The keera CLI¶

keera does everything the panel does, from a terminal. To install it, see Sign in.

keera help <command> explains each command and its flags. Every listing command takes --json.

Commands¶

Command	What it is for
`keera login`	sign in through the browser
`keera logout`	sign this machine out
`keera whoami`	who you are signed in as, and on which gateway
`keera connect`	set up an editor or agent for this gateway
`keera doctor`	check the deployment and say what is missing
`keera org`	organisations: list, switch, create, set a domain
`keera project`	projects in your organisation
`keera user`	people and their roles
`keera key`	API keys: create, activate, rotate, revoke
`keera model`	models: add, change, check, the catalogue
`keera guardrail`	what an organisation, project or key may do
`keera limit`	one scope's rate limits
`keera budget`	one scope's budgets
`keera filter`	filters: add, check, report
`keera router`	routers: add, show, check, report
`keera mcp`	MCP servers and their tool calls
`keera sandbox`	sandboxes and sandbox classes
`keera usage`	usage and cost, grouped as you ask
`keera session`	tasks of coding agents
`keera failures`	requests that did not succeed
`keera billing`	the bill and credit for the gateway's own provider keys
`keera version`	the version of the command

A command talks to the first of these:

It acts on the organisation chosen with keera org switch, or on KEERA_ORG for one shell or pipeline:

KEERA_ORG="Example Bank" keera usage --by project

Variable	What it is
`KEERA_CONTROL_URL`	the gateway to talk to
`KEERA_OPERATOR_KEY`	act with the operator key instead of your sign-in, for automation
`KEERA_ORG`	the organisation to act on
`KEERA_CONFIG_DIR`	where sign-ins are stored
`NO_COLOR`	turns colours off; output is coloured only on a terminal anyway

--json gives machine-readable output.
Commands that ask for confirmation take --yes.
Secrets can be read from standard input with @-, so they stay out of the shell history: keera model set keera-frontier --api-key @-.
keera doctor exits with an error when a check fails.