CLI Command Reference

dvx is the single tool you use to operate Daevix. This page is a map of the command surface; the task guides walk through the common workflows in depth.

Global behavior

Profiles. Your IAM and control-plane URLs are stored per profile (default: default) after dvx login, so most commands need no URL flags. Switch with --profile <name> or dvx profile use <name>.
Output. Most commands take --json for scripting.
Non-interactive auth. Set DVX_TOKEN to a JWT to bypass profile-based login (e.g. in CI).

Account & session

Command	What it does
`dvx signup`	Create a new organization and account (self-service).
`dvx login`	Authenticate via browser device flow; stores tokens + URLs in a profile.
`dvx logout`	Revoke tokens and log out of a profile.
`dvx whoami`	Show who you’re logged in as and your token status.
`dvx profile`	Manage CLI profiles (`list`, `use`, `delete`).
`dvx status`	Platform health, agents, and enclaves at a glance.

Agents

Command	What it does
`dvx agent create [name]`	Create an agent (`--broker-id`, `--template`, `--backend-type`).
`dvx agent list` / `get`	List agents or show one.
`dvx agent update` / `delete`	Update or decommission an agent.
`dvx agent reprovision`	Re-run provisioning for an agent.
`dvx agent logs <name>`	Stream an agent’s output.
`dvx agent isolate` / `restore`	Kill switch - cut an agent off immediately, or restore it.
`dvx agent revoke <name>`	Revoke all of an agent’s tokens.
`dvx agent connect` / `ssh` / `port-forward` / `tunnel`	Reach into a running agent host.
`dvx agent config`	Per-agent configuration (model, prompt, schedule, …).

See Manage agents and Agent lifecycle operations.

Secrets & configuration

Command	What it does
`dvx secret`	Organization-level secrets (`list`, `set`, `delete`, injection rules).
`dvx agent secret`	Per-agent secrets and overrides.
`dvx config`	Organization / platform configuration (`list`, `set`, `delete`, `add`, `remove`).
`dvx config import-from-env <service>`	Import config from environment variables.

See Manage secrets and Configure your agent.

Integrations & channels

Command	What it does
`dvx agent integration github\|gitlab link\|unlink <agent>`	Give an agent a GitHub/GitLab identity.
`dvx agent channel telegram link\|unlink <agent>`	Connect an agent to a Telegram bot.
`dvx credential-provider`	Manage credential providers for automated per-agent identity provisioning (`list`, `create`, `delete`, `rotate`).

See Use integrations from the CLI.

Policy, approvals & tools

Command	What it does
`dvx policy destination`	Network destination allow/deny rules.
`dvx policy model`	LLM model restrictions.
`dvx policy content-inspection`	Content-inspection policy.
`dvx policy execution`	Execution-time policies (`allow`, `deny`, `require_approval`, `alert`).
`dvx policy approvals`	List, approve, and deny pending approval requests.
`dvx policy pack`	Curated and org-authored policy packs (`list`, `show`, `diff`, `create`, `edit`).
`dvx tools`	Tool catalog and discovered tools/destinations.

See Policies and Approvals.

Audit

Command	What it does
`dvx audit llm [id]`	LLM API audit logs (`--agent`, `--model`, `--status`, `--since`, `--until`, `--limit`).
`dvx audit network`	Network audit logs (`--agent`, `--outcome`, `--hostname`, `--has-findings`).

See Audit.

Templates & enclaves

Command	What it does
`dvx template`	Agent templates (`list`, `get`, `create`, `update`).
`dvx broker`	List and reference the enclave(s) available to you (`list`, `get`, `register`). The enclave is the `broker` component in the CLI.

Administration

These manage hosted infrastructure and are typically not needed in day-to-day Stage-1 use:

Command	What it does
`dvx iam`	Manage IAM users, organizations, roles, and OAuth2 clients.
`dvx kms`	Manage encryption keys.

Run any command with --help to see its full flags and subcommands.