# everruns orgs

> Organizations you belong to, and which one is active. CLI reference for everruns orgs.

Source: <https://everruns.com/docs/reference/cli/orgs/>

Organizations you belong to, and which one is active.

| Command                                                               | What it does                                                                                                                                                                                                                                     |
| --------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| [`orgs select`](#orgs-select)                                         | Interactive organization picker.                                                                                                                                                                                                                 |
| [`orgs get`](#orgs-get)                                               | Get organization details.                                                                                                                                                                                                                        |
| [`orgs list`](#orgs-list)                                             | List organizations for the current user.                                                                                                                                                                                                         |
| [`orgs resolve`](#orgs-resolve)                                       | Resolve the owning organization for a prefixed entity id (agent, session, harness, app, skill, mcp server, identity, eval).                                                                                                                      |
| [`orgs audit-logs list`](#orgs-audit-logs-list)                       | List audit logs for the caller’s organization.                                                                                                                                                                                                   |
| [`orgs egress-allowlist get`](#orgs-egress-allowlist-get)             | Get the organization’s outbound allowlist extension: whether a platform administrator granted it, its host patterns, and the deployment’s egress policy mode.                                                                                    |
| [`orgs egress-allowlist set`](#orgs-egress-allowlist-set)             | Replace the organization’s outbound allowlist extension.                                                                                                                                                                                         |
| [`orgs egress-allowlist grant set`](#orgs-egress-allowlist-grant-set) | Platform administrators only: allow or stop an organization extending the outbound allowlist (revoking keeps its patterns but stops enforcing them), and give or take back open egress (any public host the deny list allows, reads and writes). |

## orgs select

Interactive organization picker.

```bash
everruns orgs select
```

## orgs get

Get organization details.

```bash
everruns orgs get [OPTIONS] [ORG]
```

| Flag          | Description                                |
| ------------- | ------------------------------------------ |
| `--org <ORG>` | Organization’s prefixed public identifier. |

Example:

```bash
# Show an organization's details
everruns orgs get org_01h9
```

## orgs list

List organizations for the current user.

```bash
everruns orgs list [OPTIONS]
```

Example:

```bash
# See which organizations you belong to and their ids
everruns orgs list
```

## orgs resolve

Resolve the owning organization for a prefixed entity id (agent, session, harness, app, skill, mcp server, identity, eval). Requires an authenticated user; returns NotFound when the caller is not a member of the owning org or the id does not resolve.

```bash
everruns orgs resolve [OPTIONS] --id <id>
```

| Flag        | Description                           |
| ----------- | ------------------------------------- |
| `--id <ID>` | Required. Prefixed public identifier. |

Example:

```bash
# Look up an organization by its identifier
everruns orgs resolve --id org_01h9
```

## orgs audit-logs list

List audit logs for the caller’s organization. Supports domain, action, actor, and event-type filters.

```bash
everruns orgs audit-logs list [OPTIONS]
```

| Flag                        | Description                                           |
| --------------------------- | ----------------------------------------------------- |
| `--action <ACTION>`         | Filter by action string (e.g.                         |
| `--actor-id <ACTOR_ID>`     | Filter by actor UUID.                                 |
| `--before <BEFORE>`         | Cursor: return entries created before this timestamp. |
| `--domain <DOMAIN>`         | Filter by audit domain (“management” or “agent”).     |
| `--event-type <EVENT_TYPE>` | Filter by event type prefix (e.g.                     |
| `--limit <LIMIT>`           | Max entries to return (default 50, max 200).          |

Example:

```bash
# Review who changed what in the organization recently
everruns orgs audit-logs list --domain management --limit 50
```

## orgs egress-allowlist get

Get the organization’s outbound allowlist extension: whether a platform administrator granted it, its host patterns, and the deployment’s egress policy mode.

```bash
everruns orgs egress-allowlist get [OPTIONS] --org <org>
```

| Flag          | Description                       |
| ------------- | --------------------------------- |
| `--org <ORG>` | Required. Organization public ID. |

Example:

```bash
# Check whether an organization may add hosts and which ones it added
everruns orgs egress-allowlist get --org org_01h9
```

## orgs egress-allowlist set

Replace the organization’s outbound allowlist extension. Requires an organization admin and a grant from a platform administrator. Patterns must name public hosts: `example.com`, `*.example.com`, or an `https://example.com/path/` prefix.

```bash
everruns orgs egress-allowlist set [OPTIONS] --org <org> --patterns <patterns>
```

| Flag                    | Description                                                                                                                 |
| ----------------------- | --------------------------------------------------------------------------------------------------------------------------- |
| `--org <ORG>`           | Required. Organization public ID.                                                                                           |
| `--patterns <PATTERNS>` | Required. The full list of host patterns; replaces the stored list. Comma-separated or a JSON array of strings. Repeatable. |

Example:

```bash
# Let agents reach your own API hosts under a curated egress policy
everruns orgs egress-allowlist set --org org_01h9 --patterns api.example.com --patterns '*.internal.example.com' --reason 'Agents call our ticketing API'
```

## orgs egress-allowlist grant set

Platform administrators only: allow or stop an organization extending the outbound allowlist (revoking keeps its patterns but stops enforcing them), and give or take back open egress (any public host the deny list allows, reads and writes). Omitted fields keep their value.

```bash
everruns orgs egress-allowlist grant set [OPTIONS] --org <org>
```

| Flag          | Description                                                                |
| ------------- | -------------------------------------------------------------------------- |
| `--granted`   | Allow or stop this organization extending the allowlist; omitted keeps it. |
| `--open`      | Give or take back open egress; omitted keeps it.                           |
| `--org <ORG>` | Required. Organization public ID.                                          |

Example:

```bash
# Allow an organization to extend the outbound allowlist (platform administrators)
everruns orgs egress-allowlist grant set --org org_01h9 --granted true --reason 'Approved in security review'


# Give a verified organization open egress (platform administrators)
everruns orgs egress-allowlist grant set --org org_01h9 --open true --reason 'Paid account, verified card'
```