CLI command reference

This reference covers all 689 commands in the current Anectico CLI. It is generated from the same Cobra command tree used by the binary, so command names, positional arguments, aliases, flags, and defaults stay aligned with the implementation.

For the exact manifest bundled into the version you installed, run:

anectico docs

How commands behave

• Interactive terminals receive readable tables; redirected or piped output is JSON. Commands without a purpose-built table use a deterministic PATH / TYPE / VALUE tree that includes every JSON container and scalar without truncation.
• Use --output json or --output table to choose explicitly.
• Commands with --confirm-token print the server approval preview first. After approval, repeat identical inputs and version arguments with that token to apply. Other commands declare their local --yes guard in their flag help; that guard alone does not obtain a server preview.
• Paged lists return one page. Defaults and maximum limits vary by command; read its --help. Follow next_cursor unchanged as --cursor with the same filters. Workspace and Live lists explicitly label the page and show its continuation token.
• Commands that accept structured bodies use --body '<inline JSON>', --file path, or --file - for standard input.
• Issue lifecycle writes require the exact --expected-version shown by anectico issues view; the CLI never auto-fetches a newer revision or silently overwrites concurrent triage.
• The active project comes from --project, ANECTICO_PROJECT, or the selected profile, in that order.
• For a project-bound API key, that active project must be omitted or match the key binding exactly. A conflict fails before product logic with HTTP 403 and exit code 4; it is never silently replaced.
• Commands that print product results preserve the full response and exit 1 unless ready, including pending and running. History refusals carry earliest_available_start and failure_message for a new query.
• Non-interactive errors are one JSON object on standard error with error, message, and exit_code.
• API failures also include their real HTTP status; local failures omit status.
• For anectico send, throttled responses preserve the server's Retry-After value as retry_after.
• anectico send event is a pipeline check. It needs a capture key (purpose server_capture, browser_capture or mobile_capture) in ANECTICO_API_KEY or --api-key. A management key is refused, even one that holds analytics:write; a native_ingest key sends OTLP only. It posts to the ingest address, not the API address: outside production set --ingest-url or ANECTICO_INGEST_URL, or the command stops with exit code 2.
• anectico send event exits zero only for a complete validated queue acknowledgement. Queue acceptance does not prove storage visibility. Refusals (capture_rejected), publication uncertainty (capture_uncertain), and invalid receipts (capture_ack_invalid) exit 1; JSON failures go to stderr with no success output.
• send event makes one attempt and does not retry automatically or preserve a message ID across invocations. Rerunning after uncertainty may duplicate the event.

Global flags

Global flags can appear before or after a subcommand.

Flag	Type/default	What it controls
--api-key	string	API key for headless auth (env: ANECTICO_API_KEY)
--api-url	string	Anectico API origin, no path (e.g. https://api.example.com); every endpoint path (/api/v1/..., /mcp, /auth/me) is appended to it (env: ANECTICO_API_URL)
--ingest-url	string	ingest base URL for 'anectico send' (env: ANECTICO_INGEST_URL)
--json	bool	alias for --output json; the last of --output/--json wins
--no-color	bool; default: false	disable colored output
-o, --output	string	output format: table|json (default: table on a TTY, json when piped); the last of --output/--json wins
--profile	string	config profile to use (env: ANECTICO_PROFILE)
--project	string	project id scope (env: ANECTICO_PROJECT)

Exit codes

Code	Meaning
0	success
1	API/general error, invalid JSON output, or signal interruption
2	usage error (unknown command or bad flags/arguments)
3	unauthenticated (log in or set ANECTICO_API_KEY)
4	forbidden (credential lacks scope or conflicts with the requested project)
5	not found

Command catalog

Required positional arguments use angle brackets. Optional arguments use square brackets. Flags shown in the last column are command-specific; all global flags remain available.

abom

Command	What it does	Command-specific flags
anectico abom get manifest-id	Show a signed manifest byte-exact, with whether its signature verifies now	—
anectico abom sign	Have Anectico sign your agent bill of materials (--file or --body)	--body (string) — request body as inline JSON --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries

accounts

Command	What it does	Command-specific flags
anectico accounts affected-value	Read complete declared value over an observed account cohort	--account-type (string) — one exact account type --currency (string) — exact three-uppercase-letter currency bucket; paired with period and period-count --env (string) — exact environment occurrence selector --issue-id (stringArray; default: []) — exact issue selector; repeat for one deduplicated union, never a sum of per-issue amounts --limit (uint32; default: 20) — output limit, 1 through 100; totals are computed before limiting --mechanism (string) — exact mechanism occurrence selector --order (string) — account_key, value or importance,value; triage requires value or importance,value --period (string) — exact nominal day, week, month or year; no conversion --period-count (uint32; default: 0) — exact nominal period count, 1 through 12 --platform (string) — exact platform occurrence selector --query (string) — occurrence substring --release (string) — exact release occurrence selector --renewal-since (string) — inclusive civil renewal date YYYY-MM-DD; paired with renewal-until --renewal-until (string) — exclusive civil renewal date YYYY-MM-DD --service (string) — exact service occurrence selector --since (string) — inclusive absolute RFC3339Nano start; no relative windows --until (string) — exclusive absolute RFC3339Nano end; maximum 90 days
anectico accounts business clear <type> <key>	Preview and confirm a complete declaration replacement	--confirm-token (string) — server token from the complete preview; omission previews only --expected-revision (string) — required current business revision; zero means never declared --idempotency-key (string) — required stable actor-bound key of 1 to 128 bytes; retain through preview, confirmation and recovery
anectico accounts business export	Stream versioned current pages with provenance and explicit completion	--currency (string) — exact supplied three uppercase letter currency --cursor (string) — exact cursor from the preceding page; keep filters unchanged --format (string; default: json) — machine stream: json, ndjson or csv; diagnostics go to stderr --important (string) — optional literal true or false; omission is unfiltered --limit (uint32; default: 0) — page size, default 20 and maximum 100 --minimum-value (string) — nonnegative exact decimal string; requires currency and period tuple --period (string) — exact day, week, month or year; no conversion --period-count (uint32; default: 0) — explicit nominal period count, 1 through 12 --plan (string) — exact plan --renewal-since (string) — inclusive civil renewal date --renewal-until (string) — exclusive civil renewal date --tier (string) — exact tier --type (string) — required exact account type
anectico accounts business get <type> <key>	Read one exact account declaration	—
anectico accounts business import	Validate 1 to 500 complete rows locally, then preview one atomic write	--confirm-token (string) — server token from the complete preview; omission previews only --file (string) — rows file; - reads stdin; maximum 1 MiB --format (string; default: json) — json rows array or csv with the documented header --idempotency-key (string) — required stable actor-bound key of 1 to 128 bytes; retain through preview, confirmation and recovery
anectico accounts business list	Read a current declaration page; pages are separate observations	--currency (string) — exact supplied three uppercase letter currency --cursor (string) — exact cursor from the preceding page; keep filters unchanged --important (string) — optional literal true or false; omission is unfiltered --limit (uint32; default: 0) — page size, default 20 and maximum 100 --minimum-value (string) — nonnegative exact decimal string; requires currency and period tuple --period (string) — exact day, week, month or year; no conversion --period-count (uint32; default: 0) — explicit nominal period count, 1 through 12 --plan (string) — exact plan --renewal-since (string) — inclusive civil renewal date --renewal-until (string) — exclusive civil renewal date --tier (string) — exact tier --type (string) — required exact account type
anectico accounts business set <type> <key>	Preview and confirm a complete declaration replacement	--confirm-token (string) — server token from the complete preview; omission previews only --create-missing (bool; default: false) — explicitly create an empty account when absent; requires groups:write; creates no membership --expected-revision (string) — required current business revision; zero means never declared --file (string) — complete JSON record file; - reads stdin; maximum 1 MiB --idempotency-key (string) — required stable actor-bound key of 1 to 128 bytes; retain through preview, confirmation and recovery
anectico accounts business write-result	Recover the first actor-bound outcome; missing means unknown	--idempotency-key (string) — exact retry key under the original actor and credential --operation-id (string) — owning operation UUID
anectico accounts delete <group-type> <group-key>	Delete an account definition (refused while it has active members)	--yes (bool; default: false) — confirm this destructive operation (required)
anectico accounts erase <group-type> <group-key>	PERMANENTLY erase an account by its exact type and key in the active project	--include-shared-members (bool; default: false) — with --with-members: also erase shared members of another account of the same type --operation-id (string) — canonical UUID; generated and printed when omitted; reuse only to retry --reason (string) — why; required, at most 400 UTF-8 bytes; omit identifiers --with-members (bool; default: false) — also erase request-time active members, with shared members skipped --yes (bool; default: false) — confirm this destructive operation (required)
anectico accounts erasures get <operation-id>	Show account erasure progress and saved member decisions	—
anectico accounts erasures list	List account erasures newest first, with store and member status	--cursor (string) — opaque next_cursor, passed unchanged --limit (int; default: 0) — page size; default 50, maximum 200
anectico accounts get <group-type> <group-key>	Show one account's profile	--include-business-inputs (bool; default: false) — read current typed declaration and snapshot; requires both Groups read scopes --include-stats (bool; default: false) — also read retained product-event activity; unavailable statistics carry no count
anectico accounts list	List accounts	--include-business-inputs (bool; default: false) — read current typed declarations on returned rows; requires both Groups read scopes --limit (int; default: 0) — maximum rows --offset (int; default: 0) — pagination offset --search (string) — search by key/name --type (string) — filter by group type (e.g. company)
anectico accounts members list <group-type> <group-key>	List an account's members, with person ids; --include-inactive adds removed members as history	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --include-inactive (bool; default: false) — also list removed and moved-away members --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico accounts members move <group-type> <from-group-key> <distinct-id> --to <to-group-key>	Move one person from one account to another of the same type (refused if not in the source)	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --to (string) — destination account key, of the same group type (required)
anectico accounts members remove <group-type> <group-key> <distinct-id>	Remove one person from one account (kept as history; a non-member changes nothing)	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply
anectico accounts timeline <group-type> <group-key>	The account's all-signal timeline (every member's activity)	--cursor (string) — pagination cursor from the previous page --limit (int; default: 0) — maximum entries --signal (string) — restrict to event, error, trace, log, agent_run or session --since (string) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico accounts types	List the selected project's group types with counts	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)

action-receipts

Command	What it does	Command-specific flags
anectico action-receipts get <action-id>	Show one action's folded receipt	—
anectico action-receipts list	List receipts by action or chain	--action-id (string) — one action's receipts --authority (stringSlice; default: []) — only these authorities (e.g. MEDIATED, REPORTED) --chain-id (string) — one chain's receipts (default: the project's actions chain) --cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --final-state (stringSlice; default: []) — only these final states (e.g. EXECUTED, FAILED, DENIED) --limit (int; default: 0) — page size (server default 100, maximum 500)

activity

Command	What it does	Command-specific flags
anectico activity list	List agent calls newest first (requires activity:read)	--agent-asset (string) — only keys declared for this agent asset id --class (string) — read, write, destructive or export --credential (string) — one agent: an API key id or an OAuth connection id --credential-kind (string) — api_key or oauth_connection --cursor (string) — next_page_token from the previous page, passed unchanged with the same filters --from (string) — RFC 3339 start, inclusive; not with --since --limit (int; default: 0) — calls per page, 1..200 (server default 50) --object-id (string) — the object's id; give it with --object-kind --object-kind (string) — with --object-id: calls that named this object, e.g. incident, trace, dashboard --operation (string) — exact tool or action name, or "METHOD /route/{pattern}" --outcome (string) — ok, previewed, partial, refused, error, canceled or unknown --owner (string) — only agents of this person (user id); another person needs audit:read --project (string) — only calls that addressed this project id --refusal (string) — permission, plan, validation, not_found, conflict, rate_limited, not_ready or budget --since (string) — look-back such as 30m, 24h or 7d (default: your plan's whole audit history) --skill (string) — only skill reports that name this Anectico skill id (the CLI saying it installed, upgraded or removed it; not skill use) --surface (string) — mcp, cli or rest --to (string) — RFC 3339 end, exclusive (default: now)
anectico activity opens	Count which proof pages people opened, and which objects agents gave that nobody opened (requires activity:read)	--from (string) — RFC 3339 start, inclusive; not with --since --project (string) — only pages opened in this project id, and only calls that addressed it --since (string) — look-back such as 24h, 7d or 30d (default 7d) --to (string) — RFC 3339 end, exclusive (default: now) --top (int; default: 0) — how many most-opened objects to list, 1..25 (server default 10)
anectico activity summary	Count what each agent did over a window (requires activity:read)	--from (string) — RFC 3339 start, inclusive; not with --since --project (string) — only calls that addressed this project id --since (string) — look-back such as 24h or 7d (default 24h) --to (string) — RFC 3339 end, exclusive (default: now)

agent

Command	What it does	Command-specific flags
anectico agent bootstrap	Connect an agent host: mint a narrow key, write its MCP config, and verify it works	--agent (string) — declare the registry agent asset this key is for (an asset id from anectico fleet list); without it a kill containment on that agent cannot stop this key being re-minted --auth (string; default: key) — how the host authenticates: key (a narrow API key, the default) or oauth (browser sign-in on first use, read workflows only, no key) --config-scope (string) — where the host's config file lives: project (a file in this directory) or user (your home); default depends on the host --credential (string) — how the entry refers to the key: env (an environment variable), helper (the host runs anectico agent key header; Claude Code only), or embed (the literal key in a user-level file, owner-only); default depends on the host --dry-run (bool; default: false) — show the file, the entry and the skills directory this would write, and change nothing: no key is created, no file or credential is written, nothing is sent --env-file (string) — path for --secret-dest env-file; written 0600 with ANECTICO_API_KEY=... --expires-in (string; default: 30d) — expire the key after a relative duration, e.g. 30m, 6h, 30d (max 365d); empty means never, which is discouraged --force (bool; default: false) — allow --env-file to replace an existing file --host (string) — agent host to connect: claude, codex, cursor, gemini, muse (required; detected inside Claude Code) --name (string) — display name for the key (default: agent-HOSTNAME-YYYY-MM-DD) --org-wide (bool; default: false) — mint a key with NO project binding — it reads every project in the org; overrides the active project --scope (stringSlice; default: []) — extra scope to grant (repeatable), unioned with the bundle --scope-profile (string; default: investigate) — capability bundle to materialize into explicit scopes, unioned with any --scope; pass an empty value to grant only --scope. Bundles: investigate (34 scopes), incident (57 scopes), agent-observability (14 scopes), admin (umbrellas only — requires explicit --scope) --secret-dest (string; default: keychain) — where the secret goes: keychain, env-file, or stdout
anectico agent doctor	Check that an agent host can use its Anectico setup, and say exactly what is wrong	--config-scope (string) — check only this scope's config file: project or user (default: look in both) --host (string) — agent host to check: claude, codex, cursor, gemini, muse (required; detected inside Claude Code)
anectico agent key env	Print ANECTICO_API_KEY=... for the stored agent key	--export (bool; default: false) — prefix the assignment with the export keyword, for eval in a shell (sh only) --shell (string; default: sh) — the shell the line is for: sh, powershell (a $env: assignment for Invoke-Expression) or cmd (a set command)
anectico agent key header	Print the stored agent key as an Authorization header object (for a host's header helper)	—
anectico agent remove	Take the Anectico entry out of an agent host's MCP configuration, and nothing else	--config-scope (string) — remove only from this scope's config file: project or user (default: every file this command writes for the host) --dry-run (bool; default: false) — show what would be removed and change nothing --host (string) — agent host to remove the entry from: claude, codex, cursor, gemini, muse (required; detected inside Claude Code) --yes (bool; default: false) — confirm this destructive operation (required)

agent-runs

Command	What it does	Command-specific flags
anectico agent-runs completeness	Report how complete agent telemetry is over a window: what is missing, and where	--agent-asset-id (string) — one registry agent asset --agent-observation-key (string) — one agent's telemetry identity --end (string) — RFC3339 window end --normalizer-version (stringSlice; default: []) — pin normalizer version(s) (repeatable) --source-schema (stringSlice; default: []) — only these telemetry source schemas (repeatable) --start (string) — RFC3339 window start
anectico agent-runs context <run-id>	Show context step summaries and assembly, compaction, and cache rows	—
anectico agent-runs events	List non-span agent evidence (context reads, memory writes, tool results), newest first; cursor-paged. Needs --run-id, --session-key, or both --start and --end	--agent-asset-id (string) — one registry agent asset --agent-observation-key (string) — one agent's telemetry identity --canonical-operation (stringSlice; default: []) — only these canonical operations (repeatable) --category (stringSlice; default: []) — only these operation categories (repeatable) --context-source-id (string) — only events reading this context source --cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --distinct-id (string) — one person, by distinct id --end (string) — RFC3339 window end --limit (int; default: 0) — page size (server default 100, maximum 500) --memory-item-key (string) — only events touching this memory item --normalizer-version (stringSlice; default: []) — pin normalizer version(s) (repeatable) --outcome (stringSlice; default: []) — only these outcomes (repeatable) --person-id (string) — one canonical person --run-id (string) — only this run's events --session-key (string) — only this conversation's events --span-id (string) — only events attached to this span --start (string) — RFC3339 window start --turn-id (string) — only this turn's events
anectico agent-runs get <run-id>	Show one run with its spans	—
anectico agent-runs graph <run-id>	Show a run's COMPLETE execution graph (steps, tools, handoffs, events) — context shows only context-bearing steps	--normalizer-version (stringSlice; default: []) — pin normalizer version(s) (repeatable)
anectico agent-runs list	List agent runs	--agent-observation-key (stringSlice; default: []) — filter by immutable agent observation key (repeatable) --cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --distinct-id (string) — filter to one person --env (string) — deployment environment scope --errors-only (bool; default: false) — only runs with errors --group-key (string) — account key (requires --group-type) --group-type (string) — account type (requires --group-key) --limit (int; default: 0) — page size (server default 100, maximum 500) --person-id (string) — filter to one canonical person --provider (string) — filter to runs that used this provider --q (string) — free text over run id, agent, operation, service, conversation, person and model --release (string) — only runs whose declared agent release equals this --since (string; default: 24h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --status (string) — terminal status (completed, failed, timed_out, cancelled, max_steps) --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound) --without-release (bool; default: false) — only runs that declared no agent release

agent-sessions

Command	What it does	Command-specific flags
anectico agent-sessions get <session-key>	Show one conversation with its turns in order	--normalizer-version (stringSlice; default: []) — pin normalizer version(s) (repeatable)
anectico agent-sessions list	List agent conversations newest first, with turn counts and last outcome; cursor-paged	--agent-asset-id (string) — one registry agent asset --agent-observation-key (string) — one agent's telemetry identity --cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --distinct-id (string) — one person, by distinct id --end (string) — RFC3339 window end --last-outcome (stringSlice; default: []) — only conversations whose last turn ended so (repeatable) --limit (int; default: 0) — page size (server default 100, maximum 500) --normalizer-version (stringSlice; default: []) — pin normalizer version(s) (repeatable) --person-id (string) — one canonical person --start (string) — RFC3339 window start
anectico agent-sessions turns	List agent turns (one user message and the agent's handling of it); cursor-paged	--agent-asset-id (string) — one registry agent asset --agent-observation-key (string) — one agent's telemetry identity --cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --distinct-id (string) — one person, by distinct id --limit (int; default: 0) — page size (server default 100, maximum 500) --normalizer-version (stringSlice; default: []) — pin normalizer version(s) (repeatable) --outcome (stringSlice; default: []) — only turns that ended so (repeatable) --person-id (string) — one canonical person --session-key (string) — only this conversation's turns

alerts

Command	What it does	Command-specific flags
anectico alerts account-objective-evidence <alert-id>	Read immutable original account objective trigger evidence	—
anectico alerts ack <alert-id>	Acknowledge an alert Aliases: acknowledge.	--confirm-token (string) — server preview token; repeat identical arguments to apply --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries --note (string) — optional acknowledgment note
anectico alerts acknowledgments <alert-id>	One alert's acknowledgments: who acknowledged it, when and with what note	—
anectico alerts history	Alerts in every state, resolved included, by alert, rule, state, severity and window	--alert-id (string) — only this alert --cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500) --rule-id (string) — only alerts fired by this rule --severity (string) — only this severity --since (string) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --state (string) — only this state (empty = every state) --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico alerts list	List active alerts	--cursor (string) — opaque cursor returned by the previous page --limit (int; default: 50) — maximum rows --severity (string) — filter by severity --state (string) — filter by active state (pending, firing, acknowledged, silenced; comma-separated)
anectico alerts resolve <alert-id>	Manually resolve an alert	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --note (string) — optional resolution note
anectico alerts rules create	Create an alert rule (body = the rule JSON; see anectico docs)	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico alerts rules delete <rule-id>	Delete an alert rule	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — exact current integer version; required to fence this write
anectico alerts rules evaluate <rule-id>	Evaluate a rule against live data now and fire what it finds (sends notifications)	--confirm-token (string) — server preview token; repeat identical approved arguments to apply --expected-version (int32; default: 0) — exact saved rule version from the detail read (required) --idempotency-key (string) — stable key for this approved evaluation; reuse on retries --yes (bool; default: false) — confirm this destructive operation (required)
anectico alerts rules event <owning-event-id>	Read an immutable watch occurrence under current source permissions	—
anectico alerts rules events <watch-id>	Page retained authorized watch occurrences	--cursor (string) — opaque next_cursor for the same project, watch, scopes and limit --limit (uint32; default: 50) — page size, 1..50
anectico alerts rules get <rule-id>	Show one alert rule	—
anectico alerts rules history-metric <watch-id>	Read metric-watch evaluation history under current source permissions	--cursor (string) — opaque next_cursor for the same project, watch and limit --limit (uint32; default: 20) — page size, 1..50
anectico alerts rules list	List alert rules	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500) --severity (string) — filter by severity
anectico alerts rules preview-metric	Preview a native metric watch without scheduling or sending	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)
anectico alerts rules test <rule-id>	Validate a saved rule or check a metric watch's source access	--expected-version (int32; default: 0) — exact saved rule version from the detail read (required)
anectico alerts rules update <rule-id>	Update an alert rule (body must include the current version)	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin)
anectico alerts silences create	Create a silence (body: name, matchers[{label_name,operator,value}], starts_at, ends_at)	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico alerts silences delete <silence-id>	Expire a silence	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — exact current updated_at timestamp; required to fence this write
anectico alerts silences get <silence-id>	Show one silence	—
anectico alerts silences list	List active silences	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico alerts silences update <silence-id>	Change a silence (body: any of name, comment, matchers, starts_at, ends_at); pages it suppresses are not delivered later	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — exact current updated_at timestamp; required to fence this write --file (string) — request body from a JSON file ("-" for stdin)
anectico alerts unack <alert-id>	Withdraw an alert's acknowledgment; a firing alert notifies again Aliases: unacknowledge.	--yes (bool; default: false) — confirm this destructive operation (required)

analytics

Command	What it does	Command-specific flags
anectico analytics audiences create <result-id>	Preview and create a full resolved-person audience through MCP	--confirm-token (string) — preview token; omission previews without applying --description (string) — optional description (up to 4096 UTF-8 bytes) --idempotency-key (string) — required stable UUID; identical mutation retries reuse it --lifetime-seconds (uint32; default: 86400) — audience generation lifetime, 1..2592000 seconds; default one day --name (string) — required audience name (up to 256 UTF-8 bytes) --selection-id (string) — required exact complete selection UUID from the source result, never a series or formula output id
anectico analytics audiences get <cohort-id>	Read one exact retained generation under current source authority	--generation (string) — required exact generation as a canonical decimal string
anectico analytics audiences list	Discover derived audience names and exact generation references	--after-id (string) — last cohort UUID from the preceding live page --limit (uint32; default: 50) — page size, 1..100 --search (string) — literal case-insensitive name or description substring
anectico analytics audiences members <cohort-id>	Page exact saved audience members under current source authority	--cursor (string) — opaque next_cursor from the same generation and page size --generation (string) — required exact generation as a canonical decimal string --limit (uint32; default: 50) — page size, 1..100; keep unchanged across pages
anectico analytics audiences replace <cohort-id>	Preview and replace a full resolved-person audience through MCP	--confirm-token (string) — preview token; omission previews without applying --expected-generation (string) — required exact current generation as a decimal string --idempotency-key (string) — required stable UUID; identical mutation retries reuse it --lifetime-seconds (uint32; default: 86400) — audience generation lifetime, 1..2592000 seconds; default one day --result-id (string) — required new source result UUID --selection-id (string) — required exact complete selection UUID from the source result, never a series or formula output id
anectico analytics capabilities	Show the definition version, kinds, units, origins, filter operators and bounds the server executes	—
anectico analytics catalog	List event names and counts in an explicit window; completeness remains unknown	--cursor (string) — opaque next_cursor; reuse identical filters and page size; expires after 15 minutes --end-time (string) — exclusive RFC3339 event time; maximum window 90 days --environment (string) — exact environment; empty selects all environments --limit (uint32; default: 50) — page size; maximum 200; zero uses 50 --prefix (string) — literal case-sensitive event name prefix --start-time (string) — inclusive RFC3339 event time; millisecond precision or coarser
anectico analytics exports create <result-id>	Preview and enqueue an exact frozen measurement or full participant export	--columns (stringSlice; default: []) — optional complete projection column selection --confirm-token (string) — token from the full server preview; omission previews without writing --format (string; default: json) — csv, json or parquet --idempotency-key (string) — required stable ASCII key; reuse identical retries --options-json (string) — format options as a JSON object; compression requires parquet --projection (string) — required: measurement or participants --selection-id (string) — required full selection UUID, not a participant page --snapshot-id (string) — required exact frozen snapshot UUID
anectico analytics insights create <insight-id>	Preview and create a saved-insight definition through MCP	--body (string) — request body as inline JSON --confirm-token (string) — token from the preview; omission previews without applying --description (string) — full replacement description; omission clears it --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — required stable UUID; reuse only for the identical mutation --title (string) — full replacement title (required, up to 200 bytes)
anectico analytics insights delete <insight-id>	Preview and delete a saved-insight definition through MCP	--confirm-token (string) — token from the preview; omission previews without applying --expected-revision (string) — exact current revision as a decimal string --idempotency-key (string) — required stable UUID; reuse only for the identical mutation
anectico analytics insights duplicate <source-insight-id> <new-insight-id>	Preview and copy an exact retained revision into a new insight in this project	--confirm-token (string) — token from preview; repeat exact arguments to apply --idempotency-key (string) — required stable UUID; use the same source revision and title on retries --revision (int64; default: 0) — required exact retained source revision; current/zero is refused --title (string) — optional replacement title; defaults to the source title
anectico analytics insights export <insight-id>	Export an exact saved revision as portable JSON without ownership or history	--revision (int64; default: 0) — required exact positive retained revision; writes portable JSON to stdout
anectico analytics insights get <insight-id>	Read current or retained configuration without executing it	--revision (int64; default: 0) — zero selects current; positive selects that retained revision
anectico analytics insights import <new-insight-id>	Preview and import a portable document as a new saved insight through MCP	--body (string) — request body as inline JSON --confirm-token (string) — token from the preview; omission validates and previews without creating --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — required stable UUID; retries must retain the identical document
anectico analytics insights list	List or search live saved-insight metadata	--after-insight-id (string) — next_after_insight_id from the previous page; live UUID ordering --limit (uint32; default: 50) — page size up to 100; zero defaults to 50 --search (string) — literal title or description substring
anectico analytics insights run <insight-id>	Execute an exact retained insight revision under current source permissions	--execution-key (string) — required UUID; reuse only to retry the same saved revision, use a new key for a new measurement --revision (int64; default: 0) — required positive retained revision; edits never change the chosen revision
anectico analytics insights update <insight-id>	Preview and update a saved-insight definition through MCP	--body (string) — request body as inline JSON --confirm-token (string) — token from the preview; omission previews without applying --description (string) — full replacement description; omission clears it --expected-revision (string) — exact current revision as a decimal string --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — required stable UUID; reuse only for the identical mutation --title (string) — full replacement title (required, up to 200 bytes)
anectico analytics insights validate	Check a portable definition and current target-project references without writing or querying	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)
anectico analytics quality	Inspect submitted capture positions and declared sampling; completeness remains unknown	--end-time (string) — exclusive RFC3339 event time; maximum window 183 days --environment (string) — exact environment; empty selects all environments --start-time (string) — inclusive RFC3339 event time; millisecond precision or coarser
anectico analytics query	Execute trends, person- or account-unit funnels, retention, funnel correlation and revenue, and person-unit engagement, paths, web analytics, survey and heatmap results, with an explicit retry key	--body (string) — request body as inline JSON --execution-key (string) — required UUID; retries return the same frozen result or an explicit conflict/expiry --file (string) — request body from a JSON file ("-" for stdin) --no-wait (bool; default: false) — equivalent to --wait 0: return the current status immediately without blocking --wait (duration; default: 20s) — block up to this long for a terminal execution status before returning (max 25s); the response always carries status regardless of whether it blocked
anectico analytics query preview	Describe what an analytics query would do, without running it, reserving anything or reading event data	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin) --insight-id (string) — preview a saved insight at --revision instead of a document --revision (string) — the exact revision of --insight-id, a positive whole number
anectico analytics releases	Observed release values with counts and first-seen times in an explicit window	--end-time (string) — exclusive RFC3339 event time; maximum window 90 days --environment (string) — exact environment; empty selects all environments --limit (uint32; default: 0) — maximum distinct values, 0 to 50 (0 = server default 20) --property (string) — $release (the default) or $app_version --start-time (string) — inclusive RFC3339 event time; millisecond precision or coarser
anectico analytics remeasurement compare <original-result-id> <later-result-id>	Compare exact executions under current permissions	--audience-id (string) — exact audience UUID saved from the original result; saved_audience only --comparison-end (string) — optional explicit comparison end; absence clears the original comparison --comparison-start (string) — optional explicit comparison start; requires comparison-end --end-time (string) — required exclusive new entry time, RFC3339 --generation (int64; default: 0) — exact positive retained generation; no current-generation default --population-mode (string) — required: fresh_population or saved_audience; never inferred --start-time (string) — required inclusive new entry time, RFC3339 with millisecond precision or coarser
anectico analytics remeasurement source <original-result-id>	Prepare a query template without running it	--audience-id (string) — exact audience UUID saved from the original result; saved_audience only --comparison-end (string) — optional explicit comparison end; absence clears the original comparison --comparison-start (string) — optional explicit comparison start; requires comparison-end --end-time (string) — required exclusive new entry time, RFC3339 --generation (int64; default: 0) — exact positive retained generation; no current-generation default --population-mode (string) — required: fresh_population or saved_audience; never inferred --start-time (string) — required inclusive new entry time, RFC3339 with millisecond precision or coarser
anectico analytics result audience-preview <result-id>	Assess a complete frozen person selection without creating a cohort	--selection-id (string) — exact full-population selection UUID, never a series or formula output id; eligible is not authorization to publish
anectico analytics result cancel <result-id>	Stop a pending or running execution and report the status that stands	--yes (bool; default: false) — confirm this destructive operation (required)
anectico analytics result contribution <result-id>	Read one participant's frozen funnel or retention event chain	--contribution-ref (string) — exact contribution_ref from the participant row --ordinal (uint64; default: 0) — exact positive ordinal from the participant row --selection-id (string) — exact selection ID used for the participant page --snapshot-id (string) — exact frozen snapshot ID from the result
anectico analytics result get <result-id>	Read a frozen result under current permissions and content-erasure checks	--no-wait (bool; default: false) — equivalent to --wait 0: return the current status immediately without blocking --out (string) — save a validated PNG atomically to this path; requires --render png --render (string) — render a bounded PNG; requires --out --wait (duration; default: 20s) — block up to this long for a terminal execution status before returning (max 25s); the response always carries status regardless of whether it blocked
anectico analytics result participants <result-id>	Page one exact frozen result selection	--cursor (string) — opaque next_cursor from the same result, selection and page size --limit (uint32; default: 50) — page size 1..100; keep fixed with a cursor --selection-id (string) — exact population selection_id returned by the result; never a series or formula output id — a formula declares no population, so drill into one of its operand series instead (UNSUPPORTED_RESULT_SELECTOR)
anectico analytics result path-instances <result-id>	Page one instance selection of a frozen paths result (PL-22)	--cursor (string) — opaque next_cursor from the same result, selection and page size --limit (uint32; default: 20) — page size 1..50; keep fixed with a cursor --selection-id (string) — exact instances_selection_id of one edge (or other) from a frozen paths result
anectico analytics result survey-answers <result-id>	Page the open-text answers of one question of a frozen survey result	--cursor (string) — opaque next_cursor from the same result, selection and page size --limit (uint32; default: 20) — page size 1..50; keep fixed with a cursor --selection-id (string) — exact text.answer_selection_id of one open-text question from a frozen survey result
anectico analytics schema	Inspect permitted event property types and counts; completeness remains unknown	--end-time (string) — exclusive RFC3339 event time; maximum window 90 days --environment (string) — exact environment; empty selects all environments --event (string) — exact event name --start-time (string) — inclusive RFC3339 event time; millisecond precision or coarser
anectico analytics sql capabilities	Show the events table's columns, the SQL dialect, every limit and the error codes	—
anectico analytics sql run	Run one read-only SELECT over the events table inside a required window	--file (string) — read the SQL statement from a file ("-" for stdin) --from (string) — required start of the window over the event timestamp, RFC 3339, inclusive --limit (uint32; default: 0) — most rows to return; 0 uses the server default --statement (string) — the SQL statement, inline --to (string) — required end of the window, RFC 3339, exclusive
anectico analytics tracking-plans apply <plan-id>	Review a portable document against the exact target revision through MCP	--body (string) — request body as inline JSON --confirm-token (string) — token from matching preview/diff; omission previews only --expected-revision (string) — required exact target revision; explicit 0 for create --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — required stable UUID for identical document values and target revision
anectico analytics tracking-plans create <plan-id>	Preview and create a tracking-plan definition through MCP	--body (string) — request body as inline JSON --confirm-token (string) — token from the preview; omission previews without applying --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — required stable UUID; reuse only for the identical mutation --name (string) — full replacement name (required, up to 200 bytes)
anectico analytics tracking-plans delete <plan-id>	Preview and delete a tracking-plan definition through MCP	--confirm-token (string) — token from the preview; omission previews without applying --expected-revision (string) — exact current revision as a decimal string --idempotency-key (string) — required stable UUID; reuse only for the identical mutation
anectico analytics tracking-plans diff <plan-id>	Review a portable document against the exact target revision through MCP	--body (string) — request body as inline JSON --expected-revision (string) — required exact target revision; explicit 0 for create --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — required stable UUID for identical document values and target revision
anectico analytics tracking-plans drift <plan-id>	Compare one pinned event declaration with permitted stored observations through MCP	--end (string) — required exclusive RFC3339 event time; window at most 90 days --environment (string) — exact environment; omission selects all --event (string) — required exact event declared in the pinned revision --revision (string) — required exact positive retained revision --start (string) — required inclusive RFC3339 event time, millisecond precision
anectico analytics tracking-plans export <plan-id>	Export an exact saved revision as portable JSON without ownership or history	--revision (int64; default: 0) — required exact positive retained revision; writes portable JSON to stdout
anectico analytics tracking-plans get <plan-id>	Read one current or retained revision; retired plans are unavailable	--revision (int64; default: 0) — zero reads current; positive reads that retained revision
anectico analytics tracking-plans import <new-plan-id>	Preview and import a portable document as a new tracking plan through MCP	--body (string) — request body as inline JSON --confirm-token (string) — token from the preview; omission validates and previews without creating --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — required stable UUID; retries must retain the identical document
anectico analytics tracking-plans list	List live tracking-plan metadata; pages are not a snapshot	--after-plan-id (string) — next_after_plan_id from the preceding page --limit (uint32; default: 50) — page size, maximum 100; zero defaults to 50
anectico analytics tracking-plans update <plan-id>	Preview and update a tracking-plan definition through MCP	--body (string) — request body as inline JSON --confirm-token (string) — token from the preview; omission previews without applying --expected-revision (string) — exact current revision as a decimal string --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — required stable UUID; reuse only for the identical mutation --name (string) — full replacement name (required, up to 200 bytes)
anectico analytics tracking-plans validate	Check a portable definition and current target-project references without writing or querying	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)

anomalies

Command	What it does	Command-specific flags
anectico anomalies ack <finding-id>	Acknowledge a finding	—
anectico anomalies delete <finding-id>	Delete a finding	--yes (bool; default: false) — confirm this destructive operation (required)
anectico anomalies get <finding-id>	Show one finding	—
anectico anomalies list	List anomaly findings	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500) --severity (string) — info|warning|critical --signal (string) — filter by signal --since (string) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --sort (string) — detected_at (default; newest first) or actionability (most likely to be a real fault first, unranked last); both return the same findings --status (string) — open|acknowledged|resolved --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico anomalies resolve <finding-id>	Resolve a finding	—

api

Command	What it does	Command-specific flags
anectico api spec	Write the REST contract this deployment serves (or a selection of its operations) to a file, verified	--digest (string) — refuse unless the SOURCE ARTIFACT's digest is this (sha256: plus 64 hex characters, or the 64 hex characters); never the master digest --force (bool; default: false) — replace an existing --out file --operation (stringArray; default: []) — stable operation ID to select (repeatable); omit to write the whole contract --out (string) — file to write the contract to (required; an existing file needs --force) --partition (string; default: customer) — source contract: customer (complete, default), apps or protocol --revision (string) — refuse unless the deployment serves exactly this contract_revision

apikey

Command	What it does	Command-specific flags
anectico apikey create	Preview and confirm an API key (secret shown once)	--agent (string) — declare the registry agent asset this credential is for --confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --expires-at (string) — fixed RFC3339 expiry; optional, future and at most 365 days away --expires-in (string) — duration for the initial preview; the fixed --expires-at is printed and must be copied when confirming --idempotency-key (string) — stable retry key; generated and echoed for a preview when omitted; repeat it unchanged when confirming --name (string) — stable display name; initial preview generates and prints one when omitted; required for retry or confirmation --org-wide (bool; default: false) — create a management credential without project confinement; requires an organization credential --purpose (string; default: management) — management, application, client_delivery, replay_upload, browser_capture, mobile_capture, server_capture or native_ingest --scope (stringSlice; default: []) — scope to grant (repeatable); each must be held by the caller; client_delivery takes flags:evaluate and/or surveys:respond --scope-profile (string) — materialize a capability bundle into explicit scopes, unioned with any --scope: investigate (34 scopes), incident (57 scopes), agent-observability (14 scopes), admin (umbrellas only — requires explicit --scope) --source-id (string) — existing native intake source UUID; omitted selects the project/purpose default
anectico apikey get <id>	Read one API key's complete nonsecret metadata	—
anectico apikey list	List the org's API keys	--cursor (string) — opaque next_cursor; keep all filters unchanged --limit (int; default: 0) — page size (default 50, maximum 500)
anectico apikey revoke <key-id>	Preview and confirm permanent credential revocation	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --idempotency-key (string) — stable retry key; generated and echoed for a preview when omitted; repeat it unchanged when confirming
anectico apikey scopes	Read one page of the grantable scope catalog	--cursor (string) — opaque next_cursor; keep all filters unchanged --limit (int; default: 0) — page size (default 50, maximum 1000)
anectico apikey update <key-id>	Preview and confirm renaming a key or replacing its scopes	--clear-scopes (bool; default: false) — remove every scope --confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --idempotency-key (string) — stable retry key; generated and echoed for a preview when omitted; repeat it unchanged when confirming --name (string) — new credential name; omission preserves it --scopes (stringSlice; default: []) — complete new scope set

app-view

Command	What it does	Command-specific flags
anectico app-view grant create	Preview and confirm an immutable aggregate share	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --expected-admission-state-digest (string) — optional exact previously reviewed admission digest (parent key, sharing policy and result) --expires-at (string) — required fixed RFC3339 grant expiry --field (stringArray; default: []) — closed APP_VIEW_PROJECTION_TREND_* selector; repeat --file (string) — JSON grant fields, excluding project, confirmation and retry fields --idempotency-key (string) — stable retry key; generated and echoed for a preview when omitted; repeat it unchanged when confirming --origin (stringArray; default: []) — exact approved origin; repeat, no wildcards --out (string) — required on publication apply: new private credential file, never stdout or an existing file --parent-key (string) — exact management data-parent key UUID --publishable-result (string) — explicitly publish this one approved result to anyone holding the credential; expiry at most 30 days --result (stringArray; default: []) — exact result_id,snapshot_id,content_digest; repeat for at most ten results --scope (stringArray; default: []) — exact ceiling scope; repeat for analytics:read, persons:read and owner source scopes
anectico app-view grant list	Read one native page of secret-free grant metadata; usage may be unknown	--cursor (string) — opaque next_cursor; keep all filters unchanged --limit (int; default: 0) — page size (default 50, maximum 500) --parent-key (string) — optional exact data-parent key UUID; retain with the cursor
anectico app-view grant revoke	Preview and confirm stopping one approved share	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --expected-grant-version (string) — required positive decimal version shown in the grant metadata --grant (string) — exact grant UUID
anectico app-view token mint	Write one short-lived browser token only to a new private --out file	--expected-grant-version (string) — required current positive grant version --expires-at (string) — required fixed future RFC3339 expiry, at most five minutes --grant (string) — exact grant UUID --out (string) — required new restricted token file; never stdout, an existing file or a symlink --result (string) — one approved result UUID

asset

Command	What it does	Command-specific flags
anectico asset attribution [asset-id]	Map telemetry observation keys (or one asset) to assets and the credentials they used	--observation-key (stringSlice; default: []) — telemetry observation key (repeatable)
anectico asset classify asset-id	Set the data classification of an asset (you are recorded as the classifier)	--classification (string) — public, internal, confidential, restricted or unclassified --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries --reason (string) — why (required)
anectico asset drive asset-id	Send exactly one message to a registered, enabled agent (needs --request-id and a server confirmation token)	--confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --context-id (string) — optional A2A context id --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries --message (string) — the one message to send (required) --request-id (string) — a UUID you generate once for this message and reuse on retries (required) --task-id (string) — optional A2A task id
anectico asset driver asset-id	Enable (--enable) or disable (--disable) outbound driving of one registered agent	--confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --connection-id (string) — the saved A2A bearer-token connection (with --enable) --disable (bool; default: false) — stop driving this agent --enable (bool; default: false) — allow driving this agent --endpoint (string) — the agent's absolute HTTPS A2A JSON-RPC endpoint (with --enable) --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries
anectico asset get asset-id	Show one asset: owners, lifecycle, approval, risk, classification, shadow	—
anectico asset list	List assets by review state, owner, or declared/discovered origin	--approval-state (stringSlice; default: []) — review state: unreviewed|approved|rejected (repeatable or comma-separated) --cursor (string) — opaque next_cursor from the previous page --limit (int; default: 0) — maximum assets (server cap 200) --origin (string; default: all) — asset origin: all|shadow|declared --owner-principal (string) — exact owning-principal filter --owner-team (string) — exact owning-team filter --risk-tier (stringSlice; default: []) — reviewed risk tier: unassessed|low|medium|high|critical (repeatable or comma-separated)
anectico asset own asset-id [asset-id...]	Replace the owners of one or more assets (requires agents:write)	--confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --confirm-tokens-file (string) — JSON object mapping every asset ID to its own preview token; required to confirm multiple assets --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries --owner-principal (string) — new owner principal; omit or pass empty to clear --owner-team (string) — new owner team; omit or pass empty to clear
anectico asset register	Declare a technical asset without claiming execution or approval	--confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --file (string) — technical declaration JSON file (required; use - for stdin) --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries
anectico asset replay asset-id	Replay a real recorded session's user turns against a registered agent and compare replies	--confirm-real-person-content-export (bool; default: false) — confirm this sends a real person's recorded words to the agent (required) --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries --request-id (string) — a UUID you generate once for this replay and reuse on retries (required) --session-key (string) — the recorded session to replay (required)
anectico asset review asset-id [asset-id...]	Review one or more assets (requires agents:write)	--approval-state (string) — decision: unreviewed|approved|rejected (required; unspecified is invalid) --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --confirm-tokens-file (string) — JSON object mapping every asset ID to its own preview token; required to confirm multiple assets --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries --reason (string) — non-blank reason applied to every named asset (required) --risk-tier (string) — reviewed blast radius: unassessed|low|medium|high|critical (required; unspecified is invalid)
anectico asset versions asset-id	List every observed or declared version of an asset and which is current	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)

audit

Command	What it does	Command-specific flags
anectico audit list	List audit events newest first (requires audit:read)	--action (string) — exact action, e.g. update --cursor (string) — next_page_token from the previous page, passed unchanged with the same filters --event-type (string) — exact event type, e.g. api_key_updated --limit (int; default: 0) — events per page, 1..100 (server default 50) --resource (string) — exact resource, e.g. api_keys --result (string) — exact result, e.g. success or denied --target-key (string) — only events about this API key id

auth

Command	What it does	Command-specific flags
anectico auth connections list	List agent approvals in the current workspace	--limit (int; default: 100) — maximum approvals (1–200); advance --offset to read another page --offset (int; default: 0) — number of approvals to skip
anectico auth connections revoke <id>	Revoke one approval and its tokens	--yes (bool; default: false) — confirm this destructive operation (required)

authority-edges

Command	What it does	Command-specific flags
anectico authority-edges list	List authority edges	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --from (string) — delegating principal --include-revoked (bool; default: false) — also list revoked edges --limit (int; default: 0) — page size (server default 100, maximum 500) --purpose (string) — exact declared purpose --to (string) — principal authority was delegated to
anectico authority-edges revoke edge-id	Withdraw a delegation (does NOT disable the credential or stop the agent)	--confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries --reason (string) — why the delegation is withdrawn (required)

billing

Command	What it does	Command-specific flags
anectico billing checkout	Preview and confirm the server's complete billing proposal	--billing-email (string) — billing contact for first purchase --confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --idempotency-key (string) — stable retry key; generated and echoed for a preview when omitted; repeat it unchanged when confirming --plan (string) — plan key: solo/month, pro/month, pro/year, scale/month or scale/year
anectico billing clear	Preview and confirm the server's complete billing proposal	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --expected-revision (string) — current exact decimal subscription revision --idempotency-key (string) — stable retry key; generated and echoed for a preview when omitted; repeat it unchanged when confirming
anectico billing confirm	Preview and confirm the server's complete billing proposal	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --idempotency-key (string) — stable retry key; generated and echoed for a preview when omitted; repeat it unchanged when confirming --preview-id (string) — stored change preview UUID
anectico billing plans	Read fixed prices, replay windows and nominal retention ceilings	--cursor (string) — opaque next_cursor; keep all filters unchanged --limit (int; default: 0) — page size (default 50, maximum 1000)
anectico billing portal	Preview and confirm the server's complete billing proposal	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --idempotency-key (string) — stable retry key; generated and echoed for a preview when omitted; repeat it unchanged when confirming
anectico billing preview	Preview and confirm the server's complete billing proposal	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --idempotency-key (string) — stable retry key; generated and echoed for a preview when omitted; repeat it unchanged when confirming --plan (string) — target plan key --priced-at (string) — fixed RFC3339 pricing instant; printed when omitted on preparation and required on confirmation
anectico billing preview-get ID	Read saved pricing and current retention choices (billing:write, usage:read)	—
anectico billing status	Show subscription, renewal and allowance-reset dates	—

browser

Command	What it does	Command-specific flags
anectico browser session-evidence	Resolve permitted trace, error and recording references; pass session_id and an explicit past window of at most seven days in --body	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)
anectico browser traffic	Count every observed page view and session by declared route and service; pass a past window of at most seven days and optional route/service_name in --body	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)
anectico browser vitals	Read latest Web Vitals samples with exact p50/p75/p95; pass the same explicit window and filters in --body	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)

budget

Command	What it does	Command-specific flags
anectico budget get	Show own policy, request-rate allowance and accepted usage this UTC hour and day (activity:read)	--credential (string) — exact credential id (omitted: own credential) --credential-kind (string) — api_key or oauth_connection; another credential requires audit:read --workspace (bool; default: false) — read workspace defaults (audit:read)
anectico budget set	Set an owner/admin policy from JSON: operation limits and request_rate (api_key:write; connections also members:write)	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --file (string) — JSON with credential_kind, credential_id and policy; omit credential fields for workspace defaults. policy.request_rate {requests_per_second, burst} limits how fast requests may arrive, within the plan's ceiling; workspace_total.request_rate tightens the ceiling all management keys share. An omitted field inherits; 0 blocks --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico budget spend get	Read own spend policy and exposure; another credential or workspace needs audit:read	--credential (string) — exact credential id; omitted selector reads verified self --credential-kind (string) — api_key or oauth_connection; must also name --credential --workspace (bool; default: false) — workspace policy or history (audit:read)
anectico budget spend set	Preview and confirm a complete owner spend policy from a decimal-string JSON file	--confirm-token (string) — server preview token; repeat identical file and key to apply --file (string) — JSON with exact subject, complete policy and optional workspace_total; amounts are decimal strings, omission inherits, zero blocks --idempotency-key (string) — required stable policy replacement key; preserve after response loss
anectico budget spend usage	Read explicit UTC hour or day spend history; missing data never proves zero	--credential (string) — exact credential id; omitted selector reads verified self --credential-kind (string) — api_key or oauth_connection; must also name --credential --cursor (string) — filter-bound next_cursor; repeat unchanged bounds and selectors --from (string) — inclusive explicit RFC3339 UTC bucket boundary --limit (int; default: 100) — page size 1 to 200 --period (string; default: day) — hour or day buckets; never add the two representations --to (string) — exclusive explicit RFC3339 UTC bucket boundary --workspace (bool; default: false) — workspace policy or history (audit:read)
anectico budget usage	Read accepted operation history by UTC hour/day (activity:read; other agents or scheduled_work audit:read)	--credential (string) — exact credential id --credential-kind (string) — api_key, oauth_connection or scheduled_work (no credential id); omitted reads own history --cursor (string) — opaque next_cursor; repeat explicit bounds --from (string) — inclusive RFC3339 UTC bucket boundary --period (string; default: day) — hour or day buckets --to (string) — exclusive RFC3339 UTC bucket boundary

capture-settings

Command	What it does	Command-specific flags
anectico capture-settings disable-autocapture	Turn browser autocapture off for the active project (the kill switch)	--confirm-token (string) — server preview token; repeat identical arguments to apply
anectico capture-settings disable-page-snapshot	Stop heatmap page snapshots for the active project (the kill switch)	--confirm-token (string) — server preview token; repeat identical arguments to apply
anectico capture-settings enable-autocapture	Allow browser autocapture again for the active project	--confirm-token (string) — server preview token; repeat identical arguments to apply
anectico capture-settings enable-page-snapshot	Allow heatmap page snapshots for the active project	--confirm-token (string) — server preview token; repeat identical arguments to apply
anectico capture-settings get	Show the active project's capture settings and their revision	—
anectico capture-settings set	Patch capture settings and replace optional native replay choices at an exact revision	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; repeat identical arguments to apply --expected-revision (string) — the settings' exact current revision (required; 409 on a stale value) --file (string) — request body from a JSON file ("-" for stdin)
anectico capture-settings set-page-snapshot	Patch the page-snapshot section, compare-and-swap on the revision	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; repeat identical arguments to apply --expected-revision (string) — the settings' exact current revision (required; 409 on a stale value) --file (string) — request body from a JSON file ("-" for stdin)

channels

Command	What it does	Command-specific flags
anectico channels create	Create a channel (body: type, name, config{…})	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico channels delete <channel-id>	Delete a channel	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — exact current updated_at timestamp; required to fence this write --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico channels get <channel-id>	Show one channel (secrets redacted)	—
anectico channels list	List notification channels	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico channels templates create	Create the custom template for a channel type (body: channel_type, name, subject, template)	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico channels templates delete <template-id>	Delete a custom template; its channel type falls back to the built-in default	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — exact current integer version; required to fence this write --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico channels templates effective <channel-type>	Show the effective custom template or the explicit built-in default	—
anectico channels templates get <template-id>	Show one template, including the version an update must name	—
anectico channels templates list	List custom templates (types without one use the built-in default)	--channel-type (string) — only templates for this channel type
anectico channels templates update <template-id>	Change a template's name, subject or template, fenced on --expected-version	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (int; default: 0) — the template's current version (required) --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico channels test <channel-id>	Send a test notification through a channel	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — exact current updated_at timestamp; required to fence this write --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico channels update <channel-id>	Update a channel (omitted secret fields keep their stored value)	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — current updated_at timestamp from the detail read (required) --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments

cohorts

Command	What it does	Command-specific flags
anectico cohorts create	Create a cohort (body: name, kind behavioral|property|static, definition?/members?)	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable key of 1–128 bytes for identical retries; required when creating a resource or queuing a report
anectico cohorts delete <cohort-id>	Delete a cohort	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-updated-at (string) — exact updated_at timestamp from the detail read; required for an update or deletion
anectico cohorts get <cohort-id>	Show one cohort	—
anectico cohorts history <cohort-id>	List immutable cohort membership generations newest first	--cursor (string) — opaque next_cursor from the previous page --limit (int; default: 0) — maximum generations (1-1000; default 50)
anectico cohorts list	List cohorts	--cursor (string) — opaque next_cursor from the previous page --limit (int; default: 0) — maximum rows (1-1000; default 50)
anectico cohorts members <cohort-id>	List a cohort's member person ids (paginated)	--cursor (string) — opaque next_cursor from the previous page --generation (int64; default: 0) — retained membership generation (default current) --limit (int; default: 0) — maximum rows (1-1000; default 50)
anectico cohorts preview	Preview a behavioral/property body ({kind, definition}) without saving it	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin) --sample-limit (uint32; default: 0) — maximum sampled person ids (1-100; default 20)
anectico cohorts refresh <cohort-id>	Recompute a cohort's membership now	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-definition-version (int64; default: 0) — definition_version from the full cohort read --expected-generation (int64; default: 0) — members_generation from the full cohort read
anectico cohorts replace-members <cohort-id>	Replace complete static membership (body is a JSON string array; [] clears)	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-generation (int64; default: 0) — current membership generation (required) --file (string) — request body from a JSON file ("-" for stdin)
anectico cohorts update <cohort-id>	Update a cohort (name/description/definition; kind is immutable)	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-definition-version (int64; default: 0) — exact current value from the full cohort read; required when replacing the definition --expected-generation (int64; default: 0) — exact current value from the full cohort read; required when replacing the definition --expected-updated-at (string) — exact updated_at timestamp from the detail read; required for an update or deletion --file (string) — request body from a JSON file ("-" for stdin)

collector

Command	What it does	Command-specific flags
anectico collector dashboards install	Preview and confirm the collector's preset dashboards (host, postgresql, redis)	--confirm-token (string) — token from the server preview; for all, a JSON object with host, postgresql and redis tokens --preset (string) — host|postgresql|redis|all (required)

config-snapshots

Command	What it does	Command-specific flags
anectico config-snapshots get effective-config-hash	Show a complete saved configuration and one page of deployment bindings	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --environment (string) — deployment environment --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico config-snapshots register	Register the configuration behind an effective_config_hash (--file or --body)	--body (string) — request body as inline JSON --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --environment (string) — deployment environment; part of the configuration's identity --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries

connections

Command	What it does	Command-specific flags
anectico connections create	Preview and confirm a connection (body: provider, kind, display_name, secret)	--body (string) — request body as inline JSON --confirm-token (string) — server token from the preview; repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable 1-128 character key; retries return the first creation
anectico connections delete <connection-id>	Preview and confirm credential destruction	--confirm-token (string) — server token from the preview; repeat identical arguments to apply --yes (bool; default: false) — confirm this destructive operation (required)
anectico connections get <connection-id>	Show one connection (metadata only)	—
anectico connections list	List connections	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500) --provider (string) — filter by provider
anectico connections mappings delete <mapping-id>	Remove a mapping; that Slack user's interactive clicks are refused until mapped again	--confirm-token (string) — server token from the preview; repeat identical arguments to apply --yes (bool; default: false) — confirm this destructive operation (required)
anectico connections mappings list <connection-id>	List the Slack users mapped to Anectico members on one Slack connection	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico connections mappings set <connection-id>	Preview and confirm a Slack user to member mapping (--yes acknowledges repointing)	--confirm-token (string) — server token from the preview; repeat identical arguments to apply --external-user-id (string) — the Slack user id, e.g. U0123ABCD (required) --member-id (string) — the Anectico member's user id (required) --yes (bool; default: false) — confirm this destructive operation (required)
anectico connections oauth handoff <provider>	Preview and confirm a link a signed-in member opens to connect slack, github, jira or linear	--confirm-token (string) — server token from the preview; repeat identical arguments to apply --idempotency-key (string) — stable 1-128 character key; retries return the first creation --metadata (stringSlice; default: []) — non-secret provider setup as key=value (repeatable), e.g. jira_project=ENG --metadata-json (string) — non-secret JSON object for structured provider setup; may combine with distinct --metadata fields --reauthorize (string) — a needs_reauth connection id to reauthorize instead of creating one
anectico connections oauth status <handoff-id>	Show a handoff: awaiting_human, authorizing, completed (with connection_id), failed or expired	—
anectico connections update <connection-id>	Preview and confirm a connection change (label, metadata, status or either credential)	--body (string) — request body as inline JSON --confirm-token (string) — server token from the preview; repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin)

content-policy

Command	What it does	Command-specific flags
anectico content-policy access-audit	List what the active project's policy REFUSED (not an access log)	--class (string) — one content class, e.g. model_transcript --cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500) --principal (string) — only refusals aimed at this principal --since (string) — RFC3339 lower bound --sink (string) — store, read, export, judge_transfer or app_view_share --until (string) — RFC3339 upper bound
anectico content-policy erase <content-class> <subject-ref>	PERMANENTLY erase one subject's content of one class in the active project	--confirm-token (string) — server preview token; repeat identical arguments to apply --operation-id (string) — UUID naming this erasure (required) --reason (string) — why; recorded on the erasure receipt (required) --yes (bool; default: false) — confirm this destructive operation (required)
anectico content-policy get	Show the active project's full (class, sink) matrix and its version	—
anectico content-policy list	List every project's content policy in the organization	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico content-policy retention get	Show the active project's retention windows	—
anectico content-policy retention set	REPLACE the retention windows (body: retention[{content_class, retention_days}])	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --yes (bool; default: false) — confirm this destructive operation (required)
anectico content-policy set	REPLACE the active project's matrix (body: rules[{content_class, sink, decision}])	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; repeat identical arguments to apply --expected-version (uint32; default: 0) — the policy version you read, including 0 for initialization (required) --file (string) — request body from a JSON file ("-" for stdin) --yes (bool; default: false) — confirm this destructive operation (required)

coverage

Command	What it does	Command-specific flags
anectico coverage compare	Read compare for the exact project and environment	--end (string) — required absolute exclusive RFC3339 end; at most seven days --environment (string) — required exact environment --release (string) — application version; required except for observed --revision (string) — exact revision (default latest; person erasure may redact matched fields) --start (string) — required absolute inclusive RFC3339 start
anectico coverage declare	Validate and preview a code-derived declaration; confirm the exact revision with the server token	--confirm-token (string) — server preview token; repeat identical arguments to apply --dry-run (bool; default: false) — validate and print the exact proposal and refusals; save no declaration --environment (string) — required exact environment --expected-revision (string) — exact head revision for retries (otherwise taken from validation) --file (string) — required JSON declaration file written by your agent after reading code --idempotency-key (string) — stable UUID for retries (generated and printed when omitted) --release (string) — required application version string
anectico coverage observed	Read observed for the exact project and environment	--end (string) — required absolute exclusive RFC3339 end; at most seven days --environment (string) — required exact environment --release (string) — application version; required except for observed --start (string) — required absolute inclusive RFC3339 start
anectico coverage revisions	Read revisions for the exact project and environment	--before-revision (string) — exclusive descending revision cursor --environment (string) — required exact environment --limit (int; default: 20) — revision metadata per page, 1..100 --release (string) — application version; required except for observed
anectico coverage show	Read show for the exact project and environment	--environment (string) — required exact environment --release (string) — application version; required except for observed --revision (string) — exact revision (default latest; person erasure may redact matched fields)
anectico coverage withdraw	Confirm a withdrawal revision; earlier revisions remain readable	--confirm-token (string) — server preview token; repeat identical arguments to apply --environment (string) — required exact environment --expected-revision (string) — required exact positive current revision --idempotency-key (string) — stable UUID for retries --release (string) — required application version

dashboards

Command	What it does	Command-specific flags
anectico dashboards clone <dashboard-id>	Clone a dashboard	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-version (uint64; default: 0) — exact source dashboard version from its detail read --idempotency-key (string) — stable key of 1–128 bytes for identical retries; required when creating a resource or queuing a report
anectico dashboards create	Preview a dashboard (body: name, project_id?, description?, layout?, tags?, variables?, widgets?)	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable key of 1–128 bytes for identical retries; required when creating a resource or queuing a report
anectico dashboards delete <dashboard-id>	Delete a dashboard	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-version (uint64; default: 0) — current dashboard aggregate version (required)
anectico dashboards get <dashboard-id>	Show a dashboard with its widgets	--widget-cursor (string) — MCP widget continuation from pagination.next_cursor; requires mcp:read and dashboard:read; explicit empty starts the first 30-widget page
anectico dashboards list	List dashboards	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 50, maximum 500)
anectico dashboards update <dashboard-id>	Update a dashboard (partial body; tags as {"values":[…]})	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --file (string) — request body from a JSON file ("-" for stdin)
anectico dashboards widgets add <dashboard-id>	Add a widget (body: expected_version, type, title, query{…}, visualization?, refresh_interval?)	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable key of 1–128 bytes for identical retries; required when creating a resource or queuing a report
anectico dashboards widgets delete <dashboard-id> <widget-id>	Delete a widget	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-version (uint64; default: 0) — current dashboard aggregate version (required)
anectico dashboards widgets query <dashboard-id> <widget-id>	Read a saved-insight widget under current permissions	--execution-key (string) — UUID reused only for identical widget retries --owner-revision (string) — exact positive owner revision returned by status
anectico dashboards widgets status <dashboard-id> <widget-id>	Read a saved-insight widget under current permissions	—
anectico dashboards widgets update <dashboard-id> <widget-id>	Update a widget	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --file (string) — request body from a JSON file ("-" for stdin)

deliveries

Command	What it does	Command-specific flags
anectico deliveries get <delivery-id>	Show one delivery receipt and a bounded page of every recorded attempt	--cursor (string) — next cursor from the previous attempt history page --limit (int; default: 20) — attempts on the oldest-first history page (1-50)
anectico deliveries list	List delivery receipts for an alert, incident, channel, or status	--alert (string) — filter by alert id --channel (string) — filter by channel id --cursor (string) — opaque cursor returned by the previous page --incident (string) — filter by incident id --limit (int; default: 50) — maximum receipts (1-50) --status (string) — filter by status: pending|sending|sent|failed|retrying|suppressed|dlq

deployments

Command	What it does	Command-specific flags
anectico deployments get [deployment-id]	Read a complete saved deployment by id or its natural key	--asset-id (string) — asset of the natural key --environment (string) — environment of the natural key --external-ref (string) — external reference of the natural key
anectico deployments register	Declare an asset deployed in an environment under a stable external reference	--asset-id (string) — the registry asset deployed (required) --asset-version-id (string) — the exact asset version --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --deployed-at (string) — RFC3339 deployment time (default: kept, or now) --deployed-by (string) — who or what deployed it --environment (string) — deployment environment, e.g. production (required) --external-ref (string) — your stable deployment reference (required) --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries --retired-at (string) — RFC3339 time it stopped running --source (string; default: declared) — declared, deployment, mcp_discovery, a2a_card or cloud_import

docs

Command	What it does	Command-specific flags
anectico docs	Print the full command manifest (JSON; --markdown for humans)	--api-key (string) — API key for headless auth (env: ANECTICO_API_KEY) --api-url (string) — Anectico API origin, no path (e.g. https://api.example.com); every endpoint path (/api/v1/..., /mcp, /auth/me) is appended to it (env: ANECTICO_API_URL) -h, --help (bool; default: false) — help for docs --ingest-url (string) — ingest base URL for 'anectico send' (env: ANECTICO_INGEST_URL) --json (bool) — alias for --output json; the last of --output/--json wins --markdown (bool; default: false) — render the manifest as markdown --no-color (bool; default: false) — disable colored output -o, --output (string) — output format: table|json (default: table on a TTY, json when piped); the last of --output/--json wins --profile (string) — config profile to use (env: ANECTICO_PROFILE) --project (string) — project id scope (env: ANECTICO_PROJECT)

doctor

Command	What it does	Command-specific flags
anectico doctor	Check API, auth, project, ingestion, and MCP connectivity	—
anectico doctor captures cancel <capture-id>	Stop new allocations; existing grants expire within 30 seconds	--confirm-token (string) — server preview token; repeat identical arguments to apply --yes (bool; default: false) — confirm this destructive operation (required)
anectico doctor captures create	Request capture (JSON: id UUID, distinct_id, environment, duration_seconds, max_spans)	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin)
anectico doctor captures list	List all active (non-canceled, unexpired) diagnostic requests	--distinct-id (string) — restrict to an exact customer identifier
anectico doctor events	Verify the exact product events your application test sent	--file (string) — JSON verification request ("-" for stdin): window_start, window_end, samples, optional tracking_plan_id and tracking_plan_revision
anectico doctor flags	Verify the feature-flag exposures your application test recorded	--file (string) — JSON flag verification request ("-" for stdin): window_start, window_end, exposures
anectico doctor instrumentation	Explain trace and log visibility in a bounded time window (default: last 15 minutes)	--backend-service (string; default: api) — backend service name --browser-service (string; default: web) — browser service name --end-time (string) — window end (RFC3339; defaults to now) --environment (string) — optional deployment environment --error-message (string) — exact controlled test error for a service or mobile story --event-name (string; default: checkout_started) — expected diagnostic event in the browser session --expect-replay (bool; default: true) — require a matching replay session when verifying a person --person (string) — verify this identified customer's connected story --start-time (string) — window start (RFC3339; defaults to 15 minutes before end; maximum window seven days) --story-kind (string) — service or mobile; omit for browser-to-backend verification --trace-id (string) — trace generated by your application (32 hex characters) --tracking-plan-id (string) — optional pinned declaration for a complete browser/mobile journey; adds tracking and analytics read requirements --tracking-plan-revision (string) — exact positive retained tracking revision; schema observation remains separate from person-linked journey checks
anectico doctor integration	Verify the one integration job your application test exercised	--file (string) — JSON integration verification request ("-" for stdin): job, start_time, end_time and that job's fields

drive-attempts

Command	What it does	Command-specific flags
anectico drive-attempts get [attempt-id]	Show one drive attempt by id or by --request-id; never resends. STARTED means it may or may not have arrived	--request-id (string) — the request_id you sent

escalation

Command	What it does	Command-specific flags
anectico escalation create	Create a policy (body: name, levels[{level,delay,channels,users,schedules}], max_escalations)	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico escalation delete <policy-id>	Delete a policy	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — exact current updated_at timestamp; required to fence this write --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico escalation get <policy-id>	Show one escalation policy	—
anectico escalation list	List escalation policies	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico escalation update <policy-id>	Replace a policy (full body)	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — current updated_at timestamp from the detail read (required) --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments

evals

Command	What it does	Command-specific flags
anectico evals annotations add subject-ref	Record or replace YOUR judgment of one agent run or step on one metric	--comment (string) — free-text rationale, in your own words --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries --label (string) — short verdict, e.g. good or bad --metric (string) — the dimension being judged (required) --subject-kind (string; default: agent_run) — agent_run or agent_step --value (float64; default: 0) — numeric judgment (0.0-1.0 by convention); OMIT it rather than passing 0 when only labeling
anectico evals annotations list subject-ref [subject-ref...]	Read a page of human judgments for named agent runs or steps	--author (string) — exact author (user id) filter; a filter, not a permission --cursor (string) — pagination.next_cursor from the previous page; keep subject and metric filters identical --limit (int; default: 0) — judgments per named subject (default and maximum: 20; lower values reduce each share) --metric (string) — exact metric-name filter
anectico evals budget get	Show the daily cap and what has been consumed today	—
anectico evals budget set	Set the daily cap on paid evaluations	--confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --daily-cap (uint64; default: 0) — maximum paid evaluations per day for this org --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries
anectico evals datasets create	Register an EMPTY dataset (body: dataset_id, display_name, description)	--body (string) — request body as inline JSON --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries
anectico evals datasets get dataset-id	Show one dataset with a page of complete sealed versions	--before-version (uint32; default: 0) — versions strictly older than this number --cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500) --version (uint32; default: 0) — read this exact version; cannot combine with --before-version
anectico evals datasets items dataset-id	List the frozen cases of one sealed dataset version	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500) --version (uint32; default: 0) — the exact sealed version to read (required)
anectico evals datasets list	List the project's datasets	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico evals datasets promote dataset-id	Seal a NEW version with reviewed agent runs added	--body (string) — request body as inline JSON --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries
anectico evals datasets remove dataset-id	Seal a NEW version without the named cases (body: item_ids). Nothing is deleted: earlier versions keep every case they had. An empty item_ids is accepted only when the current version is RETIRED, and re-cuts the dataset over the cases that remain	--body (string) — request body as inline JSON --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries
anectico evals datasets replay dataset-id item-id	Re-execute one frozen case in a sandbox that stubs every effectful tool call (body: plan{tools[{tool_name, effect}], default_effect}). Saves no replay artifact	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin) --version (uint32; default: 0) — the exact sealed version holding the case (required)
anectico evals evaluate	Evaluate one subject now (body: subject_kind, subject_ref, evaluator). Spends the org's budget	--body (string) — request body as inline JSON --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries
anectico evals evaluators add-version evaluator-id	Seal a NEW evaluator version (body: config_json). A version is immutable; a changed rule is a new version	--body (string) — request body as inline JSON --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries
anectico evals evaluators calibrate evaluator-id version	Measure how far one evaluator version agrees with human labels on the named subjects	--author (string) — restrict the comparison to one reviewer's labels --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries --min-labels (uint32; default: 0) — the minimum comparable human labels this calibration declares it needs (required) --subject (stringSlice; default: []) — a subject whose human labels and judge verdicts are compared (repeatable, at most 200)
anectico evals evaluators calibrations evaluator-id	Show one evaluator's calibration history against human labels, newest first	--cursor (string) — pagination.next_cursor from the preceding page --limit (uint32; default: 0) — page size 1..500; default 100 --version (uint32; default: 0) — show only this version's calibrations; omit for every version
anectico evals evaluators create	Register an evaluator and version 1 (body: evaluator_id, display_name, kind, metric_name, config_json)	--body (string) — request body as inline JSON --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries
anectico evals evaluators get evaluator-id	Show one evaluator with a page of complete sealed versions	--before-version (uint32; default: 0) — versions strictly older than this number --cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500) --version (uint32; default: 0) — read this exact version; cannot combine with --before-version
anectico evals evaluators list	List the project's evaluators	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico evals evaluators version evaluator-id version	Resolve one exact evaluator version, the reference a rule or gate stores	—
anectico evals experiments comparison experiment-id	Compare every challenger with the baseline, with the declared correction applied across the whole family. Saves no comparison; unchanged scores reproduce the numbers, while new scores can change them	—
anectico evals experiments create	Declare an experiment (body: experiment_id, dataset, evaluators, candidates with exactly one baseline, correction, alpha). The correction has no default and an unset one is refused	--body (string) — request body as inline JSON --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries
anectico evals experiments get experiment-id	Show one experiment and its progress	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico evals experiments list	List the project's experiments	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico evals experiments run experiment-id	Run one BOUNDED, resumable batch and report what remains. Spends the org's budget; call again while remaining is non-zero	--confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries --max-evaluations (uint32; default: 0) — upper bound on evaluations this call performs; unset lets the server choose
anectico evals experiments trials experiment-id	Record which subject realizes each case under each candidate (body: trials[])	--body (string) — request body as inline JSON --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries
anectico evals gates create	Declare a gate (body: release, evidence_kind, experiment or canary, objectives with exact evaluator versions, confidence_level, analysis_seed). A gate is fixed at creation; a changed objective is a new gate	--body (string) — request body as inline JSON --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries
anectico evals gates evaluate gate-id	Preview one permanent verdict with a required decision-intent key; use a new key for fresh evidence	--confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --idempotency-key (string) — required stable decision-intent key; keep it for retries, use a new value for fresh evidence
anectico evals gates get gate-id	Show a gate's full definition and one page of decisions, newest first	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico evals gates list	List the project's gates with their latest verdict	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500) --release (string) — narrow to the gates declared about one release label
anectico evals jobs	Read bounded evaluation job control states and plan refusals	--cursor (string) — opaque next_cursor; keep selectors and bounds identical --evaluator (string) — exact evaluator ID --from (string) — inclusive UTC window start, RFC3339 with Z (required) --job (string) — opaque job UUID --limit (int; default: 100) — page size, 1 through 200 --retry-reason (string) — closed retry reason such as plan_limit_reached --rule (string) — sampling rule UUID --status (string) — closed job state such as completed or evaluate_retry --to (string) — exclusive UTC window end, RFC3339 with Z (required) --version (uint32; default: 0) — exact evaluator version; requires --evaluator --work (string) — opaque work UUID
anectico evals release-series	Show one exact evaluator metric by observed agent release	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --end (string) — exclusive upper bound on the subject's occurrence time, RFC3339 --evaluator (string) — exact evaluator id (required) --evaluator-version (uint32; default: 0) — exact positive evaluator version (required) --limit (int; default: 0) — page size (server default 100, maximum 500) --metric (string) — exact metric name (required) --start (string) — inclusive lower bound on the subject's occurrence time, RFC3339
anectico evals results	List stored evaluation results	--cursor (string) — opaque pagination.next_cursor; keep all filters and limit identical --end (string) — exclusive upper bound on the subject's occurrence time, RFC3339 --evaluator (string) — exact evaluator id filter --limit (int; default: 0) — page size for zero/one subject (default 100, max 500); per-subject size for a batch (default/max 20) --metric (string) — exact metric name filter --mode (string) — production, experiment or simulation; unset returns every mode --start (string) — inclusive lower bound on the subject's occurrence time, RFC3339 --subject (stringSlice; default: []) — exact subject references, repeatable; max 200. Multi-subject pages reserve up to 20 results per subject
anectico evals rules delete rule-id	Delete a sampling rule; production traffic stops being evaluated by it	--confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries
anectico evals rules list	List the project's sampling rules	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico evals rules set	Create or replace a sampling rule (body: rule_id, evaluator, subject_kind, sampling_rate, per_tick_limit, enabled)	--body (string) — request body as inline JSON --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries

event-destinations

Command	What it does	Command-specific flags
anectico event-destinations attempts <destination-id>	Newest recorded attempts; a page is not a total	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico event-destinations create	Create a key-owned HTTPS destination; signing secret shown once	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico event-destinations delete <destination-id>	Delete an owned destination	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico event-destinations deliveries <destination-id>	Read queued, accepted or stopped signed-event receipts	--cursor (string) — opaque next_cursor from the same filtered page contract --event (string) — external signed occurrence UUID --limit (uint32; default: 50) — page size, maximum 100; 0 uses 50 --status (string) — queued, sending, retrying, http_accepted or terminal
anectico event-destinations delivery <destination-id> <delivery-id>	Read one destination-owned signed-event receipt	—
anectico event-destinations get <destination-id>	Read subscriptions, state and last outcome; never the secret	—
anectico event-destinations list	List owned destinations, without signing secrets	--key-id (string) — filter by key id (owners/admins only for other keys)
anectico event-destinations pause <destination-id>	Pause an owned destination	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico event-destinations resume <destination-id>	Resume an owned destination	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico event-destinations rotate-secret <destination-id>	Rotate an owned destination's signing secret	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico event-destinations test <destination-id>	Test an owned destination	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico event-destinations update <destination-id>	Replace all subscriptions and recovery options	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments

events

Command	What it does	Command-specific flags
anectico events names	List captured analytics event names	--cursor (string) — opaque next_cursor from the previous page --limit (int; default: 0) — page size from 1 to 50 (default 50) --prefix (string) — restrict names to this prefix --property-key (string) — event property key (requires --property-value) --property-value (string) — exact event property value (requires --property-key)
anectico events triggerers <event>	List people who triggered an event in an exact time window	--cursor (string) — opaque next_cursor from the previous page --limit (int; default: 0) — page size from 1 to 1000 (default 50) --property-key (string) — event property key (requires --property-value) --property-value (string) — exact event property value (requires --property-key) --since (string) — required exact RFC3339 start timestamp --until (string) — required exact RFC3339 end timestamp

experiments

Command	What it does	Command-specific flags
anectico experiments counts <key>	Show per-arm ledger counts: assigned, exposed and outcome receipts by state	—
anectico experiments create	Create a product experiment draft (body: an ExperimentDefinition)	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable key of 1–128 bytes for identical retries; required when creating a resource or queuing a report --key (string) — slug unique in the project forever: 1-64 of a-z, 0-9, '-' or '_' (required)
anectico experiments delivery-evidence <key>	Read one tested subject's retained assignment, exposure and selected outcome receipts	--assignment-id (string) — exact assignment UUID; exclusive with --person --exposure-id (string) — optional exact exposure UUID; never substitutes another exposure --file (string) — JSON object containing only outcomes: [{source_id,event_id}]; at most 20 ("-" for stdin) --person (string) — declared distinct_id resolved by exact alias ownership; exclusive with --assignment-id --revision (string) — exact positive launched revision (required)
anectico experiments get <key>	Show one product experiment: its definition, state and lifecycle timestamps	—
anectico experiments launch <key>	Launch a draft at --expected-revision: freezes the definition and starts the run	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-revision (string) — the draft revision previewed; refused if it moved (required)
anectico experiments list	List the active project's product experiments	--after-key (string) — next_after_key from the previous page, to continue listing --limit (int; default: 0) — maximum results, 1-200 (server default 50) --state (string) — filter: draft, running, observing, final, canceled or invalidated
anectico experiments preview-launch <key>	Evaluate a draft's launch admission without launching	—
anectico experiments result <key>	Read a product experiment's fixed-horizon result	--out (string) — new PNG destination path; existing files are refused --render (string) — export a bounded PNG (png); ordinary output when omitted
anectico experiments stop <key>	Stop (cancel) a draft or run	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-revision (string) — exact current revision from the detail read; required --reason (string) — optional, at most 1024 characters
anectico experiments update-draft <key>	Replace a draft's definition at its current revision (body: the complete ExperimentDefinition)	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-revision (string) — the draft's exact current revision (required; 409 on a stale value) --file (string) — request body from a JSON file ("-" for stdin)

export

Command	What it does	Command-specific flags
anectico export create	Create an export job (body: type EXPORT_TYPE_CSV|JSON|PARQUET + query)	--body (string) — request body as inline JSON --confirm-token (string) — server token from the preview; repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable 1-128 character ASCII key using letters, digits, . _ : or -
anectico export jobs cancel <job-id>	Cancel an export job	--confirm-token (string) — server token from the preview; repeat identical arguments to apply --yes (bool; default: false) — confirm this destructive operation (required)
anectico export jobs download <job-id>	Safely download a finished export to a new local file	--file (string) — new destination path (existing files and symlinks are never overwritten)
anectico export jobs download-url <job-id>	Get the API download URL for a finished job	—
anectico export jobs get <job-id>	Show one export job	—
anectico export jobs list	List export jobs	--cursor (string) — signed next cursor from the previous page --limit (int; default: 0) — page size from 1 to 100 --status (string) — filter by status enum name --type (string) — filter by type enum name
anectico export jobs retry <job-id>	Retry a failed export job	--confirm-token (string) — server token from the preview; repeat identical arguments to apply
anectico export jobs watch <job-id>	Watch one export job until it reaches a terminal state	--interval (duration; default: 2s) — successful poll interval (100ms to 1m) --max-polls (int; default: 1000) — maximum API polls (1 to 100000) --max-transient-errors (int; default: 8) — consecutive HTTP 429/503 errors to retry (0 to 100) --timeout (duration; default: 30m0s) — maximum total watch duration (1s to 24h)
anectico export logs	Export logs (body: format, service_name?, level?, start_time?, end_time?, columns?)	--body (string) — request body as inline JSON --confirm-token (string) — server token from the preview; repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable 1-128 character ASCII key using letters, digits, . _ : or -

findings

Command	What it does	Command-specific flags
anectico findings create	Preview and save an immutable author statement	--body (string) — request body as inline JSON --conclusion (string) — author's conclusion, at most 16384 bytes --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --title (string) — author's title, at most 256 bytes
anectico findings get <id>	Read a finding revision or its labeled withdrawal tombstone	—
anectico findings list	Page finding metadata; no total counted	--author-id (string) — verified author's id --author-kind (string) — person, api_key or oauth_connection --cursor (string) — next_cursor from the previous page --end (string) — exclusive absolute UTC creation time --limit (int; default: 20) — page size, 1 to 100 --reference-kind (string) — filter by reference kind (purged references cannot match) --start (string) — inclusive absolute UTC creation time --state (string) — current, superseded, withdrawn or withdrawn_by_erasure
anectico findings revise <id>	Preview and save an immutable author statement	--body (string) — request body as inline JSON --conclusion (string) — author's conclusion, at most 16384 bytes --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --title (string) — author's title, at most 256 bytes
anectico findings withdraw <id>	Delete all lineage content and leave tombstones; requires --yes	--reason-class (string; default: user_withdrawn) — user_withdrawn, incorrect, privacy or replaced --yes (bool; default: false) — confirm this destructive operation (required)

flags

Command	What it does	Command-specific flags
anectico flags create	Create a flag (body: key, name?, active?, variants?, filters?; project_id injected)	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable key of 1–128 bytes for identical retries; required when creating a resource or queuing a report
anectico flags decide <distinct-id>	Evaluate feature flags remotely for one exact identity	--groups (string) — group type to key mappings as a JSON object --person-properties (string) — person properties as a JSON object
anectico flags delete <flag-key>	Delete a flag	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-updated-at (string) — exact updated_at timestamp from the detail read; required for an update or deletion
anectico flags evaluate <distinct-id>	Evaluate named flags for one identity as a client application does (flags:evaluate)	--groups (string) — group type to key mappings as a JSON object (at most ten) --key (stringArray; default: []) — flag key to evaluate (repeatable, 1-100, unique) --person-properties (string) — declared person properties as a JSON object
anectico flags get <flag-key>	Show one flag's full definition	—
anectico flags list	List the project's feature flags	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 50, maximum 500)
anectico flags snapshot	Download the project's local-evaluation snapshot	—
anectico flags toggle <flag-key> <on|off>	Turn a feature flag on or off	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-updated-at (string) — exact updated_at timestamp from the detail read; required for an update or deletion
anectico flags update <flag-key>	Update a flag (partial body; project_id injected)	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-updated-at (string) — exact updated_at timestamp from the detail read; required for an update or deletion --file (string) — request body from a JSON file ("-" for stdin)

fleet

Command	What it does	Command-specific flags
anectico fleet list	List agents with 24-hour run health, review signals, and containment	--cursor (string) — opaque next_cursor from the previous page --limit (int; default: 0) — maximum agents (server cap 200)

friction

Command	What it does	Command-specific flags
anectico friction list	Read bounded click observations; pass explicit time windows in --body	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)

incidents

Command	What it does	Command-specific flags
anectico incidents acknowledge <incident-id>	Acknowledge an incident Aliases: ack.	--expected-version (uint64; default: 0) — incident version returned by incidents view (required) --idempotency-key (string) — stable retry key for this exact transition (required)
anectico incidents assign <incident-id>	Preview and confirm assigning or clearing the responder	--clear (bool; default: false) — explicitly clear the responder; mutually exclusive with --to --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — exact decimal version from incidents view (required) --idempotency-key (string) — optional stable retry key for the gateway's bounded receipt cache; keep identical arguments --to (string) — current organization member UUID; mutually exclusive with --clear
anectico incidents checklist <incident-id> <step-id>	Mark one snapshotted runbook step done or not done	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --done (bool; default: false) — mark the step done --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (int64; default: 0) — current incident_version from incidents ownership (required) --undone (bool; default: false) — mark the step not done
anectico incidents comment <incident-id> <text>	Add a comment to the incident timeline	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (uint64; default: 0) — incident version returned by incidents view (required) --idempotency-key (string) — stable retry key for this exact comment (required)
anectico incidents create <title>	Declare an incident	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --description (string) — incident description --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --link-ref (string) — primary signal reference id --link-type (string) — primary signal type: alert|error_group|anomaly --service-key (string) — response-catalog service key (from service-catalog list); snapshots its owner and runbook --severity (int; default: 0) — severity 1 (SEV1) to 4 (SEV4)
anectico incidents delete <incident-id>	Delete an incident	--yes (bool; default: false) — confirm this destructive operation (required)
anectico incidents evidence <incident-id>	Attach evidence (a note, link, log, trace, metric, replay, screenshot or document) to an incident	--body (string) — the evidence text --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key for this exact artifact (required) --kind (string; default: note) — evidence kind: note, url, log, trace, metric, replay, screenshot, document --title (string) — a short title (required) --url (string) — a link to the artifact
anectico incidents link <incident-id>	Link a signal (alert / error_group / anomaly) to an incident	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --ref (string) — signal reference id (required) --type (string) — alert|error_group|anomaly (required)
anectico incidents list	List incidents	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500) --status (string) — filter by status: open|acknowledged|resolved
anectico incidents ownership <incident-id>	Show an incident's response-catalog ownership snapshot and checklist progress	—
anectico incidents reopen <incident-id>	Reopen a resolved incident	--expected-version (uint64; default: 0) — incident version returned by incidents view (required) --idempotency-key (string) — stable retry key for this exact transition (required)
anectico incidents resolve <incident-id>	Resolve an incident	--expected-version (uint64; default: 0) — incident version returned by incidents view (required) --idempotency-key (string) — stable retry key for this exact transition (required)
anectico incidents retro action add <incident-id>	Add an action item to an incident's retrospective	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --due (string) — RFC3339 due date --idempotency-key (string) — retrying with the same key and flags returns the first item instead of adding a second --owner (string) — a current org member's user id --ticket-url (string) — an http(s) reference to an EXISTING ticket; never posted to --title (string) — the action item's title (required)
anectico incidents retro action delete <incident-id> <action-id>	Delete a retrospective action item. This cannot be undone.	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico incidents retro action done <incident-id> <action-id>	Mark a retrospective action item done	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico incidents retro action reopen <incident-id> <action-id>	Reopen a retrospective action item	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico incidents retro edit <incident-id>	Edit the retrospective document under compare-and-swap on --expected-revision	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --contributing-factors (string) — what contributed to it --expected-revision (int64; default: 0) — 0 to create the first revision; otherwise the revision from 'retro show' (required) --impact (string) — customer/business impact --status (string) — draft or published (default: keep the current status; draft for a new document) --summary (string) — what happened --timeline-ref (stringSlice; default: []) — ids of this incident's own timeline events, cited as evidence (at most 100); repeatable; replaces the current list --went-well (string) — what went well in the response --went-wrong (string) — what went wrong in the response
anectico incidents retro show <incident-id>	Show an incident's retrospective document and action items	—
anectico incidents slack create <incident-id>	Create a new Slack channel for an incident and pin a summary with responder buttons	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --connection-id (string) — Slack connection to create/post through (required; see: anectico connections list)
anectico incidents slack link <incident-id>	Link an existing Slack channel to an incident and pin a summary with responder buttons	--channel-id (string) — existing Slack channel id to link (required) --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --connection-id (string) — Slack connection the channel belongs to (required)
anectico incidents slack show <incident-id>	Show an incident's linked Slack channel	—
anectico incidents unlink <incident-id> <link-id>	Remove a linked signal	--yes (bool; default: false) — confirm this destructive operation (required)
anectico incidents update <incident-id>	Edit an incident (body: expected_version, title, description, severity)	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)
anectico incidents value-impact <id>	Read current declared value over one incident-linked issue union	--account-type (string) — one exact account type --currency (string) — exact three-uppercase-letter currency bucket; paired with period and period-count --env (string) — exact environment occurrence selector --limit (uint32; default: 20) — output limit, 1 through 100; totals are computed before limiting --mechanism (string) — exact mechanism occurrence selector --order (string) — account_key, value or importance,value; triage requires value or importance,value --period (string) — exact nominal day, week, month or year; no conversion --period-count (uint32; default: 0) — exact nominal period count, 1 through 12 --platform (string) — exact platform occurrence selector --query (string) — occurrence substring --release (string) — exact release occurrence selector --renewal-since (string) — inclusive civil renewal date YYYY-MM-DD; paired with renewal-until --renewal-until (string) — exclusive civil renewal date YYYY-MM-DD --service (string) — exact service occurrence selector --since (string) — inclusive absolute RFC3339Nano start; no relative windows --until (string) — exclusive absolute RFC3339Nano end; maximum 90 days
anectico incidents view <incident-id>	Show an incident's case file (links + timeline)	—
anectico incidents watch <incident-id>	Stream an incident timeline with verified resume and bounded reconnects	--cursor (string) — opaque cursor from a prior incident watch record --include-existing (bool; default: false) — emit existing timeline history before following new events --interval (duration; default: 2s) — successful poll interval (100ms to 1m) --max-events (int; default: 0) — stop after this many timeline events (0 keeps watching until another bound) --max-polls (int; default: 100000) — maximum API attempts (1 to 100000) --max-transient-errors (int; default: 100) — consecutive transient failures to retry (0 to 100) --timeout (duration; default: 1h0m0s) — maximum observation window (1s to 24h)

incoming-alerts

Command	What it does	Command-specific flags
anectico incoming-alerts create	Add an incoming-alert source (generic_json or alertmanager)	--confirm-token (string) — server preview token; repeat identical arguments to apply --fallback (string) — fallback service key when an event names no service or an unknown one --idempotency-key (string) — stable required creation key; reuse for an identical retry --name (string) — display name (required) --project (string) — project id (defaults to the active project) --provider (string) — generic_json or alertmanager (required) --service-label (string) — alertmanager only: the label naming the service key (default "service")
anectico incoming-alerts deliveries <source-id>	List a source's last 100 delivery outcomes, newest first (no payload is kept)	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico incoming-alerts get <source-id>	Show one incoming-alert source (never the secret)	—
anectico incoming-alerts list	List incoming-alert sources	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500) --project (string) — project id (defaults to the active project)
anectico incoming-alerts revoke <source-id>	Revoke a source; every later delivery is refused as unauthenticated	--confirm-token (string) — server preview token; repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico incoming-alerts rotate-secret <source-id>	Replace a source's signing secret; the old one stops verifying immediately	--confirm-token (string) — server preview token; repeat identical arguments to apply --expected-version (int64; default: 0) — required current source version --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico incoming-alerts update <source-id>	Update a source's display name, fallback service key or service label	--confirm-token (string) — server preview token; repeat identical arguments to apply --expected-version (int64; default: 0) — required current source version --fallback (string) — new fallback service key (empty clears it) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --name (string) — new display name --service-label (string) — alertmanager only: new service label

invitations

Command	What it does	Command-specific flags
anectico invitations create <email>	Preview and confirm an invitation and its email delivery	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --idempotency-key (string) — stable retry key; generated and echoed for a preview when omitted; repeat it unchanged when confirming --role (string; default: member) — role to grant: owner, admin, member, viewer or developer
anectico invitations list	Read one page of invitations	--cursor (string) — opaque next_cursor; keep all filters unchanged --invitation-id (string) — restrict to this exact invitation UUID --limit (int; default: 0) — page size, 1..1000; default 50 --status (string) — invitation status enum filter
anectico invitations revoke <invitation-id>	Preview and confirm revocation of a pending invitation	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token

issues

Command	What it does	Command-specific flags
anectico issues affected <issue-id>	The people and accounts an issue hit (blast radius)	--cursor (string) — opaque pagination cursor from response.pagination.next_cursor --include-business-inputs (bool; default: false) — enrich returned accounts only; requires one explicit project and both Groups read scopes --limit (int; default: 0) — maximum rows
anectico issues assign <issue-id> [user-id]	Assign an issue to a member (or --unassign)	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (uint64; default: 0) — issue version returned by issues view (required) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --unassign (bool; default: false) — clear the assignee
anectico issues commits-between <issue-id>	The commits between two versions of the connected repository that touched the code an issue fails in	--base (string) — the older commit id: 7 to 64 hexadecimal characters (required) --head (string) — the newer commit id: 7 to 64 hexadecimal characters (required) --repository (string) — owner/name; optional; must be the repository connected to the workspace
anectico issues compare-customers	Compare JSON group_id, success_event, start_time, end_time and optional dimensions/environment	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)
anectico issues delete <issue-id>	Permanently delete an issue's error occurrences in the current project	--yes (bool; default: false) — confirm this destructive operation (required)
anectico issues ignore <issue-id>	Ignore an issue	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (uint64; default: 0) — issue version returned by issues view (required) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico issues impact	Error impact on people over a window, optionally for one issue or service	--clock-tolerance (duration; default: 5s) — contact matching tolerance, 0s to 60s; 0s disables it --cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --include-business-inputs (bool; default: false) — enrich returned accounts only; requires one explicit project and both Groups read scopes --include-support-contacts (bool; default: false) — include selectively recorded technical contacts across all affected people (requires persons:read) --issue-id (string) — only this issue --limit (int; default: 0) — page size (server default 100, maximum 500) --service (string) — only this service --since (string; default: 24h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico issues lifecycle-history <issue-id>	An issue's status transitions: who resolved, ignored, reopened or assigned it, and when	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico issues list	List issues	--cursor (string) — opaque cursor returned by the previous page --env (string) — filter by deployment environment --limit (int; default: 30) — maximum rows --mechanism (string) — filter occurrences by their error.mechanism tag --platform (string) — filter occurrences by telemetry platform, such as browser or go -q, --query (string) — full-text search over error message, service, and class --release (string) — filter occurrences by release version --service (string) — filter by service name --since (string) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --sort (string) — order the page: last_seen (default) or attention — marked issues first, never fewer issues --status (string) — filter by status: new|ongoing|resolved|ignored|snoozed --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico issues list-by-value	Rank the complete eligible issue population by one exact declared bucket	--account-type (string) — one exact account type --currency (string) — exact three-uppercase-letter currency bucket; paired with period and period-count --env (string) — exact environment occurrence selector --limit (uint32; default: 20) — output limit, 1 through 100; totals are computed before limiting --mechanism (string) — exact mechanism occurrence selector --order (string) — account_key, value or importance,value; triage requires value or importance,value --period (string) — exact nominal day, week, month or year; no conversion --period-count (uint32; default: 0) — exact nominal period count, 1 through 12 --platform (string) — exact platform occurrence selector --query (string) — occurrence substring --release (string) — exact release occurrence selector --renewal-since (string) — inclusive civil renewal date YYYY-MM-DD; paired with renewal-until --renewal-until (string) — exclusive civil renewal date YYYY-MM-DD --service (string) — exact service occurrence selector --since (string) — inclusive absolute RFC3339Nano start; no relative windows --status (string) — new, ongoing, resolved, ignored, regressed or snoozed --until (string) — exclusive absolute RFC3339Nano end; maximum 90 days
anectico issues merge <canonical-issue-id>	Merge duplicate issues into a canonical one	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --source (stringSlice; default: []) — issue id to merge in (repeatable)
anectico issues merged-sources <canonical-issue-id>	The issues merged into a canonical one	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico issues occurrences <issue-id>	An issue's occurrence time series (pass an issue group id or representative occurrence id)	--interval (string) — bucket size --since (string; default: 24h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico issues recovery	Observe customer outcomes for explicit issue group IDs and time windows	--account-key (string) — activity account key; requires account-type --account-type (string) — activity account type; requires account-key --after (string) — end of baseline and start of outcome observation (RFC3339) --baseline-start (string) — start of affected-customer baseline (RFC3339) --environment (string) — exact deployment environment (empty includes all) --group-ids (stringSlice; default: []) — issue group IDs, including any merged source IDs --match-operation (bool; default: false) — require matching logical operation and account context --success-event (string) — event that explicitly marks this workflow as successful --until (string) — end of outcome observation (RFC3339, no later than now)
anectico issues releases <issue-id>	An issue's per-release context and breakdown	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico issues reopen <issue-id>	Reopen an issue	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (uint64; default: 0) — issue version returned by issues view (required) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico issues reproduction <issue-id>	Read one occurrence's reproduction evidence, with every gap stated	--occurrence (string) — exact occurrence id; default is latest by timestamp, then id --omit-flags (bool; default: false) — leave the observed flag exposures out (state cut) --omit-release (bool; default: false) — leave the release part out (state cut) --omit-replay (bool; default: false) — leave the session steps out (state cut) --omit-request (bool; default: false) — leave the request part out (state cut) --omit-trace (bool; default: false) — leave the trace part out (state cut)
anectico issues resolve <issue-id>	Mark an issue resolved	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (uint64; default: 0) — issue version returned by issues view (required) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --in-next-release (bool; default: false) — resolve in the next release (regression re-opens it)
anectico issues search	Search raw error events (occurrences, not groups)	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --env (string) — exact deployment environment --level (string) — filter by level --limit (int; default: 0) — page size (server default 100, maximum 500) -q, --query (string) — full-text query --service (string) — filter by service name --since (string; default: 24h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico issues snooze <issue-id>	Snooze (archive-until) an issue	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --escalating (bool; default: false) — wake when the issue escalates (spike) --expected-version (uint64; default: 0) — issue version returned by issues view (required) --for (string) — snooze for a duration (30m, 6h, 7d) --forever (bool; default: false) — snooze forever --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --occurrences (int; default: 0) — wake after N more events --users (int; default: 0) — wake after N more affected users
anectico issues unmerge <source-issue-id>	Restore a previously merged issue	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply
anectico issues value-impact <issue-id>	Read declared value affected with exact coverage and current snapshots	--account-type (string) — one exact account type --currency (string) — exact three-uppercase-letter currency bucket; paired with period and period-count --env (string) — exact environment occurrence selector --limit (uint32; default: 20) — output limit, 1 through 100; totals are computed before limiting --mechanism (string) — exact mechanism occurrence selector --order (string) — account_key, value or importance,value; triage requires value or importance,value --period (string) — exact nominal day, week, month or year; no conversion --period-count (uint32; default: 0) — exact nominal period count, 1 through 12 --platform (string) — exact platform occurrence selector --query (string) — occurrence substring --release (string) — exact release occurrence selector --renewal-since (string) — inclusive civil renewal date YYYY-MM-DD; paired with renewal-until --renewal-until (string) — exclusive civil renewal date YYYY-MM-DD --service (string) — exact service occurrence selector --since (string) — inclusive absolute RFC3339Nano start; no relative windows --until (string) — exclusive absolute RFC3339Nano end; maximum 90 days
anectico issues view <issue-id>	Show one issue's detail	—
anectico issues watches create	Save a watch (JSON: id UUID, title, criteria with a future observation_end)	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)
anectico issues watches declare-fix	Preview and confirm a release fix without changing issue status; JSON input required; erasure may redact its note	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin)
anectico issues watches delete <watch-id>	Delete a saved recovery watch	--yes (bool; default: false) — confirm this destructive operation (required)
anectico issues watches get <watch-id>	Read the current evidence for a saved baseline	—
anectico issues watches history <watch-id>	Read past counts, windows and release/time rules (90 days, at most 256 observations)	—
anectico issues watches list	List saved recovery watches	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --group-id (string) — restrict to one issue group --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico issues watches outcome <watch-id>	Measure recovery on the declared release or later; --record previews saving a counts-only observation	--confirm-token (string) — server preview token for --record; repeat identical arguments to apply --record (bool; default: false) — preview storing a counts-only evaluation; repeat with --confirm-token to record
anectico issues watches supersede <watch-id>	Preview and confirm a replacement fix; both declarations remain readable; JSON input required; erasure may redact notes	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin)
anectico issues watches withdraw <watch-id>	Preview and confirm withdrawing the assertion, preserving its declaration and history	--confirm-token (string) — server preview token; repeat identical arguments to apply

live

Command	What it does	Command-specific flags
anectico live grant list [screen-id]	Read one page of viewing links and their effective state	--cursor (string) — opaque next_cursor; keep all filters unchanged --grant-id (string) — restrict to this exact viewing-link UUID --limit (int; default: 0) — page size (default 50, maximum 1000)
anectico live grant pause <grant-id>	Preview and confirm: Stop every display on a link, keeping it resumable	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token
anectico live grant resume <grant-id>	Preview and confirm: Restart a paused link	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token
anectico live grant revoke <grant-id>	Preview and confirm permanent revocation of a display link	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token
anectico live grant rotate <grant-id>	Preview and confirm replacement of a display secret (shown once)	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --idempotency-key (string) — stable retry key; generated and echoed for a preview when omitted; repeat it unchanged when confirming
anectico live screen create	Create a live screen from exactly one template or full definition	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --definition-file (string) — path to the full live definition as JSON (use - for standard input) --idempotency-key (string) — stable retry key; generated and echoed for a preview when omitted; repeat it unchanged when confirming --name (string) — display name for the screen; required --template (string) — starter composition: combined, engineering or product; exactly one of template and definition is required
anectico live screen delete <screen-id>	Preview and confirm deletion and retirement of every display link	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --expected-version (string) — exact version the last read of this screen returned, as a decimal string (required)
anectico live screen get <screen-id>	Show one live screen and its panels	—
anectico live screen list	Read one page of the project's live screens	--cursor (string) — opaque next_cursor; keep all filters unchanged --limit (int; default: 0) — page size (default 50, maximum 1000)
anectico live screen preview <screen-id>	Preview and confirm measurement of the draft's display projection	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token
anectico live screen publish <screen-id>	Preview publication and confirm a display link (shown once)	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --expected-version (string) — exact version the last read of this screen returned, as a decimal string (required) --expires-in (string; default: 30d) — link lifetime, such as 7d or 12h, or none; default 30 days --grant-name (string) — operator-facing display link name --idempotency-key (string) — stable retry key; generated and echoed for a preview when omitted; repeat it unchanged when confirming --permission-ceiling (stringSlice; default: []) — complete narrowing permission ceiling; must retain every panel's required source scopes
anectico live screen update <screen-id>	Preview replacement of a live screen's name and full composition	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --definition-file (string) — required full replacement definition as JSON (use - for standard input) --expected-version (string) — exact version the last read of this screen returned, as a decimal string (required) --name (string) — required new display name
anectico live status <screen-id>	Read the complete draft and one page of viewing links	--cursor (string) — opaque next_cursor; keep all filters unchanged --limit (int; default: 0) — page size (default 50, maximum 1000)

llm

Command	What it does	Command-specific flags
anectico llm account-spend	Read account model spend, coverage and exact paid-period comparison	--account-key (string) — one exact account key; no trimming or case folding --account-type (string) — one exact account type --compare-paid-period (bool; default: false) — compare only matching declared USD paid bounds; not profit --limit (uint32; default: 20) — output limit, 1 through 100; totals are computed before limiting --since (string) — inclusive absolute RFC3339Nano start; no relative windows --until (string) — exclusive absolute RFC3339Nano end; maximum 90 days
anectico llm pricing delete <model>	Remove a model's pricing override	--confirm-token (string) — server preview token; repeat identical arguments to apply --yes (bool; default: false) — confirm this destructive operation (required)
anectico llm pricing list	List pricing overrides	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico llm pricing set <model>	Set a model's pricing (body: input_cost_per_token, output_cost_per_token, …)	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin)
anectico llm series	Bucketed LLM cost time series	--interval (string; default: 1h) — bucket size (1h, 6h, 1d) --since (string; default: 7d) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico llm spend-breakdown	Who is spending the model bill, and why	--group-by (string) — what the why is broken down by: agent, workflow, model, operation, entrypoint (default agent) --group-limit (int; default: 0) — groups for the window and for each person, 1 to 10 (default 5) --limit (int; default: 0) — people to rank, 1 to 20 (default 10) --since (string; default: 7d) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico llm summary	Org LLM cost summary (by model, by agent)	--since (string; default: 7d) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico llm top-persons	The people your LLM spend goes to	--limit (int; default: 0) — maximum rows --since (string; default: 7d) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)

login

Command	What it does	Command-specific flags
anectico login	Log in via your browser (device flow)	--no-browser (bool; default: false) — print the verification URL instead of opening a browser

logout

Command	What it does	Command-specific flags
anectico logout	Log out (clear the stored session for the profile)	—

logs

Command	What it does	Command-specific flags
anectico logs aggregate	Count logs grouped by a dimension	--group-by (string) — dimension to group by (required) --level (string) — restrict to this severity before grouping (warn means warning) --service (string) — restrict to this exact service before grouping --since (string) — time window (30m, 6h, 7d)
anectico logs context	Logs surrounding an exact anchor log	--after (int; default: 0) — records after the anchor --before (int; default: 0) — records before the anchor --log-id (string) — canonical 32-character uppercase log id (required)
anectico logs delete <canonical-log-id>	Delete one exact canonical log	--yes (bool; default: false) — confirm this destructive operation (required)
anectico logs fields	Filterable log fields and their values	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500) --since (string; default: 24h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico logs get <canonical-log-id>	Read one exact canonical log	—
anectico logs patterns	Detected log pattern clusters	--level (string) — filter by severity --limit (int; default: 0) — maximum clusters --min-count (int; default: 0) — minimum cluster size --service (string) — filter by service name --since (string; default: 24h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico logs query	Search logs	--cursor (string) — opaque pagination cursor from pagination.next_cursor --distinct-id (string) — filter to one person's distinct_id --env (string) — filter by deployment environment --filter (string) — typed filter expression, parsed by the server: conditions (=, !=, the four numeric orderings, contains, matches /re2/, exists(field)) combined with NOT, AND, OR and parentheses; see --help for the grammar. Example: 'service = api AND attributes.http.status_code = 500 AND NOT exists(attributes.retry)' --level (string) — filter by level (error, warn, info, …) --limit (int; default: 50) — maximum rows -q, --query (string) — full-text query --service (string) — filter by service name --since (string; default: 1h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --sort (string; default: timestamp_desc) — sort order: timestamp_desc|timestamp_asc --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico logs tail	Live-tail logs (SSE); Ctrl-C to stop	--distinct-id (string) — filter to one person's distinct_id --env (string) — filter by deployment environment --filter (string) — typed filter expression, parsed by the server: conditions (=, !=, the four numeric orderings, contains, matches /re2/, exists(field)) combined with NOT, AND, OR and parentheses; see --help for the grammar. Example: 'service = api AND attributes.http.status_code = 500 AND NOT exists(attributes.retry)' --level (string) — filter by level (error, warn, info, …) -q, --query (string) — full-text query --service (string) — filter by service name
anectico logs tail-read	Take one bounded, resumable sample of newly arrived logs	--distinct-id (string) — filter to one person's distinct_id --env (string) — filter by deployment environment --filter (string) — typed filter expression, parsed by the server: conditions (=, !=, the four numeric orderings, contains, matches /re2/, exists(field)) combined with NOT, AND, OR and parentheses; see --help for the grammar. Example: 'service = api AND attributes.http.status_code = 500 AND NOT exists(attributes.retry)' --level (string) — filter by level (error, warn, info, …) --limit (int) — most records to return, 1-100 (default 50 when omitted) -q, --query (string) — full-text query --resume-cursor (string) — opaque cursor from a previous tail-read, passed back unchanged --service (string) — filter by service name --since (string) — RFC 3339 arrival lower bound of a NEW subscription (ignored with --resume-cursor) --wait (int) — seconds the call may poll for arrivals, 0-30 (default 10 when omitted; 0 is one immediate poll)

mcp

Command	What it does	Command-specific flags
anectico mcp endpoint	Print the MCP Streamable HTTP endpoint without credentials	—
anectico mcp verify	Verify the MCP server end to end without invoking a tool	—

members

Command	What it does	Command-specific flags
anectico members list	Read one page of organization members	--cursor (string) — opaque next_cursor; keep all filters unchanged --limit (int; default: 0) — page size, 1..1000; default 50 --role (string) — optional role filter: owner, admin, member, viewer or developer
anectico members remove <user-id>	Preview and confirm removal of a member	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token
anectico members set-role <user-id> <role>	Preview and confirm a member's role	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token

memory-items

Command	What it does	Command-specific flags
anectico memory-items label get memory-item-key	Show the trust label currently recorded for a memory item	—
anectico memory-items label set memory-item-key	Record a new label revision: trusted, suspect or quarantined (every revision is kept)	--confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries --label (string) — trusted, suspect or quarantined --reason (string) — why (required)
anectico memory-items labels	List trust label revisions, optionally for one item or by label	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --key (string) — only this memory item --label (stringSlice; default: []) — trusted, suspect or quarantined (repeatable) --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico memory-items propagation memory-item-key	Show where a memory item was observed flowing, with the label in force at each point	--limit (int; default: 0) — maximum flow points

metrics

Command	What it does	Command-specific flags
anectico metrics delete <metric-name>	Delete a metric's datapoints	--yes (bool; default: false) — confirm this destructive operation (required)
anectico metrics forecast <metric-name>	Forecast a metric (expected band + horizon)	--env (string) — deployment environment scope --horizon (string) — forecast horizon --interval (string) — bucket size --service (string) — filter by service name
anectico metrics histogram <metric-name>	A histogram metric's bucket counts per time step	--env (string) — only this deployment environment --filter (stringArray; default: []) — dimension filter key=value1,value2 (repeatable) --since (string; default: 1h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --step (string) — bucket size: 1s, 5s, 10s, 30s, 1m, 5m, 10m, 15m, 30m, 1h, 6h, 12h, 1d, 7d (default: 1h) --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico metrics labels <metric-name>	A metric's labels and their values	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500) --since (string; default: 24h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico metrics list	List metric names, sources and query commands	—
anectico metrics mcp-tools	Which MCP server tools are called most, and which fail most	--env (string) — keep one deployment environment --limit (int; default: 0) — tools in each list, 1 to 50 (default 10) --min-calls (int; default: 0) — the fewest calls a tool needs to be ranked by error rate (default 20) --service (string) — keep one MCP server, by its service name --since (string; default: 12h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico metrics query <metric-name>	Run a bucketed aggregation over a metric	--agg (string; default: avg) — aggregation: avg|sum|min|max|count|p50|p95|p99|stddev|variance --env (string) — filter by deployment environment --exemplar-limit (int; default: 0) — 1–100 exemplars with --include-exemplars (default 20) --filter (stringArray; default: []) — exact dimension KEY=VALUE (repeat values for OR; at most two keys, 50 values each) --group-by (stringSlice; default: []) — group by dimensions: service_name, environment, instance, job --include-exemplars (bool; default: false) — include scoped trace-linked selected measurements; requires one project --interval (string; default: 5m) — bucket size: 1s, 5s, 10s, 30s, 1m, 5m, 10m, 15m, 30m, 1h, 6h, 12h, 1d, 7d --service (string) — exact emitting service --since (string; default: 1h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound) --window (string) — positive relative window; cannot combine with explicit --since/--until
anectico metrics rules create	Create a log-derived metric rule	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico metrics rules delete <rule-id>	Delete a log-derived metric rule	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-revision (string) — exact current rule revision; required to fence deletion
anectico metrics rules get <rule-id>	Show one log-derived metric rule	—
anectico metrics rules list	List the active project's log-derived metric rules	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico metrics rules query <rule-id>	Read a log-derived metric's published series with its freshness	--filter (stringArray; default: []) — key=value1,value2 (repeatable, at most 4); keeps only matching series --group-by (stringSlice; default: []) — label keys to keep; other labels are summed away --step (string) — a whole multiple of the rule's bucket width, such as 5m or 1h (default: the bucket width) --window (string; default: 24h) — look-back window: positive duration such as 30m, 24h, 7d
anectico metrics rules revise <rule-id>	Append a new revision: an edited definition, or a rollback to an earlier one	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --description (string) — optional new description --expected-revision (string) — the rule's exact current_revision (required; 409 on a stale value) --file (string) — request body from a JSON file ("-" for stdin) --rollback-to (string) — an earlier revision number to restore, instead of --file/--body
anectico metrics rules revisions <rule-id>	List a rule's immutable revisions, newest first	—
anectico metrics rules validate	Dry-run validate a rule spec; saves no metric rule	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)
anectico metrics top <metric-name>	Rank the values of one attribute of a metric	--agg (string) — aggregate: sum, count, mean (default sum for a counter, count for a histogram) --env (string) — keep one deployment environment --filter (stringArray; default: []) — keep points whose attribute equals a value exactly, as key=value (repeatable; at most two keys) --group-by (string) — the ONE attribute whose values are ranked: an attribute key, or service_name or environment --limit (int; default: 0) — groups to return, 1 to 100 (default 10) --min-denominator (int; default: 0) — the smallest amount a group needs to be ranked by rate (default 20) --numerator (string) — a second metric counted over the same groups, for a rate --numerator-filter (stringArray; default: []) — an exact-match filter on the numerator metric, as key=value (repeatable) --rank-by (string) — order: value, numerator, rate (default value) --service (string) — keep one emitting service --since (string; default: 12h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)

anectico metrics query forwards --since and --until as the query time range, and --interval as its bucket step (default 5m). Both metric query commands use the exact supported steps.

monitors

Command	What it does	Command-specific flags
anectico monitors audit <monitor-id>	List a monitor's audit entries, newest first	--cursor (string) — next_page_token from the previous page, with the same filters --limit (int; default: 0) — page size (server default 50, maximum 200)
anectico monitors create	Create an external monitor (http, tls, domain or heartbeat) that pages through its own rule or its owning service	--assert-contains (stringArray; default: []) — response body must contain this text (repeatable, GET only) --assert-json (stringArray; default: []) — path=value: a dotted JSON path must equal this JSON scalar, e.g. status="ok" (repeatable, GET only) --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --cron (string) — heartbeat: five-field cron expression of the job's schedule (set this or --interval) --domain (string) — domain: registrable domain to check, e.g. example.com (required for --kind domain) --escalation-policy (string) — escalation policy id that pages for this monitor through its own rule (required unless --service) --expect (stringSlice; default: []) — accepted status or range, e.g. 200 or 200-299 (repeatable; default 200-299) --failure-rounds (int; default: 0) — consecutive failed rounds before an occurrence opens, 1-10 (default 2) --follow-redirects (bool; default: false) — follow up to 5 redirects --grace (int; default: 0) — heartbeat: seconds after the expected run a success may still arrive (default 300) --header (stringArray; default: []) — Name=connection-id: a request header whose value is a stored api_key/basic_auth connection (repeatable) --host (string) — tls: public DNS host whose certificate is verified (required for --kind tls) --idempotency-key (string) — stable retry key for this exact create --interval (int; default: 0) — round interval in seconds, at least 60 (default 60) --kind (string) — check kind: http (default), tls, domain or heartbeat --method (string) — GET or HEAD (default GET) --name (string) — monitor name, 1-128 characters (required) --paused (bool; default: false) — create without scheduling; resume once routing is set up --port (int; default: 0) — tls: port to connect to (default 443) --recovery-rounds (int; default: 0) — consecutive healthy rounds before it closes, 1-10 (default 2) --regions (stringSlice; default: []) — probe regions: at least one; a majority of the monitor's regions decides each round (repeatable or comma-separated; default every configured region) --service (string) — key of the response-catalog service that owns this monitor: it pages through that service instead of --escalation-policy --severity (string) — info, warning or critical (default critical); with --escalation-policy --timeout (int; default: 0) — request timeout in seconds, 1-10 (default 10) --timezone (string) — heartbeat: IANA time zone of --cron (default UTC) --url (string) — absolute http(s) URL on a public host --warning-days (int; default: 0) — tls/domain: fail within this many days of expiry (defaults: tls 21, domain 30)
anectico monitors delete <monitor-id>	Tombstone a monitor and delete its alert rule (history is kept)	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (string) — the monitor's current revision, from monitors get (required)
anectico monitors get <monitor-id>	Show one monitor	—
anectico monitors heartbeat pings <monitor-id>	List a heartbeat monitor's received pings, newest first	--limit (int; default: 0) — page size, 1-200 (default 50) --page-token (string) — opaque cursor from a previous page
anectico monitors heartbeat rotate <monitor-id>	Replace a heartbeat monitor's ping token (the old one stops working at once)	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — exact current updated_at timestamp; required to fence this write --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico monitors heartbeat snippet <monitor-id>	Print copy-paste ping snippets for a heartbeat monitor (templates only; never the stored token)	—
anectico monitors history <monitor-id>	List a monitor's scheduled and test jobs, newest first	--cursor (string) — next_page_token from the previous page, with the same filters --kind (string) — filter to scheduled or test (default: both) --limit (int; default: 0) — page size (server default 50, maximum 200)
anectico monitors list	List external monitors	--cursor (string) — next_page_token from the previous page, with the same filters --include-deleted (bool; default: false) — also return deleted (tombstoned) monitors --limit (int; default: 0) — page size (server default 50, maximum 200) --project (string) — project id (defaults to the active project)
anectico monitors maintenance create	Create a maintenance window (checks keep running; only opening a new alert is suppressed)	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --ends-at (string) — RFC3339 end: in the future, at most 14 days after starts_at (required) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --monitor (stringArray; default: []) — monitor id in scope (repeatable or comma-separated; required for --scope monitors) --name (string) — window name, 1-128 characters (required) --project (string) — project id (defaults to the active project) --scope (string; default: project) — project (every monitor, including ones created later) or monitors --starts-at (string) — RFC3339 start; may be in the past (active at once) (required) --timezone (string) — IANA time zone the window is planned in (default UTC; bounds are absolute instants)
anectico monitors maintenance end <window-id>	Cancel an upcoming window or end an active one now (a still-failing monitor then pages)	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (string) — the window's current revision, from monitors maintenance get (required)
anectico monitors maintenance get <window-id>	Show one maintenance window	—
anectico monitors maintenance list	List maintenance windows, latest start first	--cursor (string) — next_page_token from the previous page, with the same filters --limit (int; default: 0) — page size (server default 50, maximum 200) --project (string) — project id (defaults to the active project) --state (string) — filter to upcoming, active, completed or canceled
anectico monitors maintenance update <window-id>	Update a maintenance window (an active one accepts only --name and --ends-at)	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --ends-at (string) — RFC3339 end (any window may change this) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --monitor (stringArray; default: []) — monitor id in scope (repeatable or comma-separated; with --scope monitors) --name (string) — new name --revision (string) — the window's current revision, from monitors maintenance get (required) --scope (string) — project or monitors (upcoming windows only) --starts-at (string) — RFC3339 start (upcoming windows only) --timezone (string) — IANA time zone (upcoming windows only)
anectico monitors pause <monitor-id>	Pause a monitor	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (string) — the current configuration revision from monitors get (required)
anectico monitors rearm <monitor-id>	Re-arm paging after a responder resolved a still-failing monitor	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --gate-version (string) — the monitor's current response_gate.version, from monitors get (required) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico monitors regions	List the probe regions and each region's executor diagnostics	—
anectico monitors resume <monitor-id>	Resume a monitor (re-validates routing coverage)	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (string) — the current configuration revision from monitors get (required)
anectico monitors rounds <monitor-id>	List a monitor's rounds, newest first	--cursor (string) — next_page_token from the previous page, with the same filters --kind (string) — filter to scheduled or test (default: both) --limit (int; default: 0) — page size (server default 50, maximum 200)
anectico monitors test <monitor-id>	Admit one bounded, non-paging-by-default test round	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --page (bool; default: false) — let a failing result of this test round page (default: never pages) --revision (string) — current configuration revision from monitors get (required); use a stable --idempotency-key
anectico monitors update <monitor-id>	Update a monitor's name, configuration, routing and/or owning service	--assert-contains (stringArray; default: []) — response body must contain this text (repeatable, GET only) --assert-json (stringArray; default: []) — path=value: a dotted JSON path must equal this JSON scalar, e.g. status="ok" (repeatable, GET only) --clear-service (bool; default: false) — moves a service-owned monitor back to its own alert rule (with --escalation-policy) --config-file (string) — full JSON configuration for any check kind (http, tls, domain, heartbeat); replaces the configuration, exclusive with check flags --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --escalation-policy (string) — replaces the alert rule's escalation policy (needs --severity or keeps the current one) --expect (stringSlice; default: []) — accepted status or range, e.g. 200 or 200-299 (repeatable; default 200-299) --failure-rounds (int; default: 0) — consecutive failed rounds before an occurrence opens, 1-10 (default 2) --follow-redirects (bool; default: false) — follow up to 5 redirects --header (stringArray; default: []) — Name=connection-id: a request header whose value is a stored api_key/basic_auth connection (repeatable) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --interval (int; default: 0) — round interval in seconds, at least 60 (default 60) --method (string) — GET or HEAD (default GET) --name (string) — new name --recovery-rounds (int; default: 0) — consecutive healthy rounds before it closes, 1-10 (default 2) --regions (stringSlice; default: []) — probe regions: at least one; a majority of the monitor's regions decides each round (repeatable or comma-separated; default every configured region) --revision (string) — the monitor's current revision, from monitors get (required) --service (string) — moves the monitor to this response-catalog service (its own alert rule is deleted; an open failure moves with it) --severity (string) — replaces the alert rule's severity: info, warning or critical --timeout (int; default: 0) — request timeout in seconds, 1-10 (default 10) --url (string) — absolute http(s) URL on a public host

onboarding-setup

Command	What it does	Command-specific flags
anectico onboarding-setup get	Show the active project's setup draft (not found when it has none)	—
anectico onboarding-setup set	Save the active project's setup draft, replacing the saved one	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin)

oncall

Command	What it does	Command-specific flags
anectico oncall contact-methods add	Add a contact method	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --label (string) — display label --position (int32; default: 0) — non-negative contact order (lower is tried first; default 0) --type (string) — email|slack_dm|sms|phone (required) --value (string) — the address / number / handle (required)
anectico oncall contact-methods delete <method-id>	Delete a contact method	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — exact current updated_at timestamp; required to fence this write --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico oncall contact-methods list	List your contact methods	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico oncall contact-methods update <method-id>	Edit a contact method in place; flags you omit keep their stored values	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — current updated_at timestamp from the detail read (required) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --label (string) — display label ("" clears it) --position (int; default: 0) — contact order (lower is tried first) --type (string) — email|slack_dm|sms|phone --value (string) — the address / number / handle
anectico oncall now <schedule-id>	Who is on call right now (or --at a time)	--at (string) — evaluate at this RFC3339 time (default now)
anectico oncall overrides create <schedule-id>	Create an override	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --end (string) — override end, RFC3339 (required) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --start (string) — override start, RFC3339 (required) --user (string) — user id taking the shift (required)
anectico oncall overrides delete <override-id>	Delete an override	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — exact current updated_at timestamp; required to fence this write --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --schedule (string) — owning schedule id; required for the complete server preview
anectico oncall overrides list <schedule-id>	List a schedule's overrides	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico oncall schedules create	Create a schedule (body: name, layers[{name,users,rotation_length,start_at,…}])	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico oncall schedules delete <schedule-id>	Delete a schedule	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — exact current updated_at timestamp; required to fence this write --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico oncall schedules get <schedule-id>	Show one schedule	—
anectico oncall schedules list	List schedules	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico oncall schedules update <schedule-id>	Replace a schedule (full body)	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — current updated_at timestamp from the detail read (required) --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments

persons

Command	What it does	Command-specific flags
anectico persons correct-identity <distinct-id>	Preview alias separation and history; apply only with the reviewed revision	--apply (bool; default: false) — apply the reviewed separation (default previews only) --reason (string; default: incorrect_identify) — incorrect_identify, shared_device, or recycled_id --revision (string) — revision returned by the preview
anectico persons erase <person-id-or-distinct-id>	PERMANENTLY erase one person in the active project (profile, identity, product events and telemetry, every distinct id)	--allow-unlinked-identity (bool; default: false) — erase an identifier that is linked to no person, and fence it for good (check the spelling first) --confirm-token (string) — server token from the preview; repeat identical arguments to apply --operation-id (string) — UUID naming this erasure; generated and printed when omitted --reason (string) — why; stored on the erasure operation (required, at most 400 bytes) --yes (bool; default: false) — confirm this destructive operation (required)
anectico persons erase-errors <person-id-or-distinct-id>	Permanently erase one person's error occurrences in the current project (every identity of the person); issues themselves remain	--yes (bool; default: false) — confirm this destructive operation (required)
anectico persons erasure get <operation-id>	Show an erasure operation: its state and what each store reports	—
anectico persons erasures list	List the active project's erasure operations, newest first	--cursor (string) — opaque next_cursor from the previous page, passed unchanged --limit (int; default: 0) — page size (server default 50, maximum 200)
anectico persons export <person-id-or-distinct-id>	Request an export of everything held about one person in the active project	--confirm-token (string) — server token from the preview; repeat identical arguments to apply --export-id (string) — UUID naming this export; generated and printed when omitted
anectico persons exports download <export-id>	Save a complete export's archive to a new local file	--file (string) — new destination path (existing files and symlinks are never overwritten)
anectico persons exports download-url <export-id>	Get the API download URL of a complete export's archive	—
anectico persons exports get <export-id>	Show an export: its state and what its archive holds	—
anectico persons exports list	List the active project's exports of a person's data, newest first	--cursor (string) — opaque next_cursor from the previous page, passed unchanged --limit (int; default: 0) — page size (server default 50, maximum 200) --person-id (string) — only this person's exports (a person id)
anectico persons get <person-id-or-distinct-id>	Show one person's profile and cross-signal stats	—
anectico persons read <person-id>...	Read up to 200 people by id in one project, with optional display fields	--include-profiles (bool; default: false) — include allowed display fields; missing persons:profile:read is named in redactions
anectico persons recent	Rank customers by observed recent errors, traces and product events	--limit (int; default: 25) — most current customers to return, 1..100; default 25 --since (string) — RFC3339 inclusive start; provide with --until --until (string) — RFC3339 exclusive end; provide with --since (maximum seven days)
anectico persons search [query]	Find people by the identifier the application sent, or by a readable profile property	--cursor (string) — opaque next_cursor from the previous page; keep search and limit unchanged --limit (int; default: 25) — maximum persons on one page
anectico persons silent	List the known people who hit a failure and have no matching report, and what was seen of them afterwards	--clock-tolerance (duration; default: 5s) — a report may precede the first failure by this much, 0s to 60s (default 5s; 0s disables it) --completion-window (string) — journey completion window, whole seconds from 1s to 24h, e.g. 30m --from (string) — RFC3339 start of the window; without --to it runs until now --identified-only (bool; default: false) — filter the returned page only; population counts stay unchanged --include-profiles (bool; default: false) — attach allowed display fields to the page --journey-event (stringSlice; default: []) — ordered journey event names, 2 to 5 (repeatable) --journey-insight (string) — saved simple funnel insight id of this project --limit (int; default: 0) — people to return in each list, 1 to 100 (default 25) --min-errors (int; default: 0) — errors is a failure at this many error events (default 3) --min-friction (int; default: 0) — friction is a failure at this many rage, dead or error clicks (default 3) --min-poor-page-samples (int; default: 0) — slow_pages is a failure at this many poor samples (default 3) --min-slow-traces (int; default: 0) — slow_traces is a failure at this many slow traces (default 3) --poor-cls (float64; default: 0) — a CLS sample is poor at or above this value (default 0.25) --poor-inp-ms (int; default: 0) — an INP sample is poor at or above this many milliseconds (default 500) --poor-lcp-ms (int; default: 0) — an LCP sample is poor at or above this many milliseconds (default 4000) --report-source (stringSlice; default: []) — report source to check: problem_reports, survey_answers or support_complaints (repeatable; default all three) --return-gap-minutes (int; default: 0) — an observation counts as later activity this many minutes after the last failure, 1 to 1440 (default 30) --signal (stringSlice; default: []) — failure signal to measure: errors, slow_traces, friction or slow_pages (repeatable; default all) --since (string) — look-back ending now, such as 1h, 24h or 7d (default 24h) --slow-trace-ms (int; default: 0) — a trace is slow when its root span lasted at least this long (default 3000) --survey-report-rule (string; default: any_answer) — survey report rule: any_answer or low_score; low_score requires a threshold and stored numeric scale --survey-score-threshold (float64; default: 0) — inclusive raw rating threshold from 0 to 10, required with low_score; never parses text --to (string) — RFC3339 exclusive end of the window, no later than now
anectico persons stats <person-id-or-distinct-id>	A person's cross-signal counters	—
anectico persons struggling	Find the known people having a bad time in a window, ranked, with the evidence	--completion-window (string) — journey completion window, whole seconds from 1s to 24h, e.g. 30m --from (string) — RFC3339 start of the window; without --to it runs until now --identified-only (bool; default: false) — filter the returned page only; population counts stay unchanged --include-profiles (bool; default: false) — attach allowed display fields to the page --journey-event (stringSlice; default: []) — ordered journey event names, 2 to 5 (repeatable) --journey-insight (string) — saved simple funnel insight id of this project --limit (int; default: 0) — people to return, 1 to 100 (default 25) --min-errors (int; default: 0) — errors qualifies at this many error events (default 3) --min-friction (int; default: 0) — friction qualifies at this many rage, dead or error clicks (default 3) --min-poor-page-samples (int; default: 0) — slow_pages qualifies at this many poor samples (default 3) --min-population (int; default: 0) — with fewer known people active the answer is not a ranking (default 5) --min-slow-traces (int; default: 0) — slow_traces qualifies at this many slow traces (default 3) --poor-cls (float64; default: 0) — a CLS sample is poor at or above this value (default 0.25) --poor-inp-ms (int; default: 0) — an INP sample is poor at or above this many milliseconds (default 500) --poor-lcp-ms (int; default: 0) — an LCP sample is poor at or above this many milliseconds (default 4000) --signal (stringSlice; default: []) — signal to measure: errors, slow_traces, friction or slow_pages (repeatable; default all) --since (string) — look-back ending now, such as 1h, 24h or 7d (default 24h) --slow-trace-ms (int; default: 0) — a trace is slow when its root span lasted at least this long (default 3000) --to (string) — RFC3339 exclusive end of the window, no later than now
anectico persons timeline <person-id-or-distinct-id>	Show a person's cross-signal timeline (newest first)	--before (string) — paginate: entries before this opaque cursor; keep the same time window --count-total (bool; default: false) — optionally count the full retained window within a bounded budget --limit (int; default: 50) — maximum entries --out (string) — new PNG destination path; existing files are refused --render (string) — export a bounded PNG (png); ordinary output when omitted --since (string) — explicit RFC3339 window start; requires --until --until (string) — explicit RFC3339 window end; requires --since

Person erasures are PENDING until every required part finishes, COMPLETE when all have finished, and STALLED when required work is overdue or needs recovery. A stalled operation can still complete. Successful persons erasure get and persons erasures list reads exit 0 in every state; scripts must inspect state in JSON output. Human output explains overdue work:

Erasure has not finished everywhere after the expected time. The person's profile and identity are already removed. Keep the operation id and contact support to finish the erasure.

Retrying the same request with its operation id returns that operation and does not restart it.

problem-reports

Command	What it does	Command-specific flags
anectico problem-reports delete <report-id>	Delete report text; replay has separate deletion controls	--yes (bool; default: false) — confirm this destructive operation (required)
anectico problem-reports get <report-id>	Read one report and its correlation context	—
anectico problem-reports list	List reports from the last seven days	--cursor (string) — next_cursor from the prior page --distinct-id (string) — exact reported identity --group-id (string) — filter by reported issue
anectico problem-reports submit	Submit JSON with stable UUID id, description and distinct_id; reuse on retry	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)

projects

Command	What it does	Command-specific flags
anectico projects create <name>	Preview and confirm creation of a project	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --description (string) — project description --idempotency-key (string) — stable retry key; generated and echoed for a preview when omitted; repeat it unchanged when confirming --sampling-rate (float64; default: 1) — ingest sampling fraction in [0,1]; zero disables ingestion --slug (string) — immutable project slug; omitted derives one from the name
anectico projects current	Show the effective project scope	—
anectico projects delete <project-id>	Preview and confirm deletion of a project and its scoping	--confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token
anectico projects get <project-id>	Show one project	—
anectico projects list	Read one page of the organization's projects; follow next_cursor	--cursor (string) — opaque next_cursor; keep all filters unchanged --is-active (bool; default: true) — restrict to active or inactive projects; omit to include both --limit (int; default: 0) — page size, 1..1000; server default 50
anectico projects update <project-id>	Preview and confirm changes to a project	--active (bool; default: true) — activate or deactivate the project; omission preserves the current state --confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --description (string) — new description; an explicit empty value clears it --name (string) — new display name --sampling-rate (float64; default: 1) — ingest sampling fraction in [0,1]; zero disables ingestion
anectico projects use <project-id-or-slug>	Set the profile's default project scope	—

quarantines

Command	What it does	Command-specific flags
anectico quarantines approve <quarantine-id>	Approve and ENFORCE a pending request (you must not be its requester)	--confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries
anectico quarantines get <quarantine-id>	Show one containment with its enforcement and per-credential outcomes	—
anectico quarantines lift <quarantine-id>	Lift an active containment; check each credential's outcome afterwards	--confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries --reason (string) — why the containment is being lifted (required)
anectico quarantines list	List containment requests and orders	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500) --status (stringSlice; default: []) — pending, active, lifted or withdrawn (repeatable)
anectico quarantines reenforce <quarantine-id>	Re-apply an active containment's approved enforcement (authorizes nothing new)	--confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries
anectico quarantines request	Ask for a containment; it enforces nothing until a different person approves it	--action (string) — freeze_writes, revoke_credentials or kill --api-key (string) — one credential to contain, leaving the asset untouched --asset (string) — registry asset id to contain --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --env (string) — deployment environment of the target --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries --observation-key (string) — telemetry identity of an undeclared agent --reason (string) — why (shown to the approver) --request-id (string) — stable id for this ask; a retry with it returns the same request
anectico quarantines withdraw <quarantine-id>	Withdraw a pending request (somebody else's needs quarantine:approve)	--confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries --reason (string) — why the request is withdrawn (required)

receipt-chains

Command	What it does	Command-specific flags
anectico receipt-chains append	Append your own receipt of an agent action (--file or --body)	--body (string) — request body as inline JSON --confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --environment (string) — deployment environment of the action --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; keep it unchanged through preview, confirmation and retries
anectico receipt-chains checkpoint [chain-id]	Get a signed checkpoint of a chain's head to keep outside Anectico	--confirm-token (string) — exact server token from a preview of identical arguments; omission previews without writing --idempotency-key (string) — required durable attestation intent; the same key always returns the original checkpoint
anectico receipt-chains verify [chain-id]	Verify one action receipt chain's digests, links and sequence	--checkpoint-file (string) — signed checkpoint JSON retained outside Anectico, or checkpoint command response

recipes

Command	What it does	Command-specific flags
anectico recipes apply <recipe-id>...	Preview and merge instrumentation recipes into the project's tracking plan and starter insights through MCP	--catalog-version (string) — pin the catalog version this request was authored against; empty accepts the server's current version --confirm-token (string) — server confirmation token; omit to print the complete preview, then repeat identical arguments with this token --idempotency-key (string) — stable retry key; generated and echoed for a preview when omitted; repeat it unchanged when confirming
anectico recipes list	List the static server-owned instrumentation-recipe catalog	—
anectico recipes show <recipe-id>	Read one instrumentation recipe: its events, SDK snippets and starter insight definitions	—

releases

Command	What it does	Command-specific flags
anectico releases create <release>	Register a release/deploy (full replace: omitted fields are cleared)	--author (string) — deploy author; omitted clears it --commit (string) — commit SHA; omitted clears it --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --deploy-at (string) — deploy time, RFC3339; omitted clears it and the release orders by first-seen --ref (string) — branch or tag; omitted clears it --url (string) — link to the release/CI run; omitted clears it
anectico releases get [release]	Read release impact by name, or metadata by --id	--id (string) — catalog release UUID; project-owned metadata only; exclusive with release name
anectico releases impact	Compare release customer impact with explicit before/after windows in --body	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)
anectico releases list	List releases with error/regression counts	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)

reliability

Command	What it does	Command-specific flags
anectico reliability accounts get	Read completed observed server attempts with counts, samples and evidence	--account-key (string) — required exact account key, preserving whitespace --account-type (string) — required exact account type, preserving whitespace --env (string) — exact optional environment --evidence-limit (uint32; default: 5) — measuring requests, 0 to 5; explicit zero suppresses the leg --exclude-http-status (stringArray; default: []) — exclude one exact HTTP status, 400 through 599; repeat with distinct values, at most 200 --from (string) — RFC3339 inclusive start; requires --to --min-samples (uint64; default: 0) — raise the selected percentile's sample floor --operation (string) — exact optional operation --operations-limit (uint32; default: 10) — operation rows, 0 to 10; explicit zero suppresses the leg --percentile (string; default: p95) — p95 or p99 (minimum sample floors 100 and 1000) --service (string) — required exact service --since (string) — look-back ending at one normalization time, such as 1h or 7d; default 24h --to (string) — RFC3339 exclusive end; requires --from
anectico reliability accounts preview	Check a typed reliability request without scanning, charging or reserving execution	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)
anectico reliability accounts rank	Read completed observed server attempts with counts, samples and evidence	--account-type (string) — required exact account type, preserving whitespace --cursor (string) — live next_cursor with the same absolute selection --env (string) — exact optional environment --exclude-http-status (stringArray; default: []) — exclude one exact HTTP status, 400 through 599; repeat with distinct values, at most 200 --from (string) — RFC3339 inclusive start; requires --to --limit (uint32; default: 25) — page size, 1 to 100 --min-samples (uint64; default: 0) — raise the selected percentile's sample floor --operation (string) — exact optional operation --percentile (string; default: p95) — p95 or p99 (minimum sample floors 100 and 1000) --service (string) — required exact service --since (string) — look-back ending at one normalization time, such as 1h or 7d; default 24h --to (string) — RFC3339 exclusive end; requires --from
anectico reliability persons get <id>	Read completed observed server attempts with counts, samples and evidence	--env (string) — exact optional environment --evidence-limit (uint32; default: 5) — measuring requests, 0 to 5; explicit zero suppresses the leg --exclude-http-status (stringArray; default: []) — exclude one exact HTTP status, 400 through 599; repeat with distinct values, at most 200 --from (string) — RFC3339 inclusive start; requires --to --include-profiles (bool; default: false) — request separately authorized optional profiles --min-samples (uint64; default: 0) — raise the selected percentile's sample floor --operation (string) — exact optional operation --operations-limit (uint32; default: 10) — operation rows, 0 to 10; explicit zero suppresses the leg --percentile (string; default: p95) — p95 or p99 (minimum sample floors 100 and 1000) --service (string) — required exact service --since (string) — look-back ending at one normalization time, such as 1h or 7d; default 24h --to (string) — RFC3339 exclusive end; requires --from
anectico reliability persons preview	Check a typed reliability request without scanning, charging or reserving execution	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)
anectico reliability persons rank	Read completed observed server attempts with counts, samples and evidence	--cursor (string) — live next_cursor with the same absolute selection --env (string) — exact optional environment --exclude-http-status (stringArray; default: []) — exclude one exact HTTP status, 400 through 599; repeat with distinct values, at most 200 --from (string) — RFC3339 inclusive start; requires --to --include-profiles (bool; default: false) — request separately authorized optional profiles --limit (uint32; default: 25) — page size, 1 to 100 --min-samples (uint64; default: 0) — raise the selected percentile's sample floor --operation (string) — exact optional operation --percentile (string; default: p95) — p95 or p99 (minimum sample floors 100 and 1000) --service (string) — required exact service --since (string) — look-back ending at one normalization time, such as 1h or 7d; default 24h --to (string) — RFC3339 exclusive end; requires --from

replay

Command	What it does	Command-specific flags
anectico replay delete <session-id>	Delete a recording	--yes (bool; default: false) — confirm this destructive operation (required)
anectico replay for-trace <trace-id>	Find the session recording covering a trace	—
anectico replay get <session-id>	Show recording metadata, declared format and version	—
anectico replay highlights <session-id>	Read recorded replay moments with timestamps and evidence references	—
anectico replay list	List recordings	--limit (int; default: 200) — recordings to return, 1 to 500; a full result may omit matches --search (string) — case-insensitive session or distinct-id substring
anectico replay page-backdrops delete <backdrop-id>	Delete a page backdrop and its stored snapshot	--yes (bool; default: false) — confirm this destructive operation (required)
anectico replay page-backdrops get <backdrop-id>	Show one page backdrop; --out saves its snapshot document	--out (string) — new file to save the snapshot document to (never overwrites)
anectico replay page-backdrops list	List the project's page backdrops (metadata only)	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500) --page (string) — only this route template, such as /pricing --service (string) — only this service name
anectico replay related <session-id>	Errors and events that happened during the session	—
anectico replay snapshots <session-id>	Dump declared-format recording events (decoded JSON)	--problem-report-id (string) — Return only this report screenshot; has_gaps marks an incomplete bounded search
anectico replay steps <session-id>	Read a recording as ordered steps (page loads, clicks, field changes, form submits, gaps)	--cursor (string) — next_cursor of the previous page of the same recording, unchanged --limit (int; default: 0) — steps per page, 1 to 200 (default 100)

reports

Command	What it does	Command-specific flags
anectico reports availability	Duration-weighted availability and coverage over a fixed window	--csv (bool; default: false) — print the per-monitor table as CSV instead of the summary --from (string) — inclusive RFC3339 window start (required) --monitor (stringSlice; default: []) — specific monitor ids (at most 50); empty selects the project's first 50 live monitors; repeatable --to (string) — exclusive RFC3339 window end (required; at most 90 days after --from)
anectico reports create	Create a scheduled report from a definition	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable key of 1–128 bytes for this exact create; identical retries return the first result
anectico reports delete <subscription-id>	Delete a scheduled report and its run history	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-revision (string) — the subscription's current revision, as printed by reports get (required)
anectico reports get <subscription-id>	Get a scheduled report and its revision	—
anectico reports limits	Show the bounds scheduled reports enforce	—
anectico reports list	List the project's scheduled reports	—
anectico reports pause <subscription-id>	Pause a scheduled report at an exact revision	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-revision (string) — the subscription's current revision, as printed by reports get (required)
anectico reports response	MTTA/MTTR and per-episode drill-down over a fixed window	--csv (bool; default: false) — print the episode table as CSV instead of the summary --csv-summary (bool; default: false) — print the one-row MTTA/MTTR/counts summary as CSV --from (string) — inclusive RFC3339 window start (required) --service (stringSlice; default: []) — filter to these response-catalog service keys; repeatable --severity (stringSlice; default: []) — filter to these severities (1-4); repeatable --source (stringSlice; default: []) — filter to these sources (alert, error, anomaly, manual); repeatable --to (string) — exclusive RFC3339 window end (required; at most 366 days after --from)
anectico reports resume <subscription-id>	Resume a paused or needs-attention scheduled report	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-revision (string) — the subscription's current revision, as printed by reports get (required)
anectico reports run <subscription-id>	Queue one run of a scheduled report now	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-revision (string) — exact current revision from the detail read; required --idempotency-key (string) — stable key of 1–128 bytes for identical retries; required when creating a resource or queuing a report --preview (bool; default: false) — send this run only to you instead of the subscription's recipients
anectico reports runs <subscription-id>	List a scheduled report's runs and deliveries	--cursor (string) — opaque next_cursor returned by the previous page --limit (int; default: 0) — page size from 1 to 100 (default 20)
anectico reports unsubscribe <subscription-id>	Remove yourself from a scheduled report's recipients	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-revision (string) — exact current revision from the detail read; required
anectico reports update <subscription-id>	Replace a scheduled report's definition at an exact revision	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-revision (string) — the subscription's current revision, as printed by reports get (required) --file (string) — request body from a JSON file ("-" for stdin)

review-signals

Command	What it does	Command-specific flags
anectico review-signals list	List review signals: shadow, unowned or unreviewed assets, drift, poisoned memory, revoked authority used	--asset (string) — only this asset's signals --cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --kind (stringSlice; default: []) — signal kind (repeatable), e.g. shadow_asset --limit (int; default: 0) — page size (server default 100, maximum 500) --severity (stringSlice; default: []) — info, warning or critical (repeatable) --status (stringSlice; default: []) — open, acknowledged, resolved or dismissed (repeatable)

runbooks

Command	What it does	Command-specific flags
anectico runbooks create	Create a runbook (steps from --body or --file: [{"id","title","detail","links":[...]}])	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --key (string) — stable slug (1-64 of a-z, 0-9, -, _; required) --project (string) — project id (defaults to the active project) --title (string) — runbook title (required)
anectico runbooks delete <runbook-id>	Tombstone a runbook (refused while a live service names it as its default)	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (int64; default: 0) — the runbook's current revision, from runbooks get (required)
anectico runbooks get <runbook-id>	Show one runbook at its current revision, or an older one with --revision	--revision (string) — an older revision number (default: the current one)
anectico runbooks list	List the project's runbooks	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --include-deleted (bool; default: false) — also return deleted (tombstoned) runbooks --limit (int; default: 0) — page size (server default 100, maximum 500) --project (string) — project id (defaults to the active project)
anectico runbooks revise <runbook-id>	Write a new immutable revision (steps from --body or --file)	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (int64; default: 0) — the runbook's current revision, from runbooks get (required) --title (string) — new title (default: keep the current one)
anectico runbooks revisions <runbook-id>	Read a page of a runbook's revisions, newest first	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)

search

Command	What it does	Command-specific flags
anectico search correlate <trace-id>	Everything correlated with a trace (logs, errors, metrics)	--include (stringSlice; default: []) — signals to include: logs,errors,metrics (default all)
anectico search filters <field>	Distinct values of a filterable field	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico search unified <query>	Search traces, logs, and metrics with one query	--limit (int; default: 0) — maximum hits per signal --service (string) — filter by service name --since (string) — time window (30m, 6h, 7d) --types (stringSlice; default: []) — signal types: traces,logs,metrics (default all)

segments

Command	What it does	Command-specific flags
anectico segments create	Create a segment (body: name, group_type, filters[{field,op,value}])	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable key of 1–128 bytes for identical retries; required when creating a resource or queuing a report
anectico segments delete <segment-id>	Delete a segment	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-updated-at (string) — exact updated_at timestamp from the detail read; required for an update or deletion
anectico segments list	List account segments	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 50, maximum 500) --segment-id (string) — exact segment UUID for one complete definition
anectico segments preview <segment-id>	Preview the accounts a segment currently matches	—
anectico segments update <segment-id>	Update a segment	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-updated-at (string) — exact updated_at timestamp from the detail read; required for an update or deletion --file (string) — request body from a JSON file ("-" for stdin)

send

Command	What it does	Command-specific flags
anectico send event <event-name>	Send one test product event with a capture key (a pipeline check)	--distinct-id (string) — the person's distinct_id (required) --properties (string) — event properties as a JSON object --session-id (string) — optional session id

service-catalog

Command	What it does	Command-specific flags
anectico service-catalog create	Add a response service and bind its paging escalation rule	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --default-runbook (string) — default runbook id an incident for this service snapshots --description (string) — service description --escalation-policy (string) — escalation policy this service pages through (required) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --name (string) — service name (required) --on-call-schedule (string) — owning on-call schedule id --project (string) — project id (defaults to the active project) --service-key (string) — stable slug alerts name (1-64 of a-z, 0-9, -, _; required) --severity (string) — info, warning or critical (default critical)
anectico service-catalog delete <service-id>	Tombstone a response service and release its alert rule	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (int64; default: 0) — the service's current revision, from service-catalog get (required for a live service; omit to retry releasing a tombstone's alert rule)
anectico service-catalog get <service-id>	Show one response service	—
anectico service-catalog list	List the project's response services	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --include-deleted (bool; default: false) — also return deleted (tombstoned) services --limit (int; default: 0) — page size (server default 100, maximum 500) --project (string) — project id (defaults to the active project)
anectico service-catalog preview	Preview where an incoming alert naming --service-key would page right now	--fallback (string) — the fallback service key used when --service-key is empty or unknown --service-key (string) — the service key an incoming alert would name
anectico service-catalog update <service-id>	Update a response service (compare-and-swap on its revision)	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --default-runbook (string) — new default runbook id (empty clears it) --description (string) — new description --escalation-policy (string) — new escalation policy id (re-routes the bound alert rule) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --name (string) — new name --on-call-schedule (string) — new on-call schedule id (empty clears it) --revision (int64; default: 0) — the service's current revision, from service-catalog get (required) --severity (string) — new severity: info, warning or critical (re-routes the bound alert rule)

services

Command	What it does	Command-specific flags
anectico services list	Top list of service health, ordered over every measured service	--env (string) — deployment environment scope --health (string) — keep services in exactly this health state: healthy, degraded, down or unknown; chosen before --sort-by and --limit --limit (int; default: 0) — top-list size, 1 to 200 (default 50) --match (string) — keep services whose name contains this text (literal, case-insensitive, at most 256 bytes); chosen before --sort-by and --limit --out (string) — new PNG destination path; existing files are refused --render (string) — export a bounded PNG (png); ordinary output when omitted --since (string; default: 1h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --sort-by (string) — order: service, request_count, activity_rate, error_rate, p50_ms, p95_ms or health (default request_count) --sort-order (string) — asc or desc (default desc; asc for service) --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico services red <service-name>	One service's RED time series	--env (string) — deployment environment scope --interval (string) — bucket size (1m, 5m, 1h) --out (string) — new PNG destination path; existing files are refused --render (string) — export a bounded PNG (png); ordinary output when omitted --since (string; default: 1h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)

session-replays

Command	What it does	Command-specific flags
anectico session-replays get [replay-id]	Show one replay's status, counts and per-turn comparison by id or by --request-id	--request-id (string) — the request_id you sent

settings

Command	What it does	Command-specific flags
anectico settings github get	Show the GitHub config	—
anectico settings github set	Preview and confirm replacement of the GitHub config	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --enabled (bool; default: true) — enable suspect-commit blame --repo (string) — repository "owner/name" (required) --repo-root (string) — monorepo subpath the service lives under

skill

Command	What it does	Command-specific flags
anectico skill install <claude|codex|cursor|gemini|muse>	Install the ready skills where the agent host reads them	--dir (string) — work in this skills directory instead of the host's default, for a host configured to read skills from elsewhere --force (bool; default: false) — overwrite a skill that was edited after install or was not installed by this CLI; the edits are lost --project (bool; default: false) — work in this repository's skills directory (shared through version control) instead of your home directory
anectico skill list	List the skills of the pack: readiness, the credential each needs and its exact scopes	--markdown (bool; default: false) — render the table as markdown
anectico skill remove <claude|codex|cursor|gemini|muse>	Remove the skills this CLI installed, and nothing else	--dir (string) — work in this skills directory instead of the host's default, for a host configured to read skills from elsewhere --force (bool; default: false) — also remove skills that were edited after install --project (bool; default: false) — work in this repository's skills directory (shared through version control) instead of your home directory --yes (bool; default: false) — confirm this destructive operation (required)
anectico skill show [skill-id]	Print one skill exactly as it is installed (default: anectico-cli)	—
anectico skill status <claude|codex|cursor|gemini|muse>	Compare the installed skills with the pack in this CLI	--dir (string) — work in this skills directory instead of the host's default, for a host configured to read skills from elsewhere --project (bool; default: false) — work in this repository's skills directory (shared through version control) instead of your home directory
anectico skill upgrade <claude|codex|cursor|gemini|muse>	Replace outdated skills with the pack in this CLI	--dir (string) — work in this skills directory instead of the host's default, for a host configured to read skills from elsewhere --force (bool; default: false) — overwrite a skill that was edited after install; the edits are lost --project (bool; default: false) — work in this repository's skills directory (shared through version control) instead of your home directory

slo

Command	What it does	Command-specific flags
anectico slo account-burn <rule-id>	Read an exact account objective's actual policy and burn	--as-of (string) — optional RFC3339 instant; omit to anchor once on the server
anectico slo burn <rule-id>	Show an SLO rule's error-budget burn rate	--compliance-window (string) — the objective's period, as a relative range such as 30d. Defaults to the rule's own --factor (float64; default: 0) — burn multiple both windows must exceed to fire. Defaults to the rule's own --target (float64; default: 0) — objective ratio between 0 and 1, such as 0.99 for a 99 percent objective. Defaults to the rule's own --window (stringSlice; default: []) — window to report, as a relative range such as 6h or 30m; repeatable. Defaults to the rule's own long and short windows

sources

Command	What it does	Command-specific flags
anectico sources collection-health <source-id>	Whether a native_ingest source's collector is delivering (state, signals, collector queue, pipeline and credentials)	--window-minutes (int; default: 0) — window size in minutes, 1..1440 (0 = server default of 15)
anectico sources create	Create an ingestion source	--confirm-token (string) — server preview token; repeat identical arguments to apply --description (string) — optional description --idempotency-key (string) — stable creation retry key (required) --name (string) — display name (required) --purpose (string) — source purpose: browser_capture, mobile_capture, server_capture, native_ingest (required)
anectico sources get <source-id>	Show one ingestion source	—
anectico sources list	List the active project's ingestion sources	--include-revoked (bool; default: false) — include revoked sources --limit (int; default: 0) — page size, 1..200 (0 = server default) --page-token (string) — next_page_token from the preceding page
anectico sources operations get <source-id> <operation-id>	Show one source operation	—
anectico sources operations list <source-id>	List a source's operations	--limit (int; default: 0) — page size (0 = server default) --page-token (string) — next_page_token from the preceding page
anectico sources pipeline activate <source-id> <revision>	Activate, roll back, or (revision 0) remove a source's pipeline	--confirm-token (string) — server preview token; repeat identical arguments to apply --expected-epoch (string) — the exact current catalog_epoch (required; 409 on a stale value) --wait (bool; default: false) — block until the operation leaves DRAINING, then print it
anectico sources pipeline create <source-id>	Create an immutable pipeline revision from a program document	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin)
anectico sources pipeline diagnostics <source-id>	Intake accounting for a source's pipeline: accepted/transformed/dropped/refused counts and freshness	--window-hours (int; default: 0) — window size in hours, 1..168 (0 = server default of 24)
anectico sources pipeline get <source-id> <revision>	Show one pipeline revision	—
anectico sources pipeline list <source-id>	List a source's pipeline revisions	--limit (int; default: 0) — page size, 1..100 (0 = server default) --page-token (string) — next_page_token from the preceding page
anectico sources pipeline preview <source-id> [<revision>]	Dry-run a stored revision or an unsaved program against sample events; samples are never stored or logged	--program-file (string) — an unsaved program document to preview instead of a stored revision --sample (stringArray; default: []) — one sample event JSON object (repeatable, 1 to 10, 16 KiB encoded at most each) --samples-file (string) — a JSON file holding an array of sample event objects (alternative to --sample)
anectico sources pipeline validate <source-id>	Dry-run validate a pipeline program; saves no program	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)
anectico sources revoke <source-id>	Preview and confirm source revocation	--confirm-token (string) — server preview token; repeat identical arguments to apply --idempotency-key (string) — stable revocation key (required) --yes (bool; default: false) — confirm this destructive operation (required)
anectico sources update <source-id>	Rename or redescribe a source (compare-and-swap on --expected-revision)	--confirm-token (string) — server preview token; repeat identical arguments to apply --description (string) — full replacement description --expected-revision (string) — the exact current revision (required; 409 on a stale value) --name (string) — full replacement name (required)

status-pages

Command	What it does	Command-specific flags
anectico status-pages component delete <page-id> <component-key>	Remove a component not referenced by any public incident or maintenance	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (string) — the page's current draft revision, from status-pages get (required)
anectico status-pages component put <page-id> <component-key>	Create or replace a component	--association-id (string) — the service or monitor id (required with --association-kind service|monitor) --association-kind (string) — none (default), service or monitor --auto-update (bool; default: false) — let the monitor's health drive this component's public status (monitor association only) --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --group (string) — optional heading this component is listed under --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --name (string) — component name (required) --position (int; default: 0) — sort position (ascending; ties by key) --revision (string) — the page's current draft revision, from status-pages get (required) --status (string) — operational (default), degraded, partial_outage, major_outage or maintenance
anectico status-pages component status <page-id> <component-key>	Preview a component's manual status change	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (string) — current page draft revision from status-pages get (required) --status (string) — operational, degraded, partial_outage, major_outage or maintenance (required)
anectico status-pages create	Create a draft status page	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --description (string) — page description --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --project (string) — project id (defaults to the active project) --slug (string) — the page's permanent public address (required) --title (string) — page title (required)
anectico status-pages delete <page-id>	Tombstone a status page, queuing its removal from the public renderer if it is public	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (string) — the page's current draft revision, from status-pages get (required)
anectico status-pages domain claim <page-id>	Claim a customer subdomain for the page (CNAME to the platform's target)	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --hostname (string) — the subdomain to claim, e.g. status.example.com (required) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico status-pages domain get <page-id>	Show a status page's custom domain, its DNS instructions and readiness	—
anectico status-pages domain remove <page-id>	Stop serving the page on its custom domain and release the hostname	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — current updated_at timestamp from the detail read (required) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico status-pages domain verify <page-id>	Ask for an immediate re-check of the page's custom domain	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --expected-version (string) — current updated_at timestamp from the detail read (required) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico status-pages get <page-id>	Show one status page's draft and publication state	—
anectico status-pages incident create <page-id>	Open a public incident with its first public update	--affected-components (stringSlice; default: []) — component keys from status-pages get (repeatable or comma-separated) --body (string) — the first public update's text (required) --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --impact (string) — none, minor, major or critical (required) --internal-incident-id (string) — optionally link an internal incident; never published --revision (string) — the page's current draft revision, from status-pages get (required) --status (string) — investigating, identified, monitoring or resolved (required) --title (string) — public incident title (required)
anectico status-pages incident delete <page-id> <incident-id>	Remove a public incident from the draft	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (string) — the page's current draft revision, from status-pages get (required)
anectico status-pages incident update <page-id> <incident-id>	Edit a public incident and/or post a new public update (resolved resolves it)	--affected-components (stringSlice; default: []) — replace the affected component keys (repeatable or comma-separated; pass empty to clear) --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --impact (string) — new impact; empty keeps it --revision (string) — the page's current draft revision, from status-pages get (required) --title (string) — new title; empty keeps it --update-body (string) — the public update's text (required with --update-status) --update-status (string) — post a public update with this status (resolved resolves the incident)
anectico status-pages list	List status pages	--include-deleted (bool; default: false) — also return deleted (tombstoned) pages --page-size (int; default: 0) — results per page, 1-200 (default 50) --page-token (string) — opaque token from a previous list's next page --project (string) — project id (defaults to the active project)
anectico status-pages maintenance delete <page-id> <maintenance-id>	Remove a scheduled maintenance from the draft	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (string) — the page's current draft revision, from status-pages get (required)
anectico status-pages maintenance put <page-id>	Create (omit --id) or replace a scheduled maintenance	--body (string) — public maintenance text --components (stringSlice; default: []) — affected component keys (repeatable or comma-separated) --confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --ends-at (string) — RFC 3339 end time, strictly after starts-at (required) --id (string) — the maintenance id to replace; omit to create --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (string) — the page's current draft revision, from status-pages get (required) --starts-at (string) — RFC 3339 start time (required) --title (string) — maintenance title (required)
anectico status-pages preview <page-id>	Show exactly the public document a publish would write, without publishing anything	—
anectico status-pages publications <page-id>	List a status page's publications, newest first	--page-size (int; default: 0) — results per page, 1-200 (default 50) --page-token (string) — opaque token from a previous list's next page
anectico status-pages publish <page-id>	Publish the draft at its current revision: queues a sanitized snapshot for the public renderer	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (string) — the page's current draft revision, from status-pages get (required)
anectico status-pages subscribers list <page-id>	List a page's email subscribers (masked addresses, counts by state)	--page-size (int; default: 0) — results per page, 1-200 (default 50) --page-token (string) — opaque token from a previous list's next page --state (string) — narrow to pending, confirmed or unsubscribed --subscription (string) — exact subscription ID; counts remain page-wide
anectico status-pages subscribers remove <page-id> <subscription-id>	Erase one subscriber: its address, consent and queued sends	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments
anectico status-pages unpublish <page-id>	Take a status page off the public renderer (a later publish makes it public again)	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (string) — the page's current draft revision, from status-pages get (required)
anectico status-pages update <page-id>	Update a status page's draft title and/or description	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --description (string) — new description (omit to keep; pass empty to clear) --idempotency-key (string) — stable retry key; required on creates, reuse with identical arguments --revision (string) — the page's current draft revision, from status-pages get (required) --title (string) — new title (omit to keep the current title)

support

Command	What it does	Command-specific flags
anectico support complaints get <id>	Recover a retained contact or minimal withdrawn outcome	—
anectico support complaints list	Read revision-validated retained contacts; external coverage is incomplete	--cursor (string) — issued next_cursor; preserve window and filters --distinct-id (stringArray; default: []) — exact application alias; repeat at most 512 times --from (string) — inclusive absolute contact time --limit (uint32; default: 500) — page size, 1 to 500 --to (string) — exclusive absolute contact time; at most 30 days
anectico support complaints record	Preview every contact field, then confirm using the server token	--confirm-token (string) — server preview token; omission previews only --file (string) — typed contact JSON file, or - for stdin; no ticket documents --id (string) — required stable caller-generated fact UUID; reuse on recovery
anectico support complaints withdraw <id>	Preview and confirm clearing personal fields; retain minimal recovery until original expiry	--confirm-token (string) — server preview token; omission previews only --expected-version (string) — positive owner version; retain original on recovery
anectico support story	Read independent bounded support evidence for one exact requester	--complaint-id (string) — native complaint UUID; requires errors:read and persons:read --cursor (string) — issued cursor; requires section and unchanged absolute definition --distinct-id (string) — exact application alias; preserve bytes and spaces --email (string) — email used verbatim as an existing application alias --file (string) — optional closed story-selection JSON file or - for stdin; conflicts refuse --from (string) — inclusive absolute RFC3339Nano start; paired with --to --limit (uint32; default: 20) — page size 1 to 50; preserve on continuation --person-id (string) — canonical person UUID; exclusive with other selectors --section (string) — continuation section: errors, requests, recordings or complaints --since (string) — positive lookback, at most 168h; default 24h --slow-ms (uint32; default: 0) — zero or omitted resolves to 3000; otherwise positive milliseconds --to (string) — exclusive absolute RFC3339Nano end; paired with --from

surveys

Command	What it does	Command-specific flags
anectico surveys create	Create a survey draft (body: a SurveyDefinition)	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable key of 1–128 bytes for identical retries; required when creating a resource or queuing a report
anectico surveys delete <survey-id>	Delete a draft or a stopped survey, with its receipts	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-revision (string) — exact current revision from the detail read; required
anectico surveys delivery-evidence <survey-id>	Read one visitor's retained offer, explicit display, outcome and separate event evidence	--end (string) — exclusive RFC3339 receipt time, at most one hour after --start (required) --outcome-id (string) — optional expected caller response or dismissal ID; separate from the response event group --person (string) — application's declared distinct_id, resolved by exact alias ownership (required) --revision (string) — exact positive launched revision as a decimal string (required) --shown-id (string) — optional expected caller display ID; 1-128 printable ASCII characters without spaces --start (string) — inclusive RFC3339 owner receipt time (required)
anectico surveys duplicate <survey-id>	Copy a survey into a new draft	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-revision (string) — exact current revision from the detail read; required --idempotency-key (string) — stable key of 1–128 bytes for identical retries; required when creating a resource or queuing a report --name (string) — name of the copy (default: the original's name with " (copy)")
anectico surveys get <survey-id>	Show one survey: its questions, targeting, state and accepted-response count	—
anectico surveys launch <survey-id>	Launch a draft at --expected-revision: it becomes active and its questions freeze	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-revision (string) — the draft's exact current revision; refused if it moved (required)
anectico surveys limits	Show the bounds every survey is held to and the refusal codes	—
anectico surveys list	List the active project's surveys, newest first	--cursor (string) — next_cursor from the previous page, to continue listing --limit (int; default: 0) — maximum results, 1-200 (server default 50) --state (string) — filter: draft, active or stopped
anectico surveys stop <survey-id>	Stop an active survey (permanent)	--confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-revision (string) — exact current revision from the detail read; required --reason (string) — optional, at most 1024 characters
anectico surveys update <survey-id>	Replace a draft's whole definition at its current revision (body: a SurveyDefinition)	--body (string) — request body as inline JSON --confirm-token (string) — server token from a preview; repeat identical arguments with this token to apply --expected-revision (string) — the draft's exact current revision (required; 409 on a stale value) --file (string) — request body from a JSON file ("-" for stdin)

symbols

Command	What it does	Command-specific flags
anectico symbols upload-dsym <App.dSYM or DWARF path>	Upload an iOS dSYM bundle or DWARF binary	—
anectico symbols upload-proguard <mapping.txt>	Upload an Android ProGuard/R8 mapping	--dist (string) — optional distribution qualifier --release (string) — release the mapping belongs to (required)
anectico symbols upload-sourcemap	Upload one JS source map (body: release, dist, filename = served bundle path, content)	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin)

tickets

Command	What it does	Command-specific flags
anectico tickets create <issue-id>	Create a provider ticket from an issue	--confirm-token (string) — server preview token; omit to preview, repeat identical arguments to apply --idempotency-key (string) — stable key required for safe retries of this exact create --issue-url (string) — trusted absolute Anectico issue URL (required) --provider (string) — jira|linear|github (required) --repo (string) — GitHub repository "owner/name" (GitHub only) --title (string) — ticket title (defaults to the Anectico issue id)
anectico tickets get <ticket-id>	Show one ticket link and its current synchronization state	—
anectico tickets list <issue-id>	List an issue's linked tickets	--cursor (string) — opaque next_cursor from the previous page, passed unchanged with the same filters --limit (int; default: 0) — page size (server default 100, maximum 500)
anectico tickets unlink <ticket-id>	Unlink a ticket (the provider ticket itself is kept)	--yes (bool; default: false) — confirm this destructive operation (required)

traces

Command	What it does	Command-specific flags
anectico traces aggregate	Per-service and per-operation span statistics over a window	--env (string) — only this deployment environment --since (string; default: 24h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico traces critical-path <trace-id>	The trace's latency-critical span path	—
anectico traces delete <trace-id>	Delete a trace's spans	--yes (bool; default: false) — confirm this destructive operation (required)
anectico traces get <trace-id>	Show a trace's spans	—
anectico traces search	Search traces	--attribute (stringArray; default: []) — exact span-attribute match as KEY=VALUE (repeatable; every pair must match, each on any span of the trace) --cursor (string) — opaque pagination cursor from pagination.next_cursor --distinct-id (string) — raw identifier lens: traces touching exactly this distinct ID --env (string) — filter by deployment environment --limit (int; default: 30) — maximum rows --operation (string) — filter by operation name --person (string) — canonical person UUID: search its complete current identity in one project (also needs persons:read) --service (string) — filter by service name --since (string; default: 1h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --sort-by (string; default: start_time) — sort field: start_time|duration|span_count|service_count|error_count --sort-order (string; default: desc) — sort order: asc|desc --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico traces service-map	Service dependency topology built from traces	--since (string; default: 1h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp --until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)

usage

Command	What it does	Command-specific flags
anectico usage	Show usage meters, threshold events, admission rules and retention	--period (string) — billing period YYYY-MM (default: current month)
anectico usage agents	Read authoritative approval-slot capacity and monthly admitted automated work	--period (string) — UTC month YYYY-MM, no later than current (default: current month)
anectico usage families	Show measured product and technical usage with the current family policy	--period (string) — UTC billing month YYYY-MM (default: current month)
anectico usage intake	Read intake dispositions and receipt-time visibility checkpoints	--end-time (string) — exclusive server-received RFC3339 end --source-id (string) — optional trusted source UUID --start-time (string) — inclusive server-received RFC3339 start
anectico usage policy get	Show current choices, granted ceilings and exact policy revisions	—
anectico usage policy update	Preview and confirm a complete family-policy choice through MCP	--confirm-token (string) — token returned by the preview; omission previews without applying --expected-entitlement-revision (string) — required exact granted entitlement revision as a positive decimal string --expected-revision (string) — required exact current policy revision as a decimal string --idempotency-key (string) — required stable retry key, 1..128 UTF-8 bytes; reuse only for the identical request --product-allocation (string) — required nonnegative decimal allocation; both allocations must sum to the existing pool --product-retention-days (int32; default: 0) — required product retention: 7..365, within the granted ceiling --technical-allocation (string) — required nonnegative decimal allocation; no borrowing between families --technical-retention-days (int32; default: 0) — required technical retention: 7..365, within the granted ceiling

version

Command	What it does	Command-specific flags
anectico version	Print the installed CLI version	—

warehouse

Command	What it does	Command-specific flags
anectico warehouse destinations create	Preview storing a destination and its private credential	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable creation or run key (required)
anectico warehouse destinations delete <destination-id>	Preview deleting a destination and destroying its credential	--confirm-token (string) — server preview token; repeat identical arguments to apply --expected-revision (string) — exact current revision from the corresponding get command (required) --yes (bool; default: false) — confirm this destructive operation (required)
anectico warehouse destinations get <destination-id>	Get a warehouse destination and its revision	—
anectico warehouse destinations list	List the project's warehouse destinations	—
anectico warehouse destinations test <destination-id>	Preview writing, reading and deleting a marker in the bucket	--confirm-token (string) — server preview token; repeat identical arguments to apply
anectico warehouse destinations update <destination-id>	Preview replacing a destination at an exact revision	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; repeat identical arguments to apply --expected-revision (string) — exact current revision from the corresponding get command (required) --file (string) — request body from a JSON file ("-" for stdin)
anectico warehouse exports create	Preview a scheduled export to the customer's bucket	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; repeat identical arguments to apply --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — stable creation or run key (required)
anectico warehouse exports delete <export-id>	Preview removing an export, its history and cursor	--confirm-token (string) — server preview token; repeat identical arguments to apply --expected-revision (string) — exact current revision from the corresponding get command (required) --yes (bool; default: false) — confirm this destructive operation (required)
anectico warehouse exports get <export-id>	Get a warehouse export and its revision	—
anectico warehouse exports list	List the project's warehouse exports	—
anectico warehouse exports pause <export-id>	Preview pausing scheduled writes	--confirm-token (string) — server preview token; repeat identical arguments to apply --expected-revision (string) — exact current revision from the corresponding get command (required)
anectico warehouse exports resume <export-id>	Preview resuming scheduled writes under your authority	--confirm-token (string) — server preview token; repeat identical arguments to apply --expected-revision (string) — exact current revision from the corresponding get command (required)
anectico warehouse exports run <export-id>	Preview queueing an immediate export run	--confirm-token (string) — server preview token; repeat identical arguments to apply --idempotency-key (string) — stable creation or run key (required)
anectico warehouse exports runs <export-id>	List a warehouse export's runs and their counts	--cursor (string) — next_cursor from the previous page --limit (int; default: 0) — page size, 1 to 100 (default 20)
anectico warehouse exports update <export-id>	Preview replacing an export definition at an exact revision	--body (string) — request body as inline JSON --confirm-token (string) — server preview token; repeat identical arguments to apply --expected-revision (string) — exact current revision from the corresponding get command (required) --file (string) — request body from a JSON file ("-" for stdin)
anectico warehouse limits	Show the bounds warehouse export enforces	—

whoami

Command	What it does	Command-specific flags
anectico whoami	Show the authenticated identity	—

writes

Command	What it does	Command-specific flags
anectico writes lookup <action>	Read an outcome using the original arguments and one retry selector	--body (string) — request body as inline JSON --file (string) — request body from a JSON file ("-" for stdin) --idempotency-key (string) — original stable retry key; select this or --request-id --request-id (string) — original X-Request-ID within its retained correlation window

Discover one command interactively

Append --help at any level to see the same information in the terminal:

anectico issues --help
anectico incidents create --help

• Use the Anectico CLI
• Choose safe permissions
• REST API reference