CLI reference

The promptglass CLI manages a PromptGlass deployment from your terminal or CI pipeline. It works against SaaS and self-hosted installations, and every command it runs is attributed to you in the admin audit log.

Install

brew install promptglass/tap/promptglass        # macOS / Linux
winget install PromptGlass.CLI                  # Windows
curl -fsSL https://promptglass.ai/install.sh | sh

Global flags

Flag	Description
--tenant <name>	SaaS tenant, e.g. acme.eu
--url <url>	Self-hosted base URL
--profile <name>	Named profile from ~/.config/promptglass/config.yaml
-o, --output table|json|yaml	Output format

Commands

Authentication

promptglass login [--tenant acme.eu | --url https://pg.example.com] [--client-credentials]
promptglass whoami
promptglass logout

Policies

promptglass policy list
promptglass policy get <name> -o yaml
promptglass policy apply -f <file|dir|url>
promptglass policy lint -f <file|dir>
promptglass policy test [-f <dir>] --text "<prompt>" [--user <upn>] [--app <id>] [--file <path>]
promptglass policy simulate -f <dir> --since 14d [--report out.html]
promptglass policy delete <name>

Detectors and EDM

promptglass detector list | apply -f <dir> | test <name> --text|--file|--corpus
promptglass edm schema create <name> --fields "<field:type,…>" --primary <field>
promptglass edm hash <name> --input <csv> --salt-from <kms-uri> --output <file>
promptglass edm upload <name> <file>
promptglass edm fingerprint --repo <path> --name <name> [--exclude <globs>]

Sensors and gateway

promptglass gateway status                 # replicas, policy version, detector latency, errors
promptglass gateway reload                 # force policy refresh
promptglass keys create --name <n> --team <t> [--cost-center <cc>] [--budget-monthly <usd>] [--models <list>]
promptglass keys list | revoke <id>
promptglass sensors list [--type extension|agent|gateway] [--stale 7d]
promptglass events tail [--sensor <s>] [--app <id>] [--action block]

Connectors

promptglass connectors list
promptglass connectors add <type> [flags…]       # m365-copilot, openai, openai-api, anthropic, github-copilot, google-gemini, aws-bedrock, azure-openai, vertex-ai
promptglass connectors sync <name> [--backfill 30d]
promptglass connectors status <name>

Analytics, export and discovery

promptglass export <events|adoption|cost|detections> [--group-by …] [--since …] [--format csv|parquet|json] [--dest <uri>]
promptglass discover import --format <zscaler-nss|netskope|paloalto|squid|dns-csv> --file <path>
promptglass discover report --since 30d --format html

Catalog, privacy and administration

promptglass catalog status | sync | import <file.sig>
promptglass privacy erase --user <upn> --scope content,metadata [--dry-run]
promptglass admin backup create --include config,identity --dest <uri>
promptglass airgap push --bundle <dir> --registry <host/path>

Exit codes

Code	Meaning
0	Success
1	General error
2	Validation failed (lint/test)
3	Authentication / authorization error
4	Simulation found changes above --fail-on-diff threshold