Command-line reference
Product version 0.3.0. A single version in the path, "/v1", for the whole API. Operation detail pages (parameters, response fields, examples) are published in French; every table row links to one. Types, bounds and required fields are in the machine-readable schemas: openapi.json for HTTP, mcp-tools.json for agent tools.
The name of a command follows the name of its operation; every command links to its page.
| Command | Operation | Summary |
|---|---|---|
bastide access request accept | [access.request.accept](/docs/reference/access.request.accept) | Accept a Glowsoft request for access to a project's data. |
bastide access request list | [access.request.list](/docs/reference/access.request.list) | List Glowsoft requests for access to a project's data, most recent first. |
bastide access request revoke | [access.request.revoke](/docs/reference/access.request.revoke) | Revoke an open Glowsoft access, or refuse a pending request. |
bastide account device create | [account.device.create](/docs/reference/account.device.create) | Register a device (APNs or FCM token) to receive the account's notifications. |
bastide account device revoke | [account.device.revoke](/docs/reference/account.device.revoke) | Remove a registered device: no notification is sent to it any more. |
bastide account invitation accept | [account.invitation.accept](/docs/reference/account.invitation.accept) | Join the organization, or the project, of an invitation received by email, with the role it carries. |
bastide account notice list | [account.notice.list](/docs/reference/account.notice.list) | Read the notices the platform addressed to the account, and what became of them. |
bastide account notification read | [account.notification.read](/docs/reference/account.notification.read) | Read, for an organization, the channels that notify the account of each kind of event, and its registered devices. |
bastide account notification write | [account.notification.write](/docs/reference/account.notification.write) | Choose the channels that notify the account of one kind of event, in an organization. |
bastide account organization list | [account.organization.list](/docs/reference/account.organization.list) | List the organizations where the account holds a role: identifier, slug, name and roles. |
bastide account passkey accept | [account.passkey.accept](/docs/reference/account.passkey.accept) | Confirm a pending passkey with the output of navigator.credentials.create: it becomes active, other sessions close, and the first factor returns ten codes, once. |
bastide account passkey create | [account.passkey.create](/docs/reference/account.passkey.create) | Start enrolling a passkey: returns the options the browser passes to navigator.credentials.create, with a challenge to sign within fifteen minutes. |
bastide account password write | [account.password.write](/docs/reference/account.password.write) | Change the password, under a console session: the current one is required, and the account's other sessions close. |
bastide account recovery_codes replace | [account.recovery_codes.replace](/docs/reference/account.recovery_codes.replace) | Issue ten new recovery codes, the current password presented: the old ones stop working, the new ones are returned once. |
bastide account second_factor accept | [account.second_factor.accept](/docs/reference/account.second_factor.accept) | Confirm a pending factor with a first valid code: it becomes active, other sessions close, and the first factor returns ten recovery codes, once. |
bastide account second_factor create | [account.second_factor.create](/docs/reference/account.second_factor.create) | Start enrolling an authenticator app: its secret is returned once, and the factor only counts once confirmed by a first code. |
bastide account second_factor list | [account.second_factor.list](/docs/reference/account.second_factor.list) | List the account's second factors and the number of recovery codes left; never a secret. |
bastide account second_factor revoke | [account.second_factor.revoke](/docs/reference/account.second_factor.revoke) | Remove a second factor, the current password presented: other sessions close, and the last factor takes the recovery codes with it. |
bastide account session list | [account.session.list](/docs/reference/account.session.list) | List the account's active console sessions: where they were opened and until when. |
bastide account session revoke | [account.session.revoke](/docs/reference/account.session.revoke) | Close one of the account's console sessions: it is refused at the next call. |
bastide action undo | [action.undo](/docs/reference/action.undo) | Undo, in one call and within five minutes, a class E action using the token it returned. |
bastide agent proposal accept | [agent.proposal.accept](/docs/reference/agent.proposal.accept) | Accept a proposal filed by an agent and merge it. |
bastide audit read | [audit.read](/docs/reference/audit.read) | Read the audit log of the caller's scope, most recent first. |
bastide auth_email list | [auth_email.list](/docs/reference/auth_email.list) | Read the sending log of a project's authentication emails. |
bastide backend auth configure | [backend.auth.configure](/docs/reference/backend.auth.configure) | Set the authentication of a project's backend. |
bastide backend auth read | [backend.auth.read](/docs/reference/backend.auth.read) | Read the authentication settings of a project's backend. |
bastide backend auth_provider configure | [backend.auth_provider.configure](/docs/reference/backend.auth_provider.configure) | Configure a third-party identity provider for a project's backend. |
bastide backend key create | [backend.key.create](/docs/reference/backend.key.create) | Mint a secret key for a project's backend. It is returned only once. |
bastide backend key replace | [backend.key.replace](/docs/reference/backend.key.replace) | Replace the publishable key of a project's backend, in a single step. |
bastide backend key revoke | [backend.key.revoke](/docs/reference/backend.key.revoke) | Revoke one secret key of a project's backend, leaving the others untouched. |
bastide backend read | [backend.read](/docs/reference/backend.read) | Read a project's backend: its entry points, its publishable key and its keys. |
bastide backend realtime configure | [backend.realtime.configure](/docs/reference/backend.realtime.configure) | Turn a project's backend realtime on or off. |
bastide backend schema_drift read | [backend.schema_drift.read](/docs/reference/backend.schema_drift.read) | Read the gap between the schema declared by a project's repository and its actual database. |
bastide billing manage | [billing.manage](/docs/reference/billing.manage) | Manage billing, payment methods and the spending cap. |
bastide build_cache manage | [build_cache.manage](/docs/reference/build_cache.manage) | Purge a project's remote cache, by key or entirely, or set its retention. |
bastide cache tag revoke | [cache.tag.revoke](/docs/reference/cache.tag.revoke) | Invalidate or delete from the edge cache what an environment stored under tags. |
bastide database impersonation create | [database.impersonation.create](/docs/reference/database.impersonation.create) | Open a session impersonating a user of the project's database. |
bastide database impersonation read | [database.impersonation.read](/docs/reference/database.impersonation.read) | Read as an impersonated user, to test a policy. |
bastide database impersonation write | [database.impersonation.write](/docs/reference/database.impersonation.write) | Write as an impersonated user, after confirmation. |
bastide database migrate | [database.migrate](/docs/reference/database.migrate) | Apply a schema migration to a project's database. |
bastide database personal_columns configure | [database.personal_columns.configure](/docs/reference/database.personal_columns.configure) | Set the list of columns classified as personal data in a project's database. |
bastide database policy list | [database.policy.list](/docs/reference/database.policy.list) | List, for each table of the project, the policy the platform proposes. |
bastide database policy write | [database.policy.write](/docs/reference/database.policy.write) | Apply a row-level security policy to a table. |
bastide database policy write_proposed | [database.policy.write_proposed](/docs/reference/database.policy.write_proposed) | Apply to a table the policy the platform proposes, tested beforehand. |
bastide database posture configure | [database.posture.configure](/docs/reference/database.posture.configure) | Open, or not, the daily database posture fix as a merge request on the project's repository. |
bastide database posture read | [database.posture.read](/docs/reference/database.posture.read) | Read the latest security posture analysis of a project's database. |
bastide database rls configure | [database.rls.configure](/docs/reference/database.rls.configure) | Turn row-level security on or off for a table. |
bastide database sql read | [database.sql.read](/docs/reference/database.sql.read) | Read a project's database with a read-only SQL statement. |
bastide database sql write | [database.sql.write](/docs/reference/database.sql.write) | Modify a project's database with a SQL statement, its effect measured first. |
bastide deployment cancel | [deployment.cancel](/docs/reference/deployment.cancel) | Cancel a deployment still queued or building, before it has served. |
bastide deployment create | [deployment.create](/docs/reference/deployment.create) | Deploy: build a Git reference (without putting it live if needed) or promote an already built version. |
bastide deployment hook create | [deployment.hook.create](/docs/reference/deployment.hook.create) | Create a deploy hook: a signed address to call that deploys a branch to an environment. Its secret is returned only once. |
bastide deployment hook revoke | [deployment.hook.revoke](/docs/reference/deployment.hook.revoke) | Revoke a deploy hook: its next call is refused. |
bastide deployment list | [deployment.list](/docs/reference/deployment.list) | List a project's deployments, most recent first, page by page. |
bastide deployment log read | [deployment.log.read](/docs/reference/deployment.log.read) | Read a build log, structured by step and timestamped to the millisecond. |
bastide deployment read | [deployment.read](/docs/reference/deployment.read) | Read a deployment's state, its end cause and the duration of each step. |
bastide deployment restorable list | [deployment.restorable.list](/docs/reference/deployment.restorable.list) | What a restore would bring back, and what it would not. |
bastide deployment rollback | [deployment.rollback](/docs/reference/deployment.rollback) | Restore an environment's previous release, without rebuilding. |
bastide deployment screenshot read | [deployment.screenshot.read](/docs/reference/deployment.screenshot.read) | Read a deployment's screenshot, taken once it became healthy. |
bastide domain add | [domain.add](/docs/reference/domain.add) | Attach a domain to a project and start its verification. |
bastide domain delete | [domain.delete](/docs/reference/domain.delete) | Remove a domain from a project: it stops being routed and certified. |
bastide domain list | [domain.list](/docs/reference/domain.list) | List a project's host names, the environment each serves and its state. |
bastide env delete nonproduction | [env.delete.nonproduction](/docs/reference/env.delete.nonproduction) | Delete a variable from a non-production environment. |
bastide env delete production | [env.delete.production](/docs/reference/env.delete.production) | Delete a variable from the production environment. |
bastide env list | [env.list](/docs/reference/env.list) | List an environment's variables, without any value. |
bastide env pull nonproduction | [env.pull.nonproduction](/docs/reference/env.pull.nonproduction) | Read the non-sensitive variables of a non-production environment. |
bastide env pull production | [env.pull.production](/docs/reference/env.pull.production) | Read the non-sensitive variables of the production environment. |
bastide env write nonproduction | [env.write.nonproduction](/docs/reference/env.write.nonproduction) | Write an environment variable outside production. |
bastide env write production | [env.write.production](/docs/reference/env.write.production) | Write a variable or a secret of the production environment. |
bastide environment list | [environment.list](/docs/reference/environment.list) | List a project's environments and what each is serving right now. |
bastide environment unpin | [environment.unpin](/docs/reference/environment.unpin) | Lift an environment's pin and promote the latest healthy deployment. |
bastide errorpage configure | [errorpage.configure](/docs/reference/errorpage.configure) | Set, replace or remove a project's error pages, in French and English. |
bastide errorpage read | [errorpage.read](/docs/reference/errorpage.read) | Read the error pages a project has set. |
bastide firewall configure | [firewall.configure](/docs/reference/firewall.configure) | Configure the application firewall, rate limiting and address lists. |
bastide image configure | [image.configure](/docs/reference/image.configure) | Set a project's allowed image sources, and obtain the key that signs its URLs. |
bastide image read | [image.read](/docs/reference/image.read) | Read a project's allowed image sources and its monthly transformation counter. |
bastide logs read | [logs.read](/docs/reference/logs.read) | Read an environment's runtime logs over a time window. |
bastide mcp_client consent create | [mcp_client.consent.create](/docs/reference/mcp_client.consent.create) | Consent to an MCP client's authorization request, or refuse it. Returns the address to send the browser to. |
bastide mcp_client consent read | [mcp_client.consent.read](/docs/reference/mcp_client.consent.read) | Re-read a pending MCP client authorization request: its name, its address, the scopes it asks for. |
bastide mcp_client list | [mcp_client.list](/docs/reference/mcp_client.list) | List the MCP clients you authorized: their name, scopes and last use. |
bastide mcp_client revoke | [mcp_client.revoke](/docs/reference/mcp_client.revoke) | Withdraw an MCP client's authorization: its agent tokens are refused at the next call. |
bastide member list | [member.list](/docs/reference/member.list) | List an organization's members and their active entitlements. |
bastide member manage | [member.manage](/docs/reference/member.manage) | Grant, change or remove an organization member's role. |
bastide organization agent_projects configure | [organization.agent_projects.configure](/docs/reference/organization.agent_projects.configure) | Decide whether projects created by the organization's agents are claimed automatically by the account on whose behalf they act. |
bastide organization agent_projects read | [organization.agent_projects.read](/docs/reference/organization.agent_projects.read) | Read whether projects created by the organization's agents are claimed automatically. |
bastide organization audit read | [organization.audit.read](/docs/reference/organization.audit.read) | Read an organization's audit log outside its projects, most recent first. |
bastide organization billing read | [organization.billing.read](/docs/reference/organization.billing.read) | Read an organization's billing: details, spend cap, this month's plans and invoices. |
bastide organization delete | [organization.delete](/docs/reference/organization.delete) | Delete an organization and everything it contains. |
bastide organization github_connection create | [organization.github_connection.create](/docs/reference/organization.github_connection.create) | Attach a GitHub application installation to the organization, on return from GitHub. |
bastide organization github_connection list | [organization.github_connection.list](/docs/reference/organization.github_connection.list) | Read an organization's GitHub connections, and the address to install the application. |
bastide organization github_connection revoke | [organization.github_connection.revoke](/docs/reference/organization.github_connection.revoke) | Remove a GitHub connection from the organization. |
bastide organization github_repository list | [organization.github_repository.list](/docs/reference/organization.github_repository.list) | Read the GitHub repositories the organization's connections open. |
bastide organization invitation create | [organization.invitation.create](/docs/reference/organization.invitation.create) | Invite a person, by address, to an organization or one of its projects. |
bastide organization invitation list | [organization.invitation.list](/docs/reference/organization.invitation.list) | Read an organization's pending invitations. |
bastide organization invitation revoke | [organization.invitation.revoke](/docs/reference/organization.invitation.revoke) | Revoke an organization invitation before it is accepted. |
bastide organization invoice read | [organization.invoice.read](/docs/reference/organization.invoice.read) | Download an issued invoice: its Factur-X PDF, as archived at issuance. |
bastide organization payment_method read | [organization.payment_method.read](/docs/reference/organization.payment_method.read) | Read an organization's payment method: the valid mandate's card, read from Mollie. |
bastide organization payment_method write | [organization.payment_method.write](/docs/reference/organization.payment_method.write) | Register a card: the Mollie Components token, then 3-D Secure at Mollie. |
bastide organization second_factor configure | [organization.second_factor.configure](/docs/reference/organization.second_factor.configure) | Require, or stop requiring, a second factor from an organization's Owners, Administrators and Security members. |
bastide organization second_factor read | [organization.second_factor.read](/docs/reference/organization.second_factor.read) | Read an organization's second factor requirement, and how many affected accounts do not hold one. |
bastide organization second_factor_exemption create | [organization.second_factor_exemption.create](/docs/reference/organization.second_factor_exemption.create) | Exempt a service account from the second factor, by name and with a reason, for three months at most. |
bastide organization second_factor_exemption list | [organization.second_factor_exemption.list](/docs/reference/organization.second_factor_exemption.list) | List an organization's second factor exemptions: which service account, why, by whom, until when. |
bastide organization second_factor_exemption revoke | [organization.second_factor_exemption.revoke](/docs/reference/organization.second_factor_exemption.revoke) | Remove a service account's second factor exemption. |
bastide personal_access_token create | [personal_access_token.create](/docs/reference/personal_access_token.create) | Mint a personal token: named scopes, an expiry of 365 days at most. Returned only once. |
bastide personal_access_token list | [personal_access_token.list](/docs/reference/personal_access_token.list) | List your personal tokens: scopes, expiry, last use and its address, and when an unused token will be disabled. |
bastide personal_access_token reactivation create | [personal_access_token.reactivation.create](/docs/reference/personal_access_token.reactivation.create) | Reactivate one of your personal tokens disabled for inactivity, under a console session. |
bastide personal_access_token revoke | [personal_access_token.revoke](/docs/reference/personal_access_token.revoke) | Revoke one of your personal tokens: it is refused at the next call. |
bastide preview fork accept | [preview.fork.accept](/docs/reference/preview.fork.accept) | Authorize the commit of a merge request coming from a fork: it is built and deployed, with no secret. |
bastide preview manage | [preview.manage](/docs/reference/preview.manage) | Create or destroy a preview attached to a branch. |
bastide preview protection configure | [preview.protection.configure](/docs/reference/preview.protection.configure) | Set what a project's previews require: nothing, a password, project membership, or an allowed address. |
bastide preview session create | [preview.session.create](/docs/reference/preview.session.create) | Open a preview as a project member: returns the single-use address to enter by. |
bastide preview token create | [preview.token.create](/docs/reference/preview.token.create) | Mint a bypass token for a preview: it goes through the preview whatever its mode. Returned only once. |
bastide preview token revoke | [preview.token.revoke](/docs/reference/preview.token.revoke) | Revoke a bypass token: the edge refuses it in under thirty seconds. |
bastide project create | [project.create](/docs/reference/project.create) | Create a project in an organization, without its backend. |
bastide project create_with_backend | [project.create_with_backend](/docs/reference/project.create_with_backend) | Create a project, its database and its first production deployment, in one call. |
bastide project delete | [project.delete](/docs/reference/project.delete) | Request the deletion of a project, its environments and its data. |
bastide project deletion accept | [project.deletion.accept](/docs/reference/project.deletion.accept) | Validate a project's requested deletion: a second Owner, or the only one. |
bastide project deletion cancel | [project.deletion.cancel](/docs/reference/project.deletion.cancel) | Cancel a project's deletion: withdraw the request, cancel it during the grace period, or restore the project from the trash. |
bastide project list | [project.list](/docs/reference/project.list) | List an organization's projects, page by page. |
bastide project ownership accept | [project.ownership.accept](/docs/reference/project.ownership.accept) | Claim a project created by an agent: it becomes an ordinary project, with no expiry. |
bastide project read | [project.read](/docs/reference/project.read) | Read a project's metadata and the state of its deployments. |
bastide project settings write | [project.settings.write](/docs/reference/project.settings.write) | Change a project's settings. |
bastide project tier write | [project.tier.write](/docs/reference/project.tier.write) | Change a project's tier, prorated to the day; dryRun returns the preview. |
bastide routingrules read | [routingrules.read](/docs/reference/routingrules.read) | Read a project's routing rules and their version history. |
bastide routingrules rollback | [routingrules.rollback](/docs/reference/routingrules.rollback) | Roll the routing rules back to an earlier version, in one step. |
bastide routingrules write | [routingrules.write](/docs/reference/routingrules.write) | Publish or simulate a project's routing rules, without a redeploy. |
bastide secret reveal | [secret.reveal](/docs/reference/secret.reveal) | Read a secret's value in clear. Allowed to no role, without exception. |
bastide service_token create | [service_token.create](/docs/reference/service_token.create) | Mint a service account token: named scopes, a list of projects, ninety days at most. Returned only once. |
bastide service_token list | [service_token.list](/docs/reference/service_token.list) | List an organization's service account tokens: scopes, projects, who answers for them, expiry, last use and its address. |
bastide service_token revoke | [service_token.revoke](/docs/reference/service_token.revoke) | Revoke a service account token: it is refused at the next call. |
bastide sso configure | [sso.configure](/docs/reference/sso.configure) | Configure an organization's single sign-on and directory. |
bastide task read | [task.read](/docs/reference/task.read) | Read the progress of a long-running task without keeping the connection open. |
bastide usage read | [usage.read](/docs/reference/usage.read) | Read the consumption and usage counters of a contracting entity. |
bastide vercel_import accept | [vercel_import.accept](/docs/reference/vercel_import.accept) | Acknowledge the items of a Vercel import that have no equivalent, and validate the migration. |
bastide vercel_import create | [vercel_import.create](/docs/reference/vercel_import.create) | Import a Vercel project's configuration: glowsoft.json and a three-category report. |
bastide vercel_import list | [vercel_import.list](/docs/reference/vercel_import.list) | Read a project's Vercel imports: state, report, acknowledgements and calls to the source. |
bastide vercel_import variables create | [vercel_import.variables.create](/docs/reference/vercel_import.variables.create) | Import a Vercel project's variables by target and branch, with a token from the source. |
bastide webhook endpoint create | [webhook.endpoint.create](/docs/reference/webhook.endpoint.create) | Declare a webhook receiving endpoint for a project. Its secret is returned only once. |
bastide webhook endpoint delete | [webhook.endpoint.delete](/docs/reference/webhook.endpoint.delete) | Delete a receiving endpoint: its pending deliveries go with it. |
bastide webhook list | [webhook.list](/docs/reference/webhook.list) | Read a project's webhooks: its receiving endpoints and their deliveries, page by page. |
bastide webhook replay create | [webhook.replay.create](/docs/reference/webhook.replay.create) | Replay a finished delivery: one immediate attempt, then the dead letter queue if it fails. |
bastide webhook secret replace | [webhook.secret.replace](/docs/reference/webhook.secret.replace) | Replace an endpoint's secret: the old one still signs for 24 hours, then nothing. |