Organization management
Reference for the daytona audit, billing, invite, key, member, org, org-key, project, registry, role, secret, and service-account commands.
Commands
This page documents the following commands. Global flags that apply to every command are listed under daytona.
| Command | Description |
|---|---|
daytona audit | Organization audit logs |
daytona billing | Organization billing: wallet, usage, invoices, top-ups |
daytona invite | Organization invitations: create, list, revoke, show, accept, decline |
daytona key | Project API keys: mint, list, revoke |
daytona member | Organization members: list, change roles, remove |
daytona org | Organizations: list, select, create, rename, delete, leave, limits |
daytona org-key | Organization API keys: mint, list, revoke |
daytona project | Projects in the selected organization: list, select, create, rename, delete, budget |
daytona registry | Project registries: set, list, get, delete |
daytona role | Inspect the organization role catalog |
daytona secret | Project secrets: set, list, get, delete |
daytona service-account | Service accounts: create, list, get, update, delete |
daytona audit
Organization audit logs
Commands
| Command | Description |
|---|---|
daytona audit list | List audit log entries |
daytona audit list
List audit log entries
daytona audit list [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--action | string | filter by action | ||
--actor | string | filter by actor user id or key id | ||
--all | bool | follow every page until exhausted | ||
--cursor | string | opaque continuation token | ||
--limit | int | 100 | max rows to return | |
--since | string | filter entries at or after this RFC3339 time | ||
--status | int | filter by HTTP status | ||
--target-id | string | filter by target id | ||
--target-type | string | filter by target type | ||
--until | string | filter entries before this RFC3339 time |
daytona billing
Organization billing: wallet, usage, invoices, top-ups
Commands
| Command | Description |
|---|---|
daytona billing balances | Read billing balances |
daytona billing charges | Read billing charges |
daytona billing info | Read billing info |
daytona billing invoice | Invoice subcommands |
daytona billing invoices | Read billing invoices |
daytona billing payment-methods | Read billing payment-methods |
daytona billing portal-url | Mint a Stripe billing portal URL |
daytona billing top-up | Create a manual wallet top-up checkout session |
daytona billing unpaid-invoices | Read billing unpaid-invoices |
daytona billing usage | Read current or past priced usage |
daytona billing wallet | Read billing wallet |
daytona billing balances
Read billing balances
Read itemized billing balances. Requires read:wallet.
daytona billing balances [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--cursor | string | forwarded billing next_page cursor | ||
--limit | int | forwarded billing limit |
daytona billing charges
Read billing charges
Read charge history. Requires read:wallet.
daytona billing charges [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--cursor | string | forwarded billing cursor | ||
--limit | int | forwarded billing limit |
daytona billing info
Read billing info
Requires read:wallet.
daytona billing infodaytona billing invoice
Invoice subcommands
Commands
| Command | Description |
|---|---|
daytona billing invoice payment-url | Mint a hosted payment URL for one invoice |
daytona billing invoice pdf | Download one invoice PDF |
daytona billing invoice payment-url
Mint a hosted payment URL for one invoice
Requires write:wallet.
daytona billing invoice payment-url <id>daytona billing invoice pdf
Download one invoice PDF
Requires read:wallet.
daytona billing invoice pdf <id> [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--out | string | write the PDF to a file instead of stdout |
daytona billing invoices
Read billing invoices
Read invoice history. Requires read:wallet.
daytona billing invoices [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--page | int | forwarded billing page | ||
--per-page | int | forwarded billing per_page |
daytona billing payment-methods
Read billing payment-methods
Requires read:wallet.
daytona billing payment-methodsdaytona billing portal-url
Mint a Stripe billing portal URL
Requires write:wallet.
daytona billing portal-url [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--open | bool | open the minted URL in your browser |
daytona billing top-up
Create a manual wallet top-up checkout session
Requires write:wallet.
daytona billing top-up [amount] [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--amount | int | top-up amount in cents |
daytona billing unpaid-invoices
Read billing unpaid-invoices
Requires read:wallet.
daytona billing unpaid-invoicesdaytona billing usage
Read current or past priced usage
Requires read:wallet.
daytona billing usage [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--past | bool | read closed billing periods instead of the current one | ||
--periods | string | forwarded billing periods query for --past |
daytona billing wallet
Read billing wallet
Requires read:wallet.
daytona billing walletdaytona invite
Organization invitations: create, list, revoke, show, accept, decline
daytona inviteCommands
| Command | Description |
|---|---|
daytona invite accept | Accept an invitation by its token or invitation link |
daytona invite create | Invite someone to the selected organization |
daytona invite decline | Decline an invitation by its token or invitation link |
daytona invite list | List invitations for the selected organization |
daytona invite revoke | Revoke one pending or declined invitation |
daytona invite show | Show the invitation behind a token or invitation link |
daytona invite accept
Accept an invitation by its token or invitation link
daytona invite accept <token|link>daytona invite create
Invite someone to the selected organization
Invite someone to the selected organization by email. The invitee receives a link to accept the invitation; when the deployment sends no email, the link is printed instead.
daytona invite create <email> [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--role | string | comma-separated role slugs |
daytona invite decline
Decline an invitation by its token or invitation link
daytona invite decline <token|link>daytona invite list
List invitations for the selected organization
daytona invite listdaytona invite revoke
Revoke one pending or declined invitation
daytona invite revoke <id>daytona invite show
Show the invitation behind a token or invitation link
Show who invited you to which organization, with which roles, and until when — before accepting or declining. Takes the dtni_ token or the full link from the invitation email.
daytona invite show <token|link>daytona key
Project API keys: mint, list, revoke
Commands
| Command | Description |
|---|---|
daytona key list | List project API keys |
daytona key mint | Mint a project API key |
daytona key revoke | Revoke a project API key |
daytona key list
List project API keys
daytona key list [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--include-revoked | bool | include revoked keys |
daytona key mint
Mint a project API key
daytona key mint [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--expires | string | expiry as a duration or RFC3339 timestamp | ||
--name | string | key name | ||
--permission | string | comma-separated project permissions | ||
--service-account | string | service account id or name to mint this key for |
daytona key revoke
Revoke a project API key
daytona key revoke <id>daytona member
Organization members: list, change roles, remove
Commands
| Command | Description |
|---|---|
daytona member list | List members of the selected organization |
daytona member remove | Remove a member from the selected organization |
daytona member update | Replace a member's roles |
daytona member list
List members of the selected organization
daytona member listExamples
daytona member list
daytona member list --org org-123daytona member remove
Remove a member from the selected organization
daytona member remove <user> [flags]Examples
daytona member remove user-123 --yes
daytona member remove user@example.com --previewFlags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--preview | bool | show the revoked-key count without removing the member |
daytona member update
Replace a member's roles
daytona member update <user> [flags]Examples
daytona member update user-123 --role admin
daytona member update user@example.com --role developer,auditor --dry-runFlags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--dry-run | bool | preview the revocation count without committing the role change | ||
--role | string | comma-separated role slugs |
daytona org
Organizations: list, select, create, rename, delete, leave, limits
Commands
| Command | Description |
|---|---|
daytona org create | Create an organization |
daytona org delete | Delete an organization (personal orgs cannot be deleted) |
daytona org get | Show one organization (default: the selected one) |
daytona org leave | Leave an organization (revokes the API keys you minted in it) |
daytona org limits | Show the organization's sandbox limits and current usage (default: the selected one) |
daytona org list | List the organizations you belong to |
daytona org update | Rename an organization |
daytona org use | Select the organization for following commands |
daytona org create
Create an organization
daytona org create <name>daytona org delete
Delete an organization (personal orgs cannot be deleted)
daytona org delete <id|name>daytona org get
Show one organization (default: the selected one)
daytona org get [id|name]daytona org leave
Leave an organization (revokes the API keys you minted in it)
The CLI also forgets cached project keys and platform tokens for that organization. If it cannot list the org's projects during cleanup, it forgets the remembered project for that org and warns that other cached credentials may remain; run daytona logout to clear them all.
daytona org leave [id|name]daytona org limits
Show the organization's sandbox limits and current usage (default: the selected one)
Show the effective sandbox limits of an organization — each with its source (assigned on the organization, the platform default, or unlimited) — and the current usage they are checked against. A sandbox create, start, resume, fork or image build refused by one of them exits 6 with "LIMIT_EXCEEDED" naming the limit, the current count and the maximum. Requires read:organization.
daytona org limits [id|name]daytona org list
List the organizations you belong to
daytona org listdaytona org update
Rename an organization
daytona org update <id|name> --name <new> [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--name | string | new name |
daytona org use
Select the organization for following commands
Selects an organization and restores the project you last used in it (or its default project). Accepts an id or an unambiguous name; with no argument shows a picker at a terminal.
daytona org use [id|name]daytona org-key
Organization API keys: mint, list, revoke
Commands
| Command | Description |
|---|---|
daytona org-key list | List organization API keys |
daytona org-key mint | Mint an organization API key |
daytona org-key revoke | Revoke an organization API key |
daytona org-key list
List organization API keys
daytona org-key list [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--include-revoked | bool | include revoked keys |
daytona org-key mint
Mint an organization API key
daytona org-key mint [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--expires | string | expiry as a duration or RFC3339 timestamp | ||
--name | string | key name | ||
--permission | string | comma-separated organization permissions |
daytona org-key revoke
Revoke an organization API key
daytona org-key revoke <id>daytona project
Projects in the selected organization: list, select, create, rename, delete, budget
Commands
| Command | Description |
|---|---|
daytona project budget | A project's monthly spend budget: get, set, remove |
daytona project create | Create a project in the selected organization |
daytona project delete | Delete a project (refused while it still holds resources) |
daytona project get | Show one project (default: the selected one) |
daytona project list | List the projects you can reach in the selected organization |
daytona project member | Project membership: list, add, remove |
daytona project service-account | Project service-account membership: list, add, remove |
daytona project update | Rename a project |
daytona project use | Select the project for following commands (remembered per organization) |
daytona project budget
A project's monthly spend budget: get, set, remove
A project's monthly spend budget caps its spend in each calendar month (UTC), at list price and before credits. When spend reaches the budget, new sandboxes in the project can't start, and after the organization's grace period running persistent sandboxes are stopped and running ephemeral sandboxes are deleted. Spend is evaluated periodically and can lag usage by several minutes.
Commands
| Command | Description |
|---|---|
daytona project budget get | Show the project's monthly budget and this month's spend (default: the selected project) |
daytona project budget remove | Remove the project's monthly budget (default: the selected project) |
daytona project budget set | Set or replace the project's monthly budget (default: the selected project) |
daytona project budget get
Show the project's monthly budget and this month's spend (default: the selected project)
daytona project budget get [id|name]daytona project budget remove
Remove the project's monthly budget (default: the selected project)
daytona project budget remove [id|name]daytona project budget set
Set or replace the project's monthly budget (default: the selected project)
daytona project budget set [id|name] --monthly-usd <amount> [flags]Examples
daytona project budget set --monthly-usd 500
daytona project budget set ml-training --monthly-usd 1250.50Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--monthly-usd | string | monthly budget in US dollars, at least 1.00 and at most two decimals (e.g. 500 or 499.99) |
daytona project create
Create a project in the selected organization
daytona project create <name>daytona project delete
Delete a project (refused while it still holds resources)
daytona project delete <id|name>daytona project get
Show one project (default: the selected one)
daytona project get [id|name]daytona project list
List the projects you can reach in the selected organization
daytona project listdaytona project member
Project membership: list, add, remove
Commands
| Command | Description |
|---|---|
daytona project member add | Add one or more members to the selected project |
daytona project member list | List members who can access the selected project |
daytona project member remove | Remove one member from the selected project |
daytona project member add
Add one or more members to the selected project
daytona project member add <user> [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--bulk | string | comma-separated user ids/emails/names to add in one request |
daytona project member list
List members who can access the selected project
daytona project member listdaytona project member remove
Remove one member from the selected project
daytona project member remove <user>daytona project service-account
Project service-account membership: list, add, remove
Commands
| Command | Description |
|---|---|
daytona project service-account add | Seat a service account in the selected project |
daytona project service-account list | List service accounts seated in the selected project |
daytona project service-account remove | Unseat a service account from the selected project |
daytona project service-account add
Seat a service account in the selected project
daytona project service-account add <service-account>daytona project service-account list
List service accounts seated in the selected project
daytona project service-account listdaytona project service-account remove
Unseat a service account from the selected project
daytona project service-account remove <service-account>daytona project update
Rename a project
daytona project update <id|name> --name <new> [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--name | string | new name |
daytona project use
Select the project for following commands (remembered per organization)
daytona project use [id|name]daytona registry
Project registries: set, list, get, delete
Commands
| Command | Description |
|---|---|
daytona registry delete | Delete a registry credential |
daytona registry get | Show one registry credential's metadata |
daytona registry list | List project registries (metadata only) |
daytona registry set | Create or update a registry credential |
daytona registry delete
Delete a registry credential
daytona registry delete <host>daytona registry get
Show one registry credential's metadata
daytona registry get <host>daytona registry list
List project registries (metadata only)
daytona registry listdaytona registry set
Create or update a registry credential
daytona registry set <host> [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--description | string | registry description (set to an empty string to clear it) | ||
--kind | string | basic | registry auth kind (basic, ghcr, gcr, ecr, ecr_role; ecr_role takes the IAM role ARN as --username and no password) | |
--password | string | registry password or token on the command line — visible via the process list and shell history; prefer --password-stdin | ||
--password-stdin | bool | read the password from stdin | ||
--username | string | registry username |
daytona role
Inspect the organization role catalog
Commands
| Command | Description |
|---|---|
daytona role list | List available roles |
daytona role list
List available roles
daytona role listdaytona secret
Project secrets: set, list, get, delete
Commands
| Command | Description |
|---|---|
daytona secret delete | Delete a project secret |
daytona secret get | Show one project's secret metadata |
daytona secret list | List project secrets (metadata only) |
daytona secret set | Create or update a project secret |
daytona secret delete
Delete a project secret
daytona secret delete <name>daytona secret get
Show one project's secret metadata
daytona secret get <name>daytona secret list
List project secrets (metadata only)
daytona secret listdaytona secret set
Create or update a project secret
daytona secret set <name> [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--allowed-domain | strings | hosts where this secret's value may be sent (exact or *.wildcard), or '*' for any verified host; '*' lets the value reach any HTTPS host including one a compromised sandbox controls | ||
--description | string | secret description (set to an empty string to clear it) | ||
--from-file | string | read the secret value from a file; strips exactly one trailing newline (or CRLF) | ||
--stdin | bool | read the secret value from stdin; strips exactly one trailing newline (or CRLF) | ||
--value | string | secret value on the command line — visible to other local users via the process list and shell history; prefer --stdin or --from-file |
daytona service-account
Service accounts: create, list, get, update, delete
Commands
| Command | Description |
|---|---|
daytona service-account create | Create a service account |
daytona service-account delete | Archive a service account and revoke its live keys |
daytona service-account get | Show one service account |
daytona service-account list | List service accounts in the selected organization |
daytona service-account update | Update a service account's name and/or roles |
daytona service-account create
Create a service account
daytona service-account create <name> [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--role | string | comma-separated role slugs |
daytona service-account delete
Archive a service account and revoke its live keys
daytona service-account delete <id>daytona service-account get
Show one service account
daytona service-account get <id>daytona service-account list
List service accounts in the selected organization
daytona service-account list [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--include-archived | bool | include archived service accounts |
daytona service-account update
Update a service account's name and/or roles
daytona service-account update <id> [flags]Flags
| Long | Short | Type | Default | Description |
|---|---|---|---|---|
--name | string | new service-account name | ||
--role | string | comma-separated role slugs |