> <lid> [flags]

Positional arguments: required <id>, <lid>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/projects/{id}/licenses/{lid}/revoke. MCP tool name: post_projects_id_licenses_lid_revoke.

clika-rt projects licenses-rotate

Rotate project license

clika-rt projects licenses-rotate <id> <lid> [flags]

Positional arguments: required <id>, <lid>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/projects/{id}/licenses/{lid}/rotate. MCP tool name: post_projects_id_licenses_lid_rotate.

clika-rt projects licenses-update-lid

Update project license

clika-rt projects licenses-update-lid <id> <lid> [flags]

Positional arguments: required <id>, <lid>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: PATCH /api/projects/{id}/licenses/{lid}. MCP tool name: patch_projects_id_licenses_lid.

clika-rt projects list

List projects

clika-rt projects list [flags]

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/projects. MCP tool name: get_projects.

clika-rt projects members

List project members

clika-rt projects members <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/projects/{id}/members. MCP tool name: get_projects_id_members.

clika-rt projects members-create

Add project member

clika-rt projects members-create <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/projects/{id}/members. MCP tool name: post_projects_id_members.

clika-rt projects members-delete-user_id

Remove project member

clika-rt projects members-delete-user_id <id> <user_id> [flags]

Positional arguments: required <id>, <user_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: DELETE /api/projects/{id}/members/{user_id}. MCP tool name: delete_projects_id_members_user_id.

clika-rt projects members-update-user_id

Update project member role

clika-rt projects members-update-user_id <id> <user_id> [flags]

Positional arguments: required <id>, <user_id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: PATCH /api/projects/{id}/members/{user_id}. MCP tool name: patch_projects_id_members_user_id.

clika-rt projects update

Update project

clika-rt projects update <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: PATCH /api/projects/{id}. MCP tool name: patch_projects_id.

clika-rt orgs

orgs has 37 subcommands.

clika-rt orgs billing-portal

Open billing portal

clika-rt orgs billing-portal <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/orgs/{org_id}/billing-portal. MCP tool name: post_orgs_org_id_billing_portal.

clika-rt orgs create

Create organization

clika-rt orgs create [flags]

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/orgs. MCP tool name: post_orgs.

clika-rt orgs credits-checkout

Start credit top-up checkout

clika-rt orgs credits-checkout <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/orgs/{org_id}/credits/checkout. MCP tool name: post_orgs_org_id_credits_checkout.

clika-rt orgs credits-ledger

Org credit ledger

clika-rt orgs credits-ledger <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--limit	string	50, max 200	Page size
--offset	string	0	Page offset
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/orgs/{org_id}/credits/ledger. MCP tool name: get_orgs_org_id_credits_ledger.

clika-rt orgs delete

Delete organization

clika-rt orgs delete <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: DELETE /api/orgs/{org_id}. MCP tool name: delete_orgs_org_id.

clika-rt orgs get

Get organization

clika-rt orgs get <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/orgs/{org_id}. MCP tool name: get_orgs_org_id.

clika-rt orgs list

List organizations

clika-rt orgs list [flags]

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/orgs. MCP tool name: get_orgs.

clika-rt orgs members

List organization members

clika-rt orgs members <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/orgs/{org_id}/members. MCP tool name: get_orgs_org_id_members.

clika-rt orgs members-create

Add organization member

clika-rt orgs members-create <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/orgs/{org_id}/members. MCP tool name: post_orgs_org_id_members.

clika-rt orgs members-delete-user_id

Remove organization member

clika-rt orgs members-delete-user_id <org_id> <user_id> [flags]

Positional arguments: required <org_id>, <user_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: DELETE /api/orgs/{org_id}/members/{user_id}. MCP tool name: delete_orgs_org_id_members_user_id.

clika-rt orgs members-reinvite

Re-invite organization member

clika-rt orgs members-reinvite <org_id> <user_id> [flags]

Positional arguments: required <org_id>, <user_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/orgs/{org_id}/members/{user_id}/reinvite. MCP tool name: post_orgs_org_id_members_user_id_reinvite.

clika-rt orgs members-update-user_id

Update organization member role

clika-rt orgs members-update-user_id <org_id> <user_id> [flags]

Positional arguments: required <org_id>, <user_id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: PUT /api/orgs/{org_id}/members/{user_id}. MCP tool name: put_orgs_org_id_members_user_id.

clika-rt orgs plan

Assign org entitlement plan (org admin self-select)

clika-rt orgs plan <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: PUT /api/orgs/{org_id}/plan. MCP tool name: put_orgs_org_id_plan.

clika-rt orgs sso-domains

List verified SSO domains for an org

clika-rt orgs sso-domains <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/orgs/{org_id}/sso-domains. MCP tool name: get_orgs_org_id_sso_domains.

clika-rt orgs sso-domains-delete-id

Delete a verified SSO domain

clika-rt orgs sso-domains-delete-id <org_id> <id> [flags]

Positional arguments: required <org_id>, <id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: DELETE /api/orgs/{org_id}/sso-domains/{id}. MCP tool name: delete_orgs_org_id_sso_domains_id.

clika-rt orgs sso-domains-verifications

Initiate SSO domain verification

clika-rt orgs sso-domains-verifications <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/orgs/{org_id}/sso-domains/verifications. MCP tool name: post_orgs_org_id_sso_domains_verifications.

clika-rt orgs sso-domains-verifications-confirm

Confirm SSO domain verification

clika-rt orgs sso-domains-verifications-confirm <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/orgs/{org_id}/sso-domains/verifications/confirm. MCP tool name: post_orgs_org_id_sso_domains_verifications_confirm.

clika-rt orgs sso-providers

List org SSO providers

clika-rt orgs sso-providers <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/orgs/{org_id}/sso/providers. MCP tool name: get_orgs_org_id_sso_providers.

clika-rt orgs sso-providers-create

Create org SSO provider

clika-rt orgs sso-providers-create <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/orgs/{org_id}/sso/providers. MCP tool name: post_orgs_org_id_sso_providers.

clika-rt orgs sso-providers-delete-id

Delete org SSO provider

clika-rt orgs sso-providers-delete-id <org_id> <id> [flags]

Positional arguments: required <org_id>, <id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: DELETE /api/orgs/{org_id}/sso/providers/{id}. MCP tool name: delete_orgs_org_id_sso_providers_id.

clika-rt orgs sso-providers-id

Get org SSO provider

clika-rt orgs sso-providers-id <org_id> <id> [flags]

Positional arguments: required <org_id>, <id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/orgs/{org_id}/sso/providers/{id}. MCP tool name: get_orgs_org_id_sso_providers_id.

clika-rt orgs sso-providers-update-id

Update org SSO provider

clika-rt orgs sso-providers-update-id <org_id> <id> [flags]

Positional arguments: required <org_id>, <id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: PUT /api/orgs/{org_id}/sso/providers/{id}. MCP tool name: put_orgs_org_id_sso_providers_id.

clika-rt orgs subscription

Org subscription

clika-rt orgs subscription <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/orgs/{org_id}/subscription. MCP tool name: get_orgs_org_id_subscription.

clika-rt orgs subscription-cancel

Cancel subscription at period end

clika-rt orgs subscription-cancel <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/orgs/{org_id}/subscription/cancel. MCP tool name: post_orgs_org_id_subscription_cancel.

clika-rt orgs subscription-change-plan

Change subscription plan

clika-rt orgs subscription-change-plan <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/orgs/{org_id}/subscription/change-plan. MCP tool name: post_orgs_org_id_subscription_change_plan.

clika-rt orgs subscription-checkout

Start subscription checkout

clika-rt orgs subscription-checkout <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/orgs/{org_id}/subscription/checkout. MCP tool name: post_orgs_org_id_subscription_checkout.

clika-rt orgs subscription-resume

Resume subscription

clika-rt orgs subscription-resume <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/orgs/{org_id}/subscription/resume. MCP tool name: post_orgs_org_id_subscription_resume.

clika-rt orgs teams

List teams

clika-rt orgs teams <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/orgs/{org_id}/teams. MCP tool name: get_orgs_org_id_teams.

clika-rt orgs teams-create

Create team

clika-rt orgs teams-create <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/orgs/{org_id}/teams. MCP tool name: post_orgs_org_id_teams.

clika-rt orgs teams-delete-team_id

Delete team

clika-rt orgs teams-delete-team_id <org_id> <team_id> [flags]

Positional arguments: required <org_id>, <team_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: DELETE /api/orgs/{org_id}/teams/{team_id}. MCP tool name: delete_orgs_org_id_teams_team_id.

clika-rt orgs teams-members

List team members

clika-rt orgs teams-members <org_id> <team_id> [flags]

Positional arguments: required <org_id>, <team_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/orgs/{org_id}/teams/{team_id}/members. MCP tool name: get_orgs_org_id_teams_team_id_members.

clika-rt orgs teams-members-create

Add team member

clika-rt orgs teams-members-create <org_id> <team_id> [flags]

Positional arguments: required <org_id>, <team_id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/orgs/{org_id}/teams/{team_id}/members. MCP tool name: post_orgs_org_id_teams_team_id_members.

clika-rt orgs teams-members-delete-user_id

Remove team member

clika-rt orgs teams-members-delete-user_id <org_id> <team_id> <user_id> [flags]

Positional arguments: required <org_id>, <team_id>, <user_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: DELETE /api/orgs/{org_id}/teams/{team_id}/members/{user_id}. MCP tool name: delete_orgs_org_id_teams_team_id_members_user_id.

clika-rt orgs teams-team_id

Get team

clika-rt orgs teams-team_id <org_id> <team_id> [flags]

Positional arguments: required <org_id>, <team_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/orgs/{org_id}/teams/{team_id}. MCP tool name: get_orgs_org_id_teams_team_id.

clika-rt orgs teams-update-team_id

Update team

clika-rt orgs teams-update-team_id <org_id> <team_id> [flags]

Positional arguments: required <org_id>, <team_id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: PUT /api/orgs/{org_id}/teams/{team_id}. MCP tool name: put_orgs_org_id_teams_team_id.

clika-rt orgs transfer-ownership

Transfer organization ownership

clika-rt orgs transfer-ownership <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/orgs/{org_id}/transfer-ownership. MCP tool name: post_orgs_org_id_transfer_ownership.

clika-rt orgs update

Update organization

clika-rt orgs update <org_id> [flags]

Positional arguments: required <org_id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: PUT /api/orgs/{org_id}. MCP tool name: put_orgs_org_id.

clika-rt users

users has 10 subcommands.

clika-rt users create

Create user

clika-rt users create [flags]

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/users. MCP tool name: post_users.

clika-rt users delete

Delete user

clika-rt users delete <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: DELETE /api/users/{id}. MCP tool name: delete_users_id.

clika-rt users erase

Erase user (GDPR Art 17)

clika-rt users erase <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/users/{id}/erase. MCP tool name: post_users_id_erase.

clika-rt users export

Export my personal data

clika-rt users export <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/users/{id}/export. MCP tool name: get_users_id_export.

clika-rt users get

Get user

clika-rt users get <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/users/{id}. MCP tool name: get_users_id.

clika-rt users list

List users

clika-rt users list [flags]

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/users. MCP tool name: get_users.

clika-rt users roles

List user roles

clika-rt users roles <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/users/{id}/roles. MCP tool name: get_users_id_roles.

clika-rt users roles-create

Assign role to user

clika-rt users roles-create <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/users/{id}/roles. MCP tool name: post_users_id_roles.

clika-rt users roles-delete-role_id

Revoke role from user

clika-rt users roles-delete-role_id <id> <role_id> [flags]

Positional arguments: required <id>, <role_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: DELETE /api/users/{id}/roles/{role_id}. MCP tool name: delete_users_id_roles_role_id.

clika-rt users update

Update user

clika-rt users update <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: PUT /api/users/{id}. MCP tool name: put_users_id.

clika-rt roles

roles has 7 subcommands.

clika-rt roles create

Create role

clika-rt roles create [flags]

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/roles. MCP tool name: post_roles.

clika-rt roles delete

Delete role

clika-rt roles delete <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: DELETE /api/roles/{id}. MCP tool name: delete_roles_id.

clika-rt roles get

Get role

clika-rt roles get <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/roles/{id}. MCP tool name: get_roles_id.

clika-rt roles list

List roles

clika-rt roles list [flags]

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/roles. MCP tool name: get_roles.

clika-rt roles permissions-create

Set role permissions

clika-rt roles permissions-create <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: POST /api/roles/{id}/permissions. MCP tool name: post_roles_id_permissions.

clika-rt roles permissions-delete-perm_id

Revoke permission from role

clika-rt roles permissions-delete-perm_id <id> <perm_id> [flags]

Positional arguments: required <id>, <perm_id>.

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: DELETE /api/roles/{id}/permissions/{perm_id}. MCP tool name: delete_roles_id_permissions_perm_id.

clika-rt roles update

Update role

clika-rt roles update <id> [flags]

Positional arguments: required <id>.

Flag	Type	Default	Meaning
--body	string	none	request body (inline JSON)
--body-file	string	none	request body (path to a JSON file)
--raw	bool	false	print raw response without pretty-printing

Endpoint: PUT /api/roles/{id}. MCP tool name: put_roles_id.

clika-rt permissions

permissions has 1 subcommands.

clika-rt permissions list

List permissions

clika-rt permissions list [flags]

Flag	Type	Default	Meaning
--raw	bool	false	print raw response without pretty-printing

Endpoint: GET /api/permissions. MCP tool name: get_permissions.

Related

• Authentication and profiles: the credentials these permissions apply to, and how to scope an API key.
• Licensing: project licenses, which are issued per project.
• Organization and project concept: what an organization and a project are, in prose.
• CLI overview: global flags and output formats.