CLI command reference

This reference covers all 216 commands in the current Anectico CLI. It is generated from the same Cobra command tree used by the binary, so command names, positional arguments, aliases, flags, and defaults stay aligned with the implementation.

For the exact manifest bundled into the version you installed, run:

anectico docs

How commands behave

• Interactive terminals receive readable tables; redirected or piped output is JSON. Commands without a purpose-built table use a deterministic PATH / TYPE / VALUE tree that includes every JSON container and scalar without truncation.
• Use --output json or --output table to choose explicitly.
• Destructive commands never prompt. They require --yes and fail without it.
• Commands that accept structured bodies use --json, --file path, or --file - for standard input.
• Issue lifecycle writes require the exact --expected-version shown by anectico issues view; the CLI never auto-fetches a newer revision or silently overwrites concurrent triage.
• The active project comes from --project, ANECTICO_PROJECT, or the selected profile, in that order.
• For a project-bound API key, that active project must be omitted or match the key binding exactly. A conflict fails before product logic with HTTP 403 and exit code 4; it is never silently replaced.
• Non-interactive errors are one JSON object on standard error with error, message, and exit_code.
• API failures also include their real HTTP status; local failures omit status.
• For anectico send, throttled responses preserve the server’s Retry-After value as retry_after.

Global flags

Global flags can appear before or after a subcommand.

Flag	Type/default	What it controls
--api-key	string	API key for headless auth (env: ANECTICO_API_KEY)
--api-url	string	Anectico API base URL (env: ANECTICO_API_URL)
--ingest-url	string	ingest base URL for ‘anectico send’ (env: ANECTICO_INGEST_URL)
--no-color	bool; default: false	disable colored output
-o, --output	string	output format: table|json (default: table on a TTY, json when piped)
--profile	string	config profile to use (env: ANECTICO_PROFILE)
--project	string	project id scope (env: ANECTICO_PROJECT)

Exit codes

Code	Meaning
0	success
1	API or general error
2	usage error (unknown command or bad flags/arguments)
3	unauthenticated (log in or set ANECTICO_API_KEY)
4	forbidden (credential lacks scope or conflicts with the requested project)
5	not found

Command catalog

Required positional arguments use angle brackets. Optional arguments use square brackets. Flags shown in the last column are command-specific; all global flags remain available.

accounts

Command	What it does	Command-specific flags
anectico accounts get <group-type> <group-key>	Show one account’s profile	—
anectico accounts list	List accounts	–limit (int; default: 0) — maximum rows –offset (int; default: 0) — pagination offset –search (string) — search by key/name –type (string) — filter by group type (e.g. company)
anectico accounts timeline <group-type> <group-key>	The account’s all-signal timeline (every member’s activity)	–cursor (string) — pagination cursor from the previous page –limit (int; default: 0) — maximum entries
anectico accounts types	List the org’s group types with counts	—

agent-runs

Command	What it does	Command-specific flags
anectico agent-runs get <run-id>	Show one run with its spans	—
anectico agent-runs list	List agent runs	–agent (string) — filter by agent name –distinct-id (string) — filter to one person –env (string) — deployment environment scope –errors-only (bool; default: false) — only runs with errors –provider (string) — filter to runs that used this provider –since (string; default: 24h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –status (string) — terminal status (completed, failed, timed_out, cancelled, max_steps) –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)

alerts

Command	What it does	Command-specific flags
anectico alerts ack <alert-id>	Acknowledge an alert Aliases: acknowledge.	–note (string) — optional acknowledgment note
anectico alerts list	List active alerts	–limit (int; default: 50) — maximum rows –severity (string) — filter by severity –state (string) — filter by active state (pending, firing, acknowledged, silenced; comma-separated)
anectico alerts resolve <alert-id>	Manually resolve an alert	–note (string) — optional resolution note
anectico alerts rules create	Create an alert rule (body = the rule JSON; see anectico docs)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON
anectico alerts rules delete <rule-id>	Delete an alert rule	–yes (bool; default: false) — confirm this destructive operation (required)
anectico alerts rules get <rule-id>	Show one alert rule	—
anectico alerts rules list	List alert rules	–limit (int; default: 0) — maximum rows –offset (int; default: 0) — pagination offset –severity (string) — filter by severity
anectico alerts rules test <rule-id>	Validate a rule and preview its query	—
anectico alerts rules update <rule-id>	Update an alert rule (body must include the current version)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON
anectico alerts silences create	Create a silence (body: name, matchers[{label_name,operator,value}], starts_at, ends_at)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON
anectico alerts silences delete <silence-id>	Expire a silence	–yes (bool; default: false) — confirm this destructive operation (required)
anectico alerts silences list	List active silences	—

anomalies

Command	What it does	Command-specific flags
anectico anomalies ack <finding-id>	Acknowledge a finding	—
anectico anomalies delete <finding-id>	Delete a finding	–yes (bool; default: false) — confirm this destructive operation (required)
anectico anomalies get <finding-id>	Show one finding	—
anectico anomalies list	List anomaly findings	–limit (int; default: 0) — maximum rows –severity (string) — info|warning|critical –signal (string) — filter by signal –since (string) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –status (string) — open|acknowledged|resolved –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico anomalies resolve <finding-id>	Resolve a finding	—

apikey

Command	What it does	Command-specific flags
anectico apikey create	Create an API key (the secret is shown once)	–name (string) — display name for the key –scope (stringSlice; default: []) — scope to grant (repeatable), e.g. –scope logs:read
anectico apikey list	List the org’s API keys	—
anectico apikey revoke <key-id>	Revoke an API key	—
anectico apikey scopes	List the grantable scope catalog	—

channels

Command	What it does	Command-specific flags
anectico channels create	Create a channel (body: type, name, config{…})	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON
anectico channels delete <channel-id>	Delete a channel	–yes (bool; default: false) — confirm this destructive operation (required)
anectico channels get <channel-id>	Show one channel (secrets redacted)	—
anectico channels list	List notification channels	—
anectico channels test <channel-id>	Send a test notification through a channel	—
anectico channels update <channel-id>	Update a channel (omitted secret fields keep their stored value)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON

cohorts

Command	What it does	Command-specific flags
anectico cohorts create	Create a cohort (body: name, kind behavioral|property|static, definition?/members?)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON
anectico cohorts delete <cohort-id>	Delete a cohort	–yes (bool; default: false) — confirm this destructive operation (required)
anectico cohorts get <cohort-id>	Show one cohort	—
anectico cohorts history <cohort-id>	List immutable cohort membership generations newest first	–cursor (string) — opaque next_cursor from the previous page –limit (int; default: 0) — maximum generations (1-1000; default 50)
anectico cohorts list	List cohorts	–cursor (string) — opaque next_cursor from the previous page –limit (int; default: 0) — maximum rows (1-1000; default 50)
anectico cohorts members <cohort-id>	List a cohort’s member person ids (paginated)	–cursor (string) — opaque next_cursor from the previous page –generation (int64; default: 0) — retained membership generation (default current) –limit (int; default: 0) — maximum rows (1-1000; default 50)
anectico cohorts preview	Preview a behavioral/property body ({kind, definition}) without saving it	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON –sample-limit (uint32; default: 0) — maximum sampled person ids (1-100; default 20)
anectico cohorts refresh <cohort-id>	Recompute a cohort’s membership now	—
anectico cohorts replace-members <cohort-id>	Replace complete static membership (body is a JSON string array; [] clears)	–expected-generation (int64; default: 0) — current membership generation (required) –file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON –yes (bool; default: false) — confirm this destructive operation (required)
anectico cohorts update <cohort-id>	Update a cohort (name/description/definition; kind is immutable)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON

connections

Command	What it does	Command-specific flags
anectico connections create	Create a connection (body: provider, kind, display_name, secret)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON
anectico connections delete <connection-id>	Delete a connection	–yes (bool; default: false) — confirm this destructive operation (required)
anectico connections get <connection-id>	Show one connection (metadata only)	—
anectico connections list	List connections	–provider (string) — filter by provider
anectico connections update <connection-id>	Update a connection (rotate the secret / rename)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON

dashboards

Command	What it does	Command-specific flags
anectico dashboards clone <dashboard-id>	Clone a dashboard	—
anectico dashboards create	Create a dashboard (body: name, project_id, description?, layout?, tags?)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON
anectico dashboards delete <dashboard-id>	Delete a dashboard	–yes (bool; default: false) — confirm this destructive operation (required)
anectico dashboards get <dashboard-id>	Show a dashboard with its widgets	—
anectico dashboards list	List dashboards	—
anectico dashboards update <dashboard-id>	Update a dashboard (partial body; tags as {“values”:[…]})	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON
anectico dashboards widgets add <dashboard-id>	Add a widget (body: type, title, query{…}, visualization?, refresh_interval?)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON
anectico dashboards widgets delete <dashboard-id> <widget-id>	Delete a widget	–yes (bool; default: false) — confirm this destructive operation (required)
anectico dashboards widgets update <dashboard-id> <widget-id>	Update a widget	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON

deliveries

Command	What it does	Command-specific flags
anectico deliveries get <delivery-id>	Show one delivery receipt and its retry state	—
anectico deliveries list	List delivery receipts for an alert, incident, channel, or status	–alert (string) — filter by alert id –channel (string) — filter by channel id –cursor (string) — opaque cursor returned by the previous page –incident (string) — filter by incident id –limit (int; default: 50) — maximum receipts (1-1000) –status (string) — filter by status: pending|sending|sent|failed|retrying|suppressed|dlq

docs

Command	What it does	Command-specific flags
anectico docs	Print the full command manifest (JSON; –markdown for humans)	–api-key (string) — API key for headless auth (env: ANECTICO_API_KEY) –api-url (string) — Anectico API base URL (env: ANECTICO_API_URL) -h, –help (bool; default: false) — help for docs –ingest-url (string) — ingest base URL for ‘anectico send’ (env: ANECTICO_INGEST_URL) –markdown (bool; default: false) — render the manifest as markdown –no-color (bool; default: false) — disable colored output -o, –output (string) — output format: table|json (default: table on a TTY, json when piped) –profile (string) — config profile to use (env: ANECTICO_PROFILE) –project (string) — project id scope (env: ANECTICO_PROJECT)

doctor

Command	What it does	Command-specific flags
anectico doctor	Check API, auth, project, ingestion, and MCP connectivity	—

escalation

Command	What it does	Command-specific flags
anectico escalation create	Create a policy (body: name, levels[{level,delay,channels,users,schedules}], max_escalations)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON
anectico escalation delete <policy-id>	Delete a policy	–yes (bool; default: false) — confirm this destructive operation (required)
anectico escalation get <policy-id>	Show one escalation policy	—
anectico escalation list	List escalation policies	—
anectico escalation update <policy-id>	Replace a policy (full body)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON

evals

Command	What it does	Command-specific flags
anectico evals config	Show the eval configuration	—
anectico evals set-config	Replace the eval configuration (body: enabled_metrics, judge_model, sampling_rate, …)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON

events

Command	What it does	Command-specific flags
anectico events names	List captured analytics event names	–cursor (string) — opaque next_cursor from the previous page –limit (int; default: 0) — page size from 1 to 50 (default 50) –prefix (string) — restrict names to this prefix –property-key (string) — event property key (requires –property-value) –property-value (string) — exact event property value (requires –property-key)
anectico events trends <event> [event...]	Query bucketed event trends over an exact time window	–breakdown (string) — event property to break down by –filters (string) — property filters as a JSON array –interval (string; default: day) — bucket: hour|day|week|month|total –measure (string; default: count) — aggregate: count|unique_persons –since (string) — required exact RFC3339 start timestamp –top (int; default: 0) — maximum breakdown values –until (string) — required exact RFC3339 end timestamp
anectico events triggerers <event>	List people who triggered an event in an exact time window	–cursor (string) — opaque next_cursor from the previous page –limit (int; default: 0) — page size from 1 to 1000 (default 50) –property-key (string) — event property key (requires –property-value) –property-value (string) — exact event property value (requires –property-key) –since (string) — required exact RFC3339 start timestamp –until (string) — required exact RFC3339 end timestamp

export

Command	What it does	Command-specific flags
anectico export create	Create an export job (body: type EXPORT_TYPE_CSV|JSON|PARQUET + query)	–file (string) — request body from a JSON file (“-” for stdin) –idempotency-key (string) — stable 1-128 character ASCII key using letters, digits, . _ : or - –json (string) — request body as inline JSON
anectico export jobs cancel <job-id>	Cancel an export job	–yes (bool; default: false) — confirm this destructive operation (required)
anectico export jobs download <job-id>	Safely download a finished export to a new local file	–file (string) — new destination path (existing files and symlinks are never overwritten)
anectico export jobs download-url <job-id>	Get the signed download URL for a finished job	—
anectico export jobs get <job-id>	Show one export job	—
anectico export jobs list	List export jobs	–cursor (string) — signed next cursor from the previous page –limit (int; default: 0) — page size from 1 to 100 –status (string) — filter by status enum name –type (string) — filter by type enum name
anectico export jobs retry <job-id>	Retry a failed export job	—
anectico export jobs watch <job-id>	Watch one export job until it reaches a terminal state	–interval (duration; default: 2s) — successful poll interval (100ms to 1m) –max-polls (int; default: 1000) — maximum API polls (1 to 100000) –max-transient-errors (int; default: 8) — consecutive HTTP 429/503 errors to retry (0 to 100) –timeout (duration; default: 30m0s) — maximum total watch duration (1s to 24h)
anectico export logs	Export logs (body: format, service_name?, level?, start_time?, end_time?, columns?)	–file (string) — request body from a JSON file (“-” for stdin) –idempotency-key (string) — stable 1-128 character ASCII key using letters, digits, . _ : or - –json (string) — request body as inline JSON

flags

Command	What it does	Command-specific flags
anectico flags create	Create a flag (body: key, name?, active?, variants?, filters?; project_id injected)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON
anectico flags decide <distinct-id>	Evaluate feature flags remotely for one exact identity	–groups (string) — group type to key mappings as a JSON object –person-properties (string) — person properties as a JSON object
anectico flags delete <flag-key>	Delete a flag	–yes (bool; default: false) — confirm this destructive operation (required)
anectico flags get <flag-key>	Show one flag’s full definition	—
anectico flags list	List the project’s feature flags	—
anectico flags snapshot	Download the project’s local-evaluation snapshot	—
anectico flags toggle <flag-key> <on|off>	Turn a feature flag on or off	—
anectico flags update <flag-key>	Update a flag (partial body; project_id injected)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON

incidents

Command	What it does	Command-specific flags
anectico incidents acknowledge <incident-id>	Acknowledge an incident Aliases: ack.	–expected-version (uint64; default: 0) — incident version returned by incidents view (required) –idempotency-key (string) — stable retry key for this exact transition (required)
anectico incidents comment <incident-id> <text>	Add a comment to the incident timeline	–expected-version (uint64; default: 0) — incident version returned by incidents view (required) –idempotency-key (string) — stable retry key for this exact comment (required)
anectico incidents create <title>	Declare an incident	–description (string) — incident description –link-ref (string) — primary signal reference id –link-type (string) — primary signal type: alert|error_group|anomaly –severity (int; default: 0) — severity 1 (SEV1) to 4 (SEV4)
anectico incidents delete <incident-id>	Delete an incident	–yes (bool; default: false) — confirm this destructive operation (required)
anectico incidents link <incident-id>	Link a signal (alert / error_group / anomaly) to an incident	–ref (string) — signal reference id (required) –type (string) — alert|error_group|anomaly (required)
anectico incidents list	List incidents	–status (string) — filter by status: open|acknowledged|resolved
anectico incidents reopen <incident-id>	Reopen a resolved incident	–expected-version (uint64; default: 0) — incident version returned by incidents view (required) –idempotency-key (string) — stable retry key for this exact transition (required)
anectico incidents resolve <incident-id>	Resolve an incident	–expected-version (uint64; default: 0) — incident version returned by incidents view (required) –idempotency-key (string) — stable retry key for this exact transition (required)
anectico incidents unlink <incident-id> <link-id>	Remove a linked signal	–yes (bool; default: false) — confirm this destructive operation (required)
anectico incidents update <incident-id>	Edit an incident (body: title, description, severity)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON
anectico incidents view <incident-id>	Show an incident’s case file (links + timeline)	—
anectico incidents watch <incident-id>	Stream an incident timeline with verified resume and bounded reconnects	–cursor (string) — opaque cursor from a prior incident watch record –include-existing (bool; default: false) — emit existing timeline history before following new events –interval (duration; default: 2s) — successful poll interval (100ms to 1m) –max-events (int; default: 0) — stop after this many timeline events (0 keeps watching until another bound) –max-polls (int; default: 100000) — maximum API attempts (1 to 100000) –max-transient-errors (int; default: 100) — consecutive transient failures to retry (0 to 100) –timeout (duration; default: 1h0m0s) — maximum observation window (1s to 24h)

invitations

Command	What it does	Command-specific flags
anectico invitations create <email>	Invite someone to the org	–role (string) — role to grant (e.g. ROLE_MEMBER)
anectico invitations list	List invitations	–status (string) — filter by status enum name
anectico invitations revoke <invitation-id>	Revoke a pending invitation	–yes (bool; default: false) — confirm this destructive operation (required)

issues

Command	What it does	Command-specific flags
anectico issues affected <issue-id>	The people and accounts an issue hit (blast radius)	–cursor (string) — opaque pagination cursor from response.pagination.next_cursor –limit (int; default: 0) — maximum rows
anectico issues assign <issue-id> [user-id]	Assign an issue to a member (or –unassign)	–expected-version (uint64; default: 0) — issue version returned by issues view (required) –unassign (bool; default: false) — clear the assignee
anectico issues ignore <issue-id>	Ignore an issue	–expected-version (uint64; default: 0) — issue version returned by issues view (required)
anectico issues list	List issues	–env (string) — filter by deployment environment –limit (int; default: 30) — maximum rows –service (string) — filter by service name –since (string) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –status (string) — filter by status: new|ongoing|resolved|ignored|snoozed –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico issues merge <canonical-issue-id>	Merge duplicate issues into a canonical one	–source (stringSlice; default: []) — issue id to merge in (repeatable)
anectico issues merged-sources <canonical-issue-id>	The issues merged into a canonical one	—
anectico issues occurrences <issue-id>	An issue’s occurrence time series	–interval (string) — bucket size –since (string; default: 24h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico issues releases <issue-id>	An issue’s per-release context and breakdown	—
anectico issues reopen <issue-id>	Reopen an issue	–expected-version (uint64; default: 0) — issue version returned by issues view (required)
anectico issues resolve <issue-id>	Mark an issue resolved	–expected-version (uint64; default: 0) — issue version returned by issues view (required) –in-next-release (bool; default: false) — resolve in the next release (regression re-opens it)
anectico issues search	Search raw error events (occurrences, not groups)	–level (string) — filter by level –limit (int; default: 0) — maximum rows -q, –query (string) — full-text query –service (string) — filter by service name –since (string; default: 24h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico issues snooze <issue-id>	Snooze (archive-until) an issue	–escalating (bool; default: false) — wake when the issue escalates (spike) –expected-version (uint64; default: 0) — issue version returned by issues view (required) –for (string) — snooze for a duration (30m, 6h, 7d) –forever (bool; default: false) — snooze forever –occurrences (int; default: 0) — wake after N more events –users (int; default: 0) — wake after N more affected users
anectico issues unmerge <source-issue-id>	Restore a previously merged issue	—
anectico issues view <issue-id>	Show one issue’s detail	—

llm

Command	What it does	Command-specific flags
anectico llm pricing delete <model>	Remove a model’s pricing override	–yes (bool; default: false) — confirm this destructive operation (required)
anectico llm pricing list	List pricing overrides	—
anectico llm pricing set <model>	Set a model’s pricing (body: input_cost_per_token, output_cost_per_token, …)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON
anectico llm series	Bucketed LLM cost time series	–interval (string; default: 1h) — bucket size (1h, 6h, 1d) –since (string; default: 7d) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico llm summary	Org LLM cost summary (by model, by agent)	–since (string; default: 7d) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico llm top-persons	The people your LLM spend goes to	–limit (int; default: 0) — maximum rows –since (string; default: 7d) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)

login

Command	What it does	Command-specific flags
anectico login	Log in via your browser (device flow)	–no-browser (bool; default: false) — print the verification URL instead of opening a browser

logout

Command	What it does	Command-specific flags
anectico logout	Log out (clear the stored session for the profile)	—

logs

Command	What it does	Command-specific flags
anectico logs aggregate	Count logs grouped by a dimension	–group-by (string) — dimension to group by (required) –since (string) — time window (30m, 6h, 7d)
anectico logs context	Logs surrounding an exact anchor log	–after (int; default: 0) — records after the anchor –before (int; default: 0) — records before the anchor –log-id (string) — canonical 32-character uppercase log id (required)
anectico logs delete <canonical-log-id>	Delete one exact canonical log	–yes (bool; default: false) — confirm this destructive operation (required)
anectico logs fields	Filterable log fields and their values	–since (string; default: 24h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico logs patterns	Detected log pattern clusters	–level (string) — filter by severity –limit (int; default: 0) — maximum clusters –min-count (int; default: 0) — minimum cluster size –service (string) — filter by service name –since (string; default: 24h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico logs query	Search logs	–cursor (string) — opaque pagination cursor from pagination.next_cursor –distinct-id (string) — filter to one person’s distinct_id –env (string) — filter by deployment environment –level (string) — filter by level (error, warn, info, …) –limit (int; default: 50) — maximum rows -q, –query (string) — full-text query –service (string) — filter by service name –since (string; default: 1h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –sort (string; default: timestamp_desc) — sort order: timestamp_desc|timestamp_asc –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico logs tail	Live-tail logs (SSE); Ctrl-C to stop	–distinct-id (string) — filter to one person’s distinct_id –env (string) — filter by deployment environment –level (string) — filter by level (error, warn, info, …) -q, –query (string) — full-text query –service (string) — filter by service name

mcp

Command	What it does	Command-specific flags
anectico mcp endpoint	Print the MCP Streamable HTTP endpoint without credentials	—
anectico mcp verify	Run a read-only MCP initialize handshake	—

members

Command	What it does	Command-specific flags
anectico members list	List org members	—
anectico members remove <user-id>	Remove a member from the org	–yes (bool; default: false) — confirm this destructive operation (required)
anectico members set-role <user-id> <role>	Change a member’s role (e.g. ROLE_ADMIN, ROLE_MEMBER)	—

metrics

Command	What it does	Command-specific flags
anectico metrics delete <metric-name>	Delete a metric’s datapoints	–yes (bool; default: false) — confirm this destructive operation (required)
anectico metrics forecast <metric-name>	Forecast a metric (expected band + horizon)	–env (string) — deployment environment scope –horizon (string) — forecast horizon –interval (string) — bucket size –service (string) — filter by service name
anectico metrics labels <metric-name>	A metric’s labels and their values	–since (string; default: 24h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico metrics list	List the available metric names	—
anectico metrics query <metric-name>	Run a bucketed aggregation over a metric	–agg (string; default: avg) — aggregation: avg|sum|min|max|count|p50|p95|p99 –env (string) — filter by deployment environment –group-by (stringSlice; default: []) — group by dimensions: service_name, environment, instance, job –interval (string; default: 5m) — bucket size: 1m,5m,15m,30m,1h,6h,12h,1d –since (string; default: 1h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)

Current limitation: anectico metrics query accepts --since, --until, and --interval, but the CLI adapter does not yet forward those three values. It uses the service-default window and bucket. Use the Metrics REST API when explicit query bounds are required.

oncall

Command	What it does	Command-specific flags
anectico oncall contact-methods add	Add a contact method	–label (string) — display label –type (string) — email|slack_dm|sms|phone (required) –value (string) — the address / number / handle (required)
anectico oncall contact-methods delete <method-id>	Delete a contact method	–yes (bool; default: false) — confirm this destructive operation (required)
anectico oncall contact-methods list	List your contact methods	—
anectico oncall now <schedule-id>	Who is on call right now (or –at a time)	–at (string) — evaluate at this RFC3339 time (default now)
anectico oncall overrides create <schedule-id>	Create an override	–end (string) — override end, RFC3339 (required) –start (string) — override start, RFC3339 (required) –user (string) — user id taking the shift (required)
anectico oncall overrides delete <override-id>	Delete an override	–yes (bool; default: false) — confirm this destructive operation (required)
anectico oncall overrides list <schedule-id>	List a schedule’s overrides	—
anectico oncall schedules create	Create a schedule (body: name, layers[{name,users,rotation_length,start_at,…}])	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON
anectico oncall schedules delete <schedule-id>	Delete a schedule	–yes (bool; default: false) — confirm this destructive operation (required)
anectico oncall schedules get <schedule-id>	Show one schedule	—
anectico oncall schedules list	List schedules	—
anectico oncall schedules update <schedule-id>	Replace a schedule (full body)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON

persons

Command	What it does	Command-specific flags
anectico persons get <person-id-or-distinct-id>	Show one person’s profile and cross-signal stats	—
anectico persons search [query]	Search persons by email / name / distinct_id	–limit (int; default: 25) — maximum rows
anectico persons stats <person-id-or-distinct-id>	A person’s cross-signal counters	—
anectico persons timeline <person-id-or-distinct-id>	Show a person’s cross-signal timeline (newest first)	–before (string) — paginate: entries before this cursor –limit (int; default: 50) — maximum entries

projects

Command	What it does	Command-specific flags
anectico projects create <name>	Create a project	–description (string) — project description –slug (string) — immutable project slug (required)
anectico projects current	Show the effective project scope	—
anectico projects delete <project-id>	Delete a project and its scoping	–yes (bool; default: false) — confirm this destructive operation (required)
anectico projects list	List the org’s projects	—
anectico projects update <project-id>	Rename a project / edit its description	–description (string) — new description (empty string clears it) –name (string) — new display name
anectico projects use <project-id-or-slug>	Set the profile’s default project scope	—

releases

Command	What it does	Command-specific flags
anectico releases create <release>	Register a release/deploy	–author (string) — deploy author –commit (string) — commit SHA –deploy-at (string) — deploy time, RFC3339 (default now) –ref (string) — branch or tag –url (string) — link to the release/CI run
anectico releases get <release>	Show one release’s detail (new/regressed issues, blast radius)	—
anectico releases list	List releases with error/regression counts	—

replay

Command	What it does	Command-specific flags
anectico replay delete <session-id>	Delete a recording	–yes (bool; default: false) — confirm this destructive operation (required)
anectico replay for-trace <trace-id>	Find the session recording covering a trace	—
anectico replay get <session-id>	Show one recording’s metadata	—
anectico replay list	List recordings	—
anectico replay related <session-id>	Errors and events that happened during the session	—
anectico replay snapshots <session-id>	Dump the recording’s rrweb events (decoded JSON)	—

saved-searches

Command	What it does	Command-specific flags
anectico saved-searches create	Create a saved search (body: name, signal, query, is_shared)	–file (string) — request body from a JSON file (“-” for stdin) –idempotency-key (string) — stable retry key for this exact create (required) –json (string) — request body as inline JSON
anectico saved-searches delete <search-id>	Delete a saved search with compare-and-swap	–expected-version (uint64; default: 0) — current saved-search version returned by list/get (required) –yes (bool; default: false) — confirm this destructive operation (required)
anectico saved-searches duplicate <search-id>	Duplicate a visible saved search into a private copy	–expected-version (uint64; default: 0) — current source version returned by list/get (required) –idempotency-key (string) — stable retry key for this exact duplicate (required) –name (string) — optional name for the duplicate
anectico saved-searches get <search-id>	Get a saved search and its version	—
anectico saved-searches list	List visible saved searches	–cursor (string) — opaque next_cursor returned by the previous page –limit (int; default: 0) — page size from 1 to 100 (default 50) –signal (string) — signal page: logs|errors|traces|metrics (required)
anectico saved-searches update <search-id>	Update a saved search with compare-and-swap	–expected-version (uint64; default: 0) — current saved-search version returned by list/get (required) –file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON

scores

Command	What it does	Command-specific flags
anectico scores add <run-id>	Create or edit your human score for an agent run	–comment (string) — free-text comment –label (string) — score label (required) –name (string) — score dimension name –value (float64; default: 0) — numeric score value
anectico scores list <run-id>	List an agent run’s scores (human + judge)	—

search

Command	What it does	Command-specific flags
anectico search correlate <trace-id>	Everything correlated with a trace (logs, errors, metrics)	–include (stringSlice; default: []) — signals to include: logs,errors,metrics (default all)
anectico search filters <field>	Distinct values of a filterable field	—
anectico search unified <query>	Search traces, logs, and metrics with one query	–limit (int; default: 0) — maximum hits per signal –service (string) — filter by service name –since (string) — time window (30m, 6h, 7d) –types (stringSlice; default: []) — signal types: traces,logs,metrics (default all)

segments

Command	What it does	Command-specific flags
anectico segments create	Create a segment (body: name, group_type, filters[{field,op,value}])	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON
anectico segments delete <segment-id>	Delete a segment	–yes (bool; default: false) — confirm this destructive operation (required)
anectico segments list	List account segments	—
anectico segments preview <segment-id>	Preview the accounts a segment currently matches	—
anectico segments update <segment-id>	Update a segment	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON

send

Command	What it does	Command-specific flags
anectico send event <event-name>	Send one product event (capture)	–distinct-id (string) — the person’s distinct_id (required) –properties (string) — event properties as a JSON object –session-id (string) — optional session id

services

Command	What it does	Command-specific flags
anectico services list	Per-service RED snapshot (error_rate is a 0..1 fraction)	–env (string) — deployment environment scope –since (string; default: 1h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico services red <service-name>	One service’s RED time series	–env (string) — deployment environment scope –interval (string) — bucket size (1m, 5m, 1h) –since (string; default: 1h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)

settings

Command	What it does	Command-specific flags
anectico settings config delete <config-row-id>	Delete a configuration entry by its row id (see list)	–yes (bool; default: false) — confirm this destructive operation (required)
anectico settings config get <key>	Show one configuration entry	—
anectico settings config list	List configuration entries	–type (string) — filter by config type
anectico settings config set <key>	Set a configuration entry (body: config_value, config_type?)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON
anectico settings github get	Show the GitHub config	—
anectico settings github set	Set the GitHub config	–enabled (bool; default: true) — enable suspect-commit blame –repo (string) — repository “owner/name” (required) –repo-root (string) — monorepo subpath the service lives under

skill

Command	What it does	Command-specific flags
anectico skill install <claude|codex|cursor|gemini>	Write the skill where the agent discovers it	–global (bool; default: false) — codex: install into ~/.codex/AGENTS.md instead of ./AGENTS.md –project (bool; default: false) — claude: install into ./.claude/skills (this repo) instead of ~/.claude/skills
anectico skill show	Print the canonical skill markdown	—

symbols

Command	What it does	Command-specific flags
anectico symbols upload-dsym <App.dSYM or DWARF path>	Upload an iOS dSYM bundle or DWARF binary	—
anectico symbols upload-proguard <mapping.txt>	Upload an Android ProGuard/R8 mapping	–dist (string) — optional distribution qualifier –release (string) — release the mapping belongs to (required)
anectico symbols upload-sourcemap	Upload one JS source map (body: release, dist, filename, content)	–file (string) — request body from a JSON file (“-” for stdin) –json (string) — request body as inline JSON

tickets

Command	What it does	Command-specific flags
anectico tickets create <issue-id>	Create a provider ticket from an issue	–idempotency-key (string) — stable key required for safe retries of this exact create –issue-url (string) — trusted absolute Anectico issue URL (required) –provider (string) — jira|linear|github (required) –repo (string) — GitHub repository “owner/name” (GitHub only) –title (string) — ticket title (defaults to the Anectico issue id)
anectico tickets get <ticket-id>	Show one ticket link and its current synchronization state	—
anectico tickets list <issue-id>	List an issue’s linked tickets	—
anectico tickets unlink <ticket-id>	Unlink a ticket (the provider ticket itself is kept)	–yes (bool; default: false) — confirm this destructive operation (required)

traces

Command	What it does	Command-specific flags
anectico traces critical-path <trace-id>	The trace’s latency-critical span path	—
anectico traces delete <trace-id>	Delete a trace’s spans	–yes (bool; default: false) — confirm this destructive operation (required)
anectico traces get <trace-id>	Show a trace’s spans	—
anectico traces search	Search traces	–cursor (string) — opaque pagination cursor from pagination.next_cursor –distinct-id (string) — only traces touching this person –env (string) — filter by deployment environment –limit (int; default: 30) — maximum rows –operation (string) — filter by operation name –service (string) — filter by service name –since (string; default: 1h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –sort-by (string; default: start_time) — sort field: start_time|duration|span_count|service_count|error_count –sort-order (string; default: desc) — sort order: asc|desc –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico traces service-map	Service dependency topology built from traces	–since (string; default: 1h) — window start: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp –until (string) — window end: positive duration (30m, 6h, 7d) or exact RFC3339 timestamp (default current/open upper bound)
anectico traces stats <trace-id>	Aggregate statistics for one trace	—

usage

Command	What it does	Command-specific flags
anectico usage	Show the org’s usage meters (events, metric series, replay sessions)	–period (string) — billing period YYYY-MM (default: current month)

version

Command	What it does	Command-specific flags
anectico version	Print the installed CLI version	—

whoami

Command	What it does	Command-specific flags
anectico whoami	Show the authenticated identity	—

Discover one command interactively

Append --help at any level to see the same information in the terminal:

anectico issues --help
anectico incidents create --help

• Use the Anectico CLI
• Choose safe permissions
• REST API reference