Skip to main content
Use fp to inspect Cloud telemetry and manage audits, findings, issues, alerts, keys, users, queries, and settings. Use failproofai for local hooks, policies, capture, and machine enrollment. Install the released Cloud CLI as an isolated tool:

Sign in

Syntax

Global options must come before the command:
Run fp COMMAND --help or fp COMMAND SUBCOMMAND --help for terminal help.

CLI commands

Authentication

Events

Lists individual agent events. The default light feed excludes raw payloads; use --full only for a bounded investigation.

Sessions

Evaluations

Errors

Usage and filter values

Organizations

API keys

Permission tokens use resource:action, such as events:add. Repeat --add, comma-separate tokens, or use dotted actions such as events:read.add.

Queries

Users

Settings

Alerts

Alert severities are info, warning, and critical. Trigger kinds are metric_threshold, custom_sql, evaluation_score, eval_compound, and per_event. Evaluation intervals must be between 30 and 86,400 seconds.

Audits

Audit create options

Include context during creation when the first run needs it. Creation commits the definition and context together before the queued run begins.
fp audits run is asynchronous. Poll fp audits runs NAME until the latest run succeeds or fails before reading its findings.

Issues

Valid issue states are firing, acknowledged, and resolved. Standalone issue severities are info, warning, and critical.

Cloud assistant

Global flags

--api-key is intended for automation. Login, organization switching, and assistant commands require a user session.

Environment variables

Explicit flags override environment variables, which override saved configuration. In API-key mode, select the tenant explicitly with --org or AGENTEYE_ORG.
Commands that delete, revoke, suppress, resolve, or replace configuration prompt by default. Use --yes only after verifying the active organization and target.