runtime profiles
runtime profiles list
List security profiles
airs runtime profiles list [options]
Options
| Flag | Required | Default | Description |
|---|---|---|---|
--limit <n> | No | 100 | Max results |
--offset <n> | No | 0 | Starting offset |
--output <format> | No | pretty | Output format: pretty, table, csv, json, yaml |
Examples
Pretty output (default)
airs runtime profiles list --limit 2
Prisma AIRS — Runtime Configuration
Security profile and topic management
Security Profiles:
00000000-0000-0000-0000-000000000001
docs-example-profile active rev:1
00000000-0000-0000-0000-000000000002
example-other-profile active rev:6
Next offset: 2
JSON output
airs runtime profiles list --limit 2 --output json
[
{
"id": "00000000-0000-0000-0000-000000000001",
"name": "docs-example-profile",
"status": "active",
"revision": 1
},
{
"id": "00000000-0000-0000-0000-000000000002",
"name": "example-other-profile",
"status": "active",
"revision": 6
}
]
YAML output (multi-doc stream — one document per profile)
airs runtime profiles list --limit 2 --output yaml
id: 00000000-0000-0000-0000-000000000001
name: docs-example-profile
status: active
revision: 1
---
id: 00000000-0000-0000-0000-000000000002
name: example-other-profile
status: active
revision: 6
runtime profiles get
Get a security profile by name or UUID
airs runtime profiles get [options] <nameOrId>
Arguments
nameOrId(required) —
Options
| Flag | Required | Default | Description |
|---|---|---|---|
--output <format> | No | pretty | Output format: pretty, json, yaml |
Examples
Pretty output (default)
airs runtime profiles get docs-example-profile
Prisma AIRS — Runtime Configuration
Security profile and topic management
Profile Detail:
ID: 00000000-0000-0000-0000-000000000001
Name: docs-example-profile
Status: active
Revision: 1
Created: user@example.com
Updated: user@example.com
Modified: 2026-05-25T13:38:21Z
Policy: {
"ai-security-profiles": [
{
"model-type": "default",
"model-configuration": {
"mask-data-in-storage": false,
"latency": {
"inline-timeout-action": "block",
"max-inline-latency": 5
},
"data-protection": {
"data-leak-detection": {
"member": null,
"action": "",
"mask-data-inline": false
},
"database-security": null
},
"app-protection": {
"default-url-category": {
"member": null
},
"url-detected-action": "block",
"malicious-code-protection": {
"name": "malicious-code-detection",
"action": "block"
}
},
"model-protection": [
{
"name": "prompt-injection",
"action": "block"
},
{
"name": "toxic-content",
"action": "high:block, moderate:alert"
}
],
"agent-protection": [
{
"name": "agent-security",
"action": "block"
}
]
}
}
]
}
JSON output (flattens management response — profileId / profileName keys)
airs runtime profiles get docs-example-profile --output json
{
"profileId": "00000000-0000-0000-0000-000000000001",
"profileName": "docs-example-profile",
"revision": 1,
"active": true,
"createdBy": "user@example.com",
"updatedBy": "user@example.com",
"lastModifiedTs": "2026-05-25T13:38:21Z",
"policy": {
"ai-security-profiles": [
{
"model-type": "default",
"model-configuration": {
"mask-data-in-storage": false,
"latency": {
"inline-timeout-action": "block",
"max-inline-latency": 5
},
"data-protection": {
"data-leak-detection": {
"member": null,
"action": "",
"mask-data-inline": false
},
"database-security": null
},
"app-protection": {
"default-url-category": {
"member": null
},
"url-detected-action": "block",
"malicious-code-protection": {
"name": "malicious-code-detection",
"action": "block"
}
},
"model-protection": [
{
"name": "prompt-injection",
"action": "block"
},
{
"name": "toxic-content",
"action": "high:block, moderate:alert"
}
],
"agent-protection": [
{
"name": "agent-security",
"action": "block"
}
]
}
}
]
}
}
YAML output (the nested policy is emitted as inline JSON, not converted to YAML)
airs runtime profiles get docs-example-profile --output yaml
profileId: 00000000-0000-0000-0000-000000000001
profileName: docs-example-profile
revision: 1
active: true
createdBy: user@example.com
updatedBy: user@example.com
lastModifiedTs: 2026-05-25T13:38:21Z
policy: {
"ai-security-profiles": [
{
"model-type": "default",
"model-configuration": {
"mask-data-in-storage": false,
"latency": {
"inline-timeout-action": "block",
"max-inline-latency": 5
},
"data-protection": {
"data-leak-detection": {
"member": null,
"action": "",
"mask-data-inline": false
},
"database-security": null
},
"app-protection": {
"default-url-category": {
"member": null
},
"url-detected-action": "block",
"malicious-code-protection": {
"name": "malicious-code-detection",
"action": "block"
}
},
"model-protection": [
{
"name": "prompt-injection",
"action": "block"
},
{
"name": "toxic-content",
"action": "high:block, moderate:alert"
}
],
"agent-protection": [
{
"name": "agent-security",
"action": "block"
}
]
}
}
]
}
runtime profiles create
Create a new security profile
airs runtime profiles create [options]
Options
| Flag | Required | Default | Description |
|---|---|---|---|
--name <name> | Yes | — | Profile name |
--no-active | No | — | Create profile as inactive |
--prompt-injection <action> | No | — | Prompt injection action (block/allow/alert) |
--toxic-content <action> | No | — | Toxic content action (e.g. "high:block, moderate:block") |
--contextual-grounding <action> | No | — | Contextual grounding action (block/allow/alert) |
--malicious-code <action> | No | — | Malicious code protection action (block/allow/alert) |
--url-action <action> | No | — | URL detected action (block/allow/alert) |
--allow-url-categories <list> | No | — | Comma-separated URL categories to allow |
--block-url-categories <list> | No | — | Comma-separated URL categories to block |
--alert-url-categories <list> | No | — | Comma-separated URL categories to alert |
--agent-security <action> | No | — | Agent security action (block/allow/alert) |
--dlp-action <action> | No | — | Data leak detection action (block/allow/alert) |
--dlp-profiles <list> | No | — | Comma-separated DLP profile names |
--mask-data-inline | No | — | Mask detected data inline |
--db-security-create <action> | No | — | Database create action (block/allow/alert) |
--db-security-read <action> | No | — | Database read action (block/allow/alert) |
--db-security-update <action> | No | — | Database update action (block/allow/alert) |
--db-security-delete <action> | No | — | Database delete action (block/allow/alert) |
--inline-timeout-action <action> | No | — | Inline timeout action (block/allow) |
--max-inline-latency <n> | No | — | Max inline latency in seconds |
--mask-data-in-storage | No | — | Mask data in storage |
--config <path> | No | — | JSON file with profile configuration (legacy) |
Examples
Create with protection flags (no JSON output flag — pretty only)
airs runtime profiles create \
--name docs-example-profile \
--prompt-injection block \
--toxic-content "high:block, moderate:alert" \
--malicious-code block \
--agent-security block \
--url-action block
Prisma AIRS — Runtime Configuration
Security profile and topic management
Profile created: 00000000-0000-0000-0000-000000000001
Profile Detail:
ID: 00000000-0000-0000-0000-000000000001
Name: docs-example-profile
Status: active
Revision: 1
Created: user@example.com
Updated: user@example.com
Modified: 2026-05-25T13:38:21Z
Policy: {
"ai-security-profiles": [
{
"model-type": "default",
"model-configuration": {
"mask-data-in-storage": false,
"latency": {
"inline-timeout-action": "block",
"max-inline-latency": 5
},
"data-protection": {
"data-leak-detection": {
"member": null,
"action": "",
"mask-data-inline": false
},
"database-security": null
},
"app-protection": {
"default-url-category": {
"member": null
},
"url-detected-action": "block",
"malicious-code-protection": {
"name": "malicious-code-detection",
"action": "block"
}
},
"model-protection": [
{
"name": "prompt-injection",
"action": "block"
},
{
"name": "toxic-content",
"action": "high:block, moderate:alert"
}
],
"agent-protection": [
{
"name": "agent-security",
"action": "block"
}
]
}
}
]
}
runtime profiles update
Update a security profile by name or UUID
airs runtime profiles update [options] <nameOrId>
Arguments
nameOrId(required) —
Options
| Flag | Required | Default | Description |
|---|---|---|---|
--name <name> | No | — | Update profile name |
--no-active | No | — | Set profile as inactive |
--active | No | — | Set profile as active |
--prompt-injection <action> | No | — | Prompt injection action (block/allow/alert) |
--toxic-content <action> | No | — | Toxic content action (e.g. "high:block, moderate:block") |
--contextual-grounding <action> | No | — | Contextual grounding action (block/allow/alert) |
--malicious-code <action> | No | — | Malicious code protection action (block/allow/alert) |
--url-action <action> | No | — | URL detected action (block/allow/alert) |
--allow-url-categories <list> | No | — | Comma-separated URL categories to allow |
--block-url-categories <list> | No | — | Comma-separated URL categories to block |
--alert-url-categories <list> | No | — | Comma-separated URL categories to alert |
--agent-security <action> | No | — | Agent security action (block/allow/alert) |
--dlp-action <action> | No | — | Data leak detection action (block/allow/alert) |
--dlp-profiles <list> | No | — | Comma-separated DLP profile names |
--mask-data-inline | No | — | Mask detected data inline |
--db-security-create <action> | No | — | Database create action (block/allow/alert) |
--db-security-read <action> | No | — | Database read action (block/allow/alert) |
--db-security-update <action> | No | — | Database update action (block/allow/alert) |
--db-security-delete <action> | No | — | Database delete action (block/allow/alert) |
--inline-timeout-action <action> | No | — | Inline timeout action (block/allow) |
--max-inline-latency <n> | No | — | Max inline latency in seconds |
--mask-data-in-storage | No | — | Mask data in storage |
--config <path> | No | — | JSON file with profile updates (legacy) |
Examples
Read-modify-write — only the flags you pass change; existing protections are preserved. New revision id returned.
airs runtime profiles update docs-example-profile \
--prompt-injection alert
Prisma AIRS — Runtime Configuration
Security profile and topic management
Profile updated: 00000000-0000-0000-0000-000000000002
Profile Detail:
ID: 00000000-0000-0000-0000-000000000002
Name: docs-example-profile
Status: active
Revision: 2
Created: user@example.com
Updated: none
Modified: 2026-05-25T13:39:05Z
Policy: {
"ai-security-profiles": [
{
"model-type": "default",
"model-configuration": {
"mask-data-in-storage": false,
"latency": {
"inline-timeout-action": "block",
"max-inline-latency": 5
},
"data-protection": {
"data-leak-detection": {
"member": null,
"action": "",
"mask-data-inline": false
},
"database-security": null
},
"app-protection": {
"default-url-category": {
"member": null
},
"url-detected-action": "block",
"malicious-code-protection": {
"name": "malicious-code-detection",
"action": "block"
}
},
"model-protection": [
{
"name": "prompt-injection",
"action": "alert"
},
{
"name": "toxic-content",
"action": "high:block, moderate:alert"
}
],
"agent-protection": [
{
"name": "agent-security",
"action": "block"
}
]
}
}
]
}
runtime profiles delete
Delete a security profile by name or UUID
airs runtime profiles delete [options] <nameOrId>
Arguments
nameOrId(required) —
Options
| Flag | Required | Default | Description |
|---|---|---|---|
--force | No | — | Force delete (removes from referencing policies) |
--updated-by <email> | No | — | Email of user performing force deletion |
Examples
Example needed
No curated input/output example for this command yet.
runtime profiles cleanup
Delete old profile revisions, keeping only the latest per name
airs runtime profiles cleanup [options]
Options
| Flag | Required | Default | Description |
|---|---|---|---|
--force | No | — | Skip confirmation — proceed with deletion |
--updated-by <email> | No | — | Email for deletion audit (default: git user.email) |
--output <format> | No | pretty | Output format: pretty or json |
Examples
Dry run (preview)
airs runtime profiles cleanup
Delete old revisions
airs runtime profiles cleanup --force
Specify email for audit trail
airs runtime profiles cleanup --force --updated-by user@example.com
JSON output
airs runtime profiles cleanup --force --output json