# CLI Command Reference

`dvx` is the single tool you use to operate Daevix. This page is a map of the command surface; the [task guides](/cli-agents/) walk through the common workflows in depth.

## Global behavior

- **Profiles.** Your IAM and control-plane URLs are stored per profile (default: `default`) after `dvx login`, so most commands need no URL flags. Switch with `--profile <name>` or `dvx profile use <name>`.
- **Output.** Most commands take `--json` for scripting.
- **Non-interactive auth.** Set `DVX_TOKEN` to a JWT to bypass profile-based login (e.g. in CI).

## Account & session

| Command | What it does |
|---------|--------------|
| `dvx signup` | Create a new organization and account (self-service). |
| `dvx login` | Authenticate via browser device flow; stores tokens + URLs in a profile. |
| `dvx logout` | Revoke tokens and log out of a profile. |
| `dvx whoami` | Show who you're logged in as and your token status. |
| `dvx profile` | Manage CLI profiles (`list`, `use`, `delete`). |
| `dvx status` | Platform health, agents, and enclaves at a glance. |

## Agents

| Command | What it does |
|---------|--------------|
| `dvx agent create [name]` | Create an agent (`--broker-id`, `--template`, `--backend-type`). |
| `dvx agent list` / `get` | List agents or show one. |
| `dvx agent update` / `delete` | Update or decommission an agent. |
| `dvx agent reprovision` | Re-run provisioning for an agent. |
| `dvx agent logs <name>` | Stream an agent's output. |
| `dvx agent isolate` / `restore` | Kill switch - cut an agent off immediately, or restore it. |
| `dvx agent revoke <name>` | Revoke all of an agent's tokens. |
| `dvx agent connect` / `ssh` / `port-forward` / `tunnel` | Reach into a running agent host. |
| `dvx agent config` | Per-agent configuration (model, prompt, schedule, …). |

See [Manage agents](/cli-agents/) and [Agent lifecycle operations](/cli-lifecycle/).

## Secrets & configuration

| Command | What it does |
|---------|--------------|
| `dvx secret` | Organization-level secrets (`list`, `set`, `delete`, injection rules). |
| `dvx agent secret` | Per-agent secrets and overrides. |
| `dvx config` | Organization / platform configuration (`list`, `set`, `delete`, `add`, `remove`). |
| `dvx config import-from-env <service>` | Import config from environment variables. |

See [Manage secrets](/cli-secrets/) and [Configure your agent](/configure-agent/).

## Integrations & channels

| Command | What it does |
|---------|--------------|
| `dvx agent integration github\|gitlab link\|unlink <agent>` | Give an agent a GitHub/GitLab identity. |
| `dvx agent channel telegram link\|unlink <agent>` | Connect an agent to a Telegram bot. |
| `dvx credential-provider` | Manage credential providers for automated per-agent identity provisioning (`list`, `create`, `delete`, `rotate`). |

See [Use integrations from the CLI](/cli-integrations/).

## Policy, approvals & tools

| Command | What it does |
|---------|--------------|
| `dvx policy destination` | Network destination allow/deny rules. |
| `dvx policy model` | LLM model restrictions. |
| `dvx policy content-inspection` | Content-inspection policy. |
| `dvx policy execution` | Execution-time policies (`allow`, `deny`, `require_approval`, `alert`). |
| `dvx policy approvals` | List, approve, and deny pending approval requests. |
| `dvx policy pack` | Curated and org-authored policy packs (`list`, `show`, `diff`, `create`, `edit`). |
| `dvx tools` | Tool catalog and discovered tools/destinations. |

See [Policies](/cli-policies/) and [Approvals](/cli-approvals/).

## Audit

| Command | What it does |
|---------|--------------|
| `dvx audit llm [id]` | LLM API audit logs (`--agent`, `--model`, `--status`, `--since`, `--until`, `--limit`). |
| `dvx audit network` | Network audit logs (`--agent`, `--outcome`, `--hostname`, `--has-findings`). |

See [Audit](/cli-audit/).

## Templates & enclaves

| Command | What it does |
|---------|--------------|
| `dvx template` | Agent templates (`list`, `get`, `create`, `update`). |
| `dvx broker` | List and reference the enclave(s) available to you (`list`, `get`, `register`). The enclave is the `broker` component in the CLI. |

## Administration

These manage hosted infrastructure and are typically not needed in day-to-day Stage-1 use:

| Command | What it does |
|---------|--------------|
| `dvx iam` | Manage IAM users, organizations, roles, and OAuth2 clients. |
| `dvx kms` | Manage encryption keys. |

> Run any command with `--help` to see its full flags and subcommands.