Organizations

Every command below also accepts the global options.

Add organization domain

sim organizations domains add [options]

Add Organization Domain (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--domain <value>`	Yes	Domain to claim and verify through a DNS TXT record.

List organization domains

sim organizations domains list [options]

List Organization Domains (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--limit <n>`	No	Maximum items to return (0 for everything). Defaults to `0`.
`--sort-by <value>`	No	Field used to sort the result. Accepted values: `domain`.
`--sort-order <value>`	No	Sort direction. Accepted values: `asc`, `desc`.

Remove organization domain

sim organizations domains remove <domainId> [options]

Remove Organization Domain (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`domainId`	Yes	Domain claim owned by this organization.

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`-y, --yes`	Yes	Confirm this operation.

Verify organization domain

sim organizations domains verify <domainId> [options]

Verify Organization Domain (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`domainId`	Yes	Domain claim owned by this organization.

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.

Cancel organization access request

sim organizations access-requests cancel <requestId> [options]

Cancel Organization Access Request (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`requestId`	Yes	Access request identifier.

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.

Create organization access request

sim organizations access-requests create [options]

Create Organization Access Request (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--target <json\|@file>`	Yes	Target returned by Discover Workspace Access Requests or Discover Organization Access Requests. The target must currently be requestable. (JSON, or @path / @- to read a file or stdin).
`--reason <value>`	No	Why the acting user needs this access.

Discover organization access requests

sim organizations access-requests discover [options]

Discover Organization Access Requests (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--search <value>`	No	Case-insensitive substring match against the access item label.
`--target-kind <value>`	No	Category of access to discover. Accepted values: `feature`, `integration`, `provider`, `model`, `tool`, `knowledge_connector`, `file_share_auth`, `chat_deploy_auth`, `usage_limit`.
`--state <value>`	No	Filter by the acting user’s current access. Requestable items can be submitted for review. Accepted values: `allowed`, `requestable`, `unavailable`.
`--sort-by <value>`	No	Field used to sort the result. Accepted values: `label`.
`--sort-order <value>`	No	Sort direction. Accepted values: `asc`, `desc`.
`--limit <n>`	No	Maximum items to return (0 for everything). Defaults to `100`.
`--cursor <value>`	No	Continue from nextCursor returned by a previous result.

Get organization access request settings

sim organizations access-requests settings get [options]

Get Organization Access Request Settings (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.

Update organization access request settings

sim organizations access-requests settings update [options]

Update Organization Access Request Settings (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--allow-requests <true\|false>`	Yes	Allow new requests and approvals. Disabling requests preserves history and still allows cancellation and decline. Accepted values: `true`, `false`.

List my organization access requests

sim organizations access-requests mine [options]

List My Organization Access Requests (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--status <value>`	No	Filter by request status; omit to include all statuses. Accepted values: `pending`, `fulfilled`, `declined`, `cancelled`, `closed`.
`--sort-by <value>`	No	Field used to sort the result. Accepted values: `createdAt`, `targetLabel`.
`--sort-order <value>`	No	Sort direction. Accepted values: `asc`, `desc`.
`--limit <n>`	No	Maximum items to return (0 for everything). Defaults to `100`.
`--cursor <value>`	No	Continue from nextCursor returned by a previous result.

List organization access requests

sim organizations access-requests list [options]

List Organization Access Requests (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--status <value>`	No	Filter by request status; omit to include all statuses. Accepted values: `pending`, `fulfilled`, `declined`, `cancelled`, `closed`.
`--sort-by <value>`	No	Field used to sort the result. Accepted values: `createdAt`, `targetLabel`.
`--sort-order <value>`	No	Sort direction. Accepted values: `asc`, `desc`.
`--limit <n>`	No	Maximum items to return (0 for everything). Defaults to `100`.
`--cursor <value>`	No	Continue from nextCursor returned by a previous result.
`--search <value>`	No	Case-insensitive substring match against the target label or requester name or email.

Preview organization access request

sim organizations access-requests preview <requestId> [options]

Preview Organization Access Request (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`requestId`	Yes	Access request identifier.

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.

Resolve organization access request

sim organizations access-requests resolve <requestId> [options]

Resolve Organization Access Request (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`requestId`	Yes	Access request identifier.

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--action <value>`	Yes	apply: Apply the reviewed change to the governing group or member credit cap. decline: Decline the request without changing permissions or credit limits. Accepted values: `apply`, `decline`.
`--expected-fingerprint <value>`	No	Fingerprint from Preview Organization Access Request. Review its changes and impact before applying; a stale preview returns a conflict. Available when action is apply. Required when action is apply.
`--new-limit-credits <value>`	No	Required only for a usage-limit request: a whole-number credit cap greater than the current cap. Omit for permission requests. Available when action is apply.
`--reason <value>`	No	Required explanation for declining this request. Available when action is decline. Required when action is decline.

Create organization invitation

sim organizations invitations create [options]

Create Organization Invitation (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--email <value>`	Yes	Email address of the person to invite.
`--role <value>`	No	Organization role to offer. Defaults to member; grants no workspace-specific permissions. Accepted values: `member`, `admin`.

Get organization invitation

sim organizations invitations get <invitationId> [options]

Get Organization Invitation (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`invitationId`	Yes	Invitation identifier.

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.

List organization invitations

sim organizations invitations list [options]

List Organization Invitations (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--search <value>`	No	Case-insensitive substring match against the invitee email.
`--status <value>`	No	Filter by current invitation status. Omit to include all statuses. Accepted values: `pending`, `accepted`, `rejected`, `cancelled`, `expired`.
`--sort-by <value>`	No	Field used to sort the result. Accepted values: `email`, `createdAt`.
`--sort-order <value>`	No	Sort direction. Accepted values: `asc`, `desc`.
`--limit <n>`	No	Maximum items to return (0 for everything). Defaults to `100`.
`--cursor <value>`	No	Continue from nextCursor returned by a previous result.

List organization invitation workspaces

sim organizations invitations workspaces <invitationId> [options]

List Organization Invitation Workspaces (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`invitationId`	Yes	Invitation identifier.

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--search <value>`	No	Case-insensitive substring match against the workspace name.
`--sort-by <value>`	No	Field used to sort the result. Sorting by `name` is case-sensitive and follows the storage collation, so do not rely on a case-insensitive order. Accepted values: `name`, `id`.
`--sort-order <value>`	No	Sort direction. Accepted values: `asc`, `desc`.
`--limit <n>`	No	Maximum items to return (0 for everything). Defaults to `100`.
`--cursor <value>`	No	Continue from nextCursor returned by a previous result.

Resend organization invitation

sim organizations invitations resend <invitationId> [options]

Resend Organization Invitation (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`invitationId`	Yes	Invitation identifier.

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.

Revoke organization invitation

sim organizations invitations revoke <invitationId> [options]

Revoke Organization Invitation (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`invitationId`	Yes	Invitation identifier.

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`-y, --yes`	Yes	Confirm this operation.

Delete SSO provider

sim organizations sso providers delete <providerId> [options]

Delete SSO Provider (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`providerId`	Yes	Identity provider identifier.

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`-y, --yes`	Yes	Confirm this operation.

Get SSO provider

sim organizations sso providers get <providerId> [options]

Get SSO Provider (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`providerId`	Yes	Identity provider identifier.

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.

List SSO providers

sim organizations sso providers list [options]

List SSO Providers (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--limit <n>`	No	Maximum items to return (0 for everything). Defaults to `0`.
`--sort-by <value>`	No	Field used to sort the result. Accepted values: `providerId`, `domain`.
`--sort-order <value>`	No	Sort direction. Accepted values: `asc`, `desc`.

Save SSO provider

sim organizations sso providers save [options]

Save SSO Provider (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--provider-type <value>`	Yes	oidc: Configure an OpenID Connect identity provider. saml: Configure a SAML identity provider. Accepted values: `oidc`, `saml`.
`--provider-id <value>`	Yes	Globally unique provider ID; saving an existing provider replaces its supplied configuration.
`--issuer <value>`	Yes	Identity provider issuer URL.
`--domain <value>`	Yes	Email domain already verified by this organization.
`--jit-provisioning-enabled`	No	Allow SSO sign-in to provision organization membership, subject to eligibility and available seats.
`--no-jit-provisioning-enabled`	No	Send --jit-provisioning-enabled as false.
`--mapping <json\|@file>`	No	Identity-provider claims mapped to user fields. (JSON, or @path / @- to read a file or stdin).
`--client-id <value>`	No	Identity provider client identifier. Available when providerType is oidc. Required when providerType is oidc.
`--client-secret <value\|@file>`	No	Write-only OIDC client secret; the redacted marker from providers get preserves an existing secret. Passing it inline exposes it to shell history and process listings. Required when --provider-type is oidc (@path / @- reads a file or stdin verbatim, including trailing newlines; @@value for a literal leading @).
`--scopes <json\|@file>`	No	OIDC scopes; offline_access is omitted. Available when providerType is oidc. (JSON, or @path / @- to read a file or stdin).
`--pkce`	No	Use PKCE for the authorization flow. Available when providerType is oidc.
`--no-pkce`	No	Send --pkce as false.
`--authorization-endpoint <value>`	No	Optional authorization endpoint; otherwise resolved through issuer discovery. Available when providerType is oidc.
`--token-endpoint <value>`	No	Optional token endpoint; otherwise resolved through issuer discovery. Available when providerType is oidc.
`--user-info-endpoint <value>`	No	Optional UserInfo endpoint. Available when providerType is oidc.
`--skip-user-info-endpoint`	No	Read identity claims from the ID token instead of calling UserInfo. Available when providerType is oidc.
`--no-skip-user-info-endpoint`	No	Send --skip-user-info-endpoint as false.
`--jwks-endpoint <value>`	No	Optional signing-key endpoint; otherwise resolved through issuer discovery. Available when providerType is oidc.
`--entry-point <value>`	No	Identity provider SAML sign-in endpoint. Available when providerType is saml. Required when providerType is saml.
`--cert <value>`	No	Identity provider signing certificate. Available when providerType is saml. Required when providerType is saml.
`--callback-url <value>`	No	SAML callback URL; defaults to this provider’s Sim callback. Available when providerType is saml.
`--audience <value>`	No	SAML audience; omission preserves the saved value. Available when providerType is saml.
`--want-assertions-signed`	No	Require signed assertions; omission preserves the saved value. Available when providerType is saml.
`--no-want-assertions-signed`	No	Send --want-assertions-signed as false.
`--signature-algorithm <value>`	No	Signature algorithm accepted by the SAML configuration validator; omission preserves the saved value. Available when providerType is saml.
`--digest-algorithm <value>`	No	Digest algorithm accepted by the SAML configuration validator; omission preserves the saved value. Available when providerType is saml.
`--identifier-format <value>`	No	SAML NameID format; omission clears the saved value. Available when providerType is saml.
`--idp-metadata <value>`	No	Identity provider metadata XML; omission clears the saved document. Available when providerType is saml.

Set primary SSO provider

sim organizations sso providers primary <providerId> [options]

Set Primary SSO Provider (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`providerId`	Yes	Identity provider identifier.

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.

Get SSO policy

sim organizations sso policy get [options]

Get SSO Policy (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.

Update SSO policy

sim organizations sso policy update [options]

Update SSO Policy (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--require-sso <true\|false>`	Yes	Require organization SSO on future sign-ins; existing sessions remain active. Accepted values: `true`, `false`.

Get organization

sim organizations get <organizationId>

Get Organization (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`organizationId`	Yes	Organization identifier.

Get organization member credit limit

sim organizations members usage-limit get <userId> [options]

Get Organization Member Credit Limit (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`userId`	Yes	User ID of an organization member or external collaborator with workspace access in this organization. Use List Organization Members or List Workspace Members to find it.

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.

Update organization member credit limit

sim organizations members usage-limit update <userId> [options]

Update Organization Member Credit Limit (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`userId`	Yes	User ID of an organization member or external collaborator with workspace access in this organization. Use List Organization Members or List Workspace Members to find it.

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--credit-limit <number\|null>`	Yes	Credit cap for this person. Send null to clear the cap or 0 to prevent further credit-consuming usage. Organization limits still apply.

List organization members

sim organizations members list [options]

List Organization Members (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--search <value>`	No	Case-insensitive substring match against member name or email.
`--sort-by <value>`	No	Field used to sort the result. Sorting by `name` is case-sensitive and follows the storage collation, so do not rely on a case-insensitive order. Accepted values: `name`, `email`, `joinedAt`.
`--sort-order <value>`	No	Sort direction. Accepted values: `asc`, `desc`.
`--limit <n>`	No	Maximum items to return (0 for everything). Defaults to `0`.

Remove organization member

sim organizations members remove <userId> [options]

Remove Organization Member (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`userId`	Yes	User identifier of the organization member.

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`-y, --yes`	Yes	Confirm this operation.

Update organization member

sim organizations members update <userId> [options]

Update Organization Member (OAuth login or personal API key required)

Arguments

Argument	Required	Description
`userId`	Yes	User identifier of the organization member.

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--role <value>`	Yes	New organization role. Ownership transfers use a separate operation. Accepted values: `member`, `admin`.

Get organization usage breakdown

sim organizations usage breakdown [options]

Get Organization Usage Breakdown (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--preset <value>`	No	Reporting window. Custom requires startDate and endDate and is capped at 92 days; other presets reject those bounds. Resolved billing windows are capped at 366 days. Accepted values: `current-period`, `previous-period`, `7d`, `30d`, `custom`.
`--start-date <value>`	No	First calendar date included, in the selected timezone. Requires preset=custom.
`--end-date <value>`	No	Last calendar date included, in the selected timezone. Requires preset=custom.
`--timezone <value>`	No	IANA timezone for calendar boundaries; defaults to UTC.
`--dimension <value>`	Yes	Usage grouping dimension. Accepted values: `member`, `workspace`, `workflow`, `model`, `byok`, `source`.
`--limit <value>`	No	Maximum ranked groups to return. Remaining usage is summarized in other. Must be a whole number from 1 to 100. Defaults to 50.

Get organization usage summary

sim organizations usage summary [options]

Get Organization Usage Summary (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--preset <value>`	No	Reporting window. Custom requires startDate and endDate and is capped at 92 days; other presets reject those bounds. Resolved billing windows are capped at 366 days. Accepted values: `current-period`, `previous-period`, `7d`, `30d`, `custom`.
`--start-date <value>`	No	First calendar date included, in the selected timezone. Requires preset=custom.
`--end-date <value>`	No	Last calendar date included, in the selected timezone. Requires preset=custom.
`--timezone <value>`	No	IANA timezone for calendar boundaries; defaults to UTC.

List organization usage events

sim organizations usage events [options]

List Organization Usage Events (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--preset <value>`	No	Reporting window. Custom requires startDate and endDate and is capped at 92 days; other presets reject those bounds. Resolved billing windows are capped at 366 days. Accepted values: `current-period`, `previous-period`, `7d`, `30d`, `custom`.
`--start-date <value>`	No	First calendar date included, in the selected timezone. Requires preset=custom.
`--end-date <value>`	No	Last calendar date included, in the selected timezone. Requires preset=custom.
`--timezone <value>`	No	IANA timezone for calendar boundaries; defaults to UTC.
`--source <value>`	No	Restrict events to one product surface. Accepted values: `workflow`, `wand`, `sim-chat`, `mcp_copilot`, `mothership_block`, `knowledge-base`, `voice-input`, `enrichment`, `voice-output`, `api-tool`.
`--limit <n>`	No	Maximum items to return (0 for everything). Defaults to `100`.
`--cursor <value>`	No	Continue from nextCursor returned by a previous result.
`--sort-by <value>`	No	Field used to sort the result. Accepted values: `createdAt`.
`--sort-order <value>`	No	Sort direction. Accepted values: `asc`, `desc`.

List organizations

sim organizations list [options]

List Organizations (OAuth login or personal API key required)

Options

Option	Required	Description
`--search <value>`	No	Case-insensitive substring match against the organization name.
`--sort-by <value>`	No	Field used to sort the result. Sorting by `name` is case-sensitive and follows the storage collation, so do not rely on a case-insensitive order. Accepted values: `name`, `createdAt`.
`--sort-order <value>`	No	Sort direction. Accepted values: `asc`, `desc`.
`--limit <n>`	No	Maximum items to return (0 for everything). Defaults to `0`.

List organization workspaces

sim organizations workspaces [options]

List Organization Workspaces (OAuth login or personal API key required)

Options

Option	Required	Description
`--organization <value>`	Yes	Organization identifier.
`--search <value>`	No	Case-insensitive substring match against the workspace name.
`--sort-by <value>`	No	Field used to sort the result. Sorting by `name` is case-sensitive and follows the storage collation, so do not rely on a case-insensitive order. Accepted values: `name`, `id`.
`--sort-order <value>`	No	Sort direction. Accepted values: `asc`, `desc`.
`--limit <n>`	No	Maximum items to return (0 for everything). Defaults to `0`.

Organizations

On this page