Manager CLI Guide

The Thyris ACP CLI is an embedded, read-only terminal in Manager. It provides a fast way to inspect realm-scoped operational data without leaving the current Manager workspace.

This page covers the embedded inspection terminal. For privileged maintenance commands such as Manager account recovery, use the separate ACP Operational CLI Guide.

Open the CLI

1. Sign in to Manager.
2. Select a realm when you want to inspect realm-scoped resources.
3. Select CLI in the lower-right corner.
4. Run help to display the commands supported by the running Manager version.

The prompt shows the signed-in Manager user and the active realm context:

operator@thyris:~/2f5f6d1a$ 

When no realm is selected, the CLI uses the global /realms context. Realm-scoped commands return an error until a realm is selected.

Security Model

The embedded CLI is not a Linux shell and does not execute arbitrary operating-system or SQL commands. It accepts a fixed allowlist of read-only commands implemented by Manager.

• The caller must have an authenticated Manager session.
• Realm-scoped queries use the realm selected in Manager.
• Commands are limited to 512 characters.
• The CLI does not expose stored provider secrets, API-key secrets, or decrypted credentials.
• API-key listings show metadata and an access-key prefix, not the secret key.
• The current implementation does not create, update, or delete resources.

Use the public ACP Engine REST API or the relevant Manager page for supported write operations.

Commands

Command	Purpose
help or man	Show the command guide.
pwd	Show the current realm context.
whoami	Show the signed-in Manager identity.
status	Show resource counts for the active realm.
ls	List available resource paths.
ls <path> [--limit N]	List rows for a resource. The default limit is 20 and the maximum is 100.
count <path>	Count rows for a resource.
cat realm	Show the active realm profile.
clear	Clear terminal output.
exit	Close the terminal.

Command history is available with the Up and Down arrow keys. Use Ctrl+L to clear the terminal.

Resource Paths

Resource	Realm required	Data shown
realms	No	Realm profile and commerce defaults.
identities	Yes	Realm users, identity types, and roles.
api-keys	Yes	Developer key metadata, prefix, and last-use time.
ai/providers	Yes	Customer-managed AI provider capabilities, models, pricing, and status.
mcp/servers	Yes	Registered MCP servers and connection state.
mcp/tools	Yes	Discovered MCP tools and enabled state.
runtime/sessions	Yes	Runtime session, agent, flow, and timestamps.
usage	Yes	Runtime transaction, token, cost, tool, and action records.

The following aliases are supported:

Alias	Resource path
providers	ai/providers
sessions	runtime/sessions
servers	mcp/servers
tools	mcp/tools
keys	api-keys

Examples

Inspect the active realm and its high-level status:

pwd
cat realm
status

Inspect realm AI configuration:

ls ai/providers

Inspect MCP and runtime state:

ls mcp/servers
ls mcp/tools --limit 100
ls runtime/sessions
count usage

Troubleshooting

Select a realm in Manager before running this command. : Select a realm and run the command again. Only realms, help, pwd, and whoami are useful without an active realm.

Unknown resource : Run ls to display the supported resource paths. Resource names are case-insensitive, but they must match a path or alias.

Unauthorized : The Manager session has expired or is missing. Sign in again and reopen the CLI.

command not found : The embedded terminal supports only the commands listed by help; operating-system commands such as bash, ssh, curl, and psql are intentionally unavailable.

An empty result is displayed as (no rows). This means the query succeeded but the selected realm has no matching records.

Merchant/store Catalog and Enrichment data is intentionally managed through the corresponding Merchant and Store dashboards, merchant Catalog API, or merchant-authenticated MCP tools. Do not use a realm ID as a merchant or store ID in new integrations.