airs redteam
AI Red Team scan operations
Usage: airs redteam [OPTIONS] [COMMAND]
Commands:
abort Abort a running scan
adapter Manage custom target adapters (scripted targets run via the network broker)
categories List available attack categories
devices Manage Red Team devices
eula Manage Red Team EULA
instances Manage Red Team instances
languages List tenant languages and supported job types
list List recent scans [aliases: ls]
network-broker Manage red team network broker channels
prompt-sets Manage custom prompt sets
prompts Manage prompts within prompt sets
properties Manage custom attack properties
registry-credentials Get or create registry credentials
report Generate an environment report, or view an individual scan report by job ID [aliases: dashboard]
scan Execute a red team scan against a target
status Check scan status
targets Manage red team targets
help Print this message or the help of the given subcommand(s)
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam abort
Abort a running scan
Usage: airs redteam abort [OPTIONS] <jobId>
Arguments:
<jobId> Scan job UUID
Options:
--force Skip confirmation prompt
--output <format> Ignored by this command (it prints no data); must still be one of pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam adapter
Manage custom target adapters (scripted targets run via the network broker)
Usage: airs redteam adapter [OPTIONS] [COMMAND]
Commands:
create Create a custom target adapter
delete Delete a custom target adapter [aliases: rm]
get Get a custom target adapter
list List custom target adapters [aliases: ls]
update Update a custom target adapter (read-modify-write; variables preserved unless --variables)
validate Run an adapter script end-to-end through the broker channel without saving
help Print this message or the help of the given subcommand(s)
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam adapter create
Create a custom target adapter
Usage: airs redteam adapter create [OPTIONS] --name <name> --prompt <text>
Options:
--name <name> Adapter name
--output <format> Output format: pretty, table, json
--prompt <text> Sample prompt used to exercise the adapter during validation (not stored)
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--script-file <path> Path to the adapter script (encoded to base64 for you)
--script-b64 <b64> Adapter script, already base64-encoded
--tenant <name> Use this registered tenant for one invocation without changing the selection
--description <text> Adapter description
--channel <uuid> Network broker channel UUID (required to activate)
--variables <json> JSON array of { key, value, type: VAR|SECRET } (no SECRET values; use --variables-file)
--variables-file <path> JSON file with the variables (use it for SECRET values)
--draft Save as DRAFT without running the validation script
-h, --help Print help
Examples:
$ airs redteam adapter create --name my-adapter --script-file ./adapter.py --channel 550e8400-... --prompt 'Hello' --variables '[{"key":"endpoint","value":"http://agent.svc:8080","type":"VAR"}]'
$ airs redteam adapter create --name my-adapter --script-file ./adapter.py --prompt Hello --draft
$ airs redteam adapter create --name my-adapter --script-file ./adapter.py --channel 550e8400-... --prompt 'Hello' --variables-file variables.json
airs redteam adapter delete
Delete a custom target adapter
Usage: airs redteam adapter delete [OPTIONS] <uuid>
Arguments:
<uuid> UUID
Options:
--force Skip confirmation prompt
--output <format> Ignored by this command (it prints no data); must still be one of pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam adapter get
Get a custom target adapter
Usage: airs redteam adapter get [OPTIONS] <uuid>
Arguments:
<uuid> Adapter UUID
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam adapter list
List custom target adapters
Usage: airs redteam adapter list [OPTIONS]
Options:
--limit <n> Max results
--output <format> Output format: pretty, table, json
--offset <n> Starting offset
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--search <text> Filter by search text
--all Walk all pages
--tenant <name> Use this registered tenant for one invocation without changing the selection
--max <n> Maximum items with --all; 0 removes the cap (default: 10000)
-h, --help Print help
airs redteam adapter update
Update a custom target adapter (read-modify-write; variables preserved unless --variables)
Usage: airs redteam adapter update [OPTIONS] --prompt <text> <uuid>
Arguments:
<uuid> Adapter UUID
Options:
--output <format> Output format: pretty, table, json
--prompt <text> Sample validation prompt — required on every update because upstream never stores it
--name <name> New adapter name
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--script-file <path> New adapter script file (encoded to base64 for you)
--script-b64 <b64> New adapter script, already base64-encoded
--tenant <name> Use this registered tenant for one invocation without changing the selection
--description <text> New description
--channel <uuid> New network broker channel UUID
--variables <json> REPLACES the whole variable set — omitted keys are deleted upstream. Omit this flag to preserve stored variables.
--variables-file <path> JSON file with the variables (use it for SECRET values)
--draft Save as DRAFT without re-running the validation script
-h, --help Print help
Examples:
$ airs redteam adapter update 550e8400-... --description 'new description' --prompt 'Hello'
airs redteam adapter validate
Run an adapter script end-to-end through the broker channel without saving
Usage: airs redteam adapter validate [OPTIONS] --channel <uuid> --prompt <text>
Options:
--channel <uuid> Network broker channel UUID (must be ONLINE)
--output <format> Output format: pretty, table, json
--prompt <text> Sample prompt to send through the adapter
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--script-file <path> Path to the adapter script (encoded to base64 for you)
--script-b64 <b64> Adapter script, already base64-encoded
--tenant <name> Use this registered tenant for one invocation without changing the selection
--variables <json> JSON array of { key, value, type } — the FULL set the script needs
--variables-file <path> JSON file with the variables (use it for SECRET values)
--adapter <uuid> Existing adapter: resolves redacted/null variable values from its stored secrets (and supplies its variable set when --variables is omitted)
-h, --help Print help
Examples:
$ airs redteam adapter validate --script-file ./adapter.py --channel 550e8400-... --prompt 'Hello' --variables '[{"key":"endpoint","value":"http://agent.svc:8080","type":"VAR"}]'
$ airs redteam adapter validate --script-file ./adapter.py --channel 550e8400-... --prompt 'Hello' --adapter 660e8400-...
airs redteam categories
List available attack categories
Usage: airs redteam categories [OPTIONS]
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam devices
Manage Red Team devices
Usage: airs redteam devices [OPTIONS] [COMMAND]
Commands:
create Create devices for an instance
delete Delete devices by serial numbers [aliases: rm]
update Update devices for an instance (PATCH)
help Print this message or the help of the given subcommand(s)
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam devices create
Create devices for an instance
Usage: airs redteam devices create [OPTIONS] --config <path> <tenantId>
Arguments:
<tenantId> Red Team tenant id
Options:
--config <path> JSON file with device request
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam devices delete
Delete devices by serial numbers
Usage: airs redteam devices delete [OPTIONS] --serial-numbers <list> <tenantId>
Arguments:
<tenantId> Red Team tenant id
Options:
--output <format> Output format: pretty, table, json
--serial-numbers <list> Comma-separated serial numbers
--force Skip confirmation prompt
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam devices update
Update devices for an instance (PATCH)
Usage: airs redteam devices update [OPTIONS] --config <path> <tenantId>
Arguments:
<tenantId> Red Team tenant id
Options:
--config <path> JSON file with device request
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam eula
Manage Red Team EULA
Usage: airs redteam eula [OPTIONS] [COMMAND]
Commands:
accept Accept the EULA
content Display EULA content
status Check EULA acceptance status
help Print this message or the help of the given subcommand(s)
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam eula accept
Accept the EULA
Usage: airs redteam eula accept [OPTIONS]
Options:
--force Skip confirmation prompt
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam eula content
Display EULA content
Usage: airs redteam eula content [OPTIONS]
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam eula status
Check EULA acceptance status
Usage: airs redteam eula status [OPTIONS]
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam instances
Manage Red Team instances
Usage: airs redteam instances [OPTIONS] [COMMAND]
Commands:
create Create an instance
delete Delete an instance [aliases: rm]
get Get instance details
update Update an instance
help Print this message or the help of the given subcommand(s)
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam instances create
Create an instance
Usage: airs redteam instances create [OPTIONS] --tsg-id <id> --tenant-id <id> --app-id <id> --region <region>
Options:
--output <format> Output format: pretty, table, json
--tsg-id <id> TSG ID
--quiet Suppress status and decorative output (data and errors still print)
--tenant-id <id> Tenant ID
--app-id <id> App ID
--debug Write redacted API diagnostics to a private JSONL file
--region <region> Region
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam instances delete
Delete an instance
Usage: airs redteam instances delete [OPTIONS] <tenantId>
Arguments:
<tenantId> Red Team tenant id
Options:
--force Skip confirmation prompt
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam instances get
Get instance details
Usage: airs redteam instances get [OPTIONS] <tenantId>
Arguments:
<tenantId> Red Team tenant id
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam instances update
Update an instance
Usage: airs redteam instances update [OPTIONS] --tsg-id <id> --app-id <id> --region <region> <tenantId>
Arguments:
<tenantId> Red Team tenant id
Options:
--output <format> Output format: pretty, table, json
--tsg-id <id> TSG ID
--app-id <id> App ID
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--region <region> Region
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam languages
List tenant languages and supported job types
Usage: airs redteam languages [OPTIONS]
Options:
--management Query the management-plane endpoint instead of the data plane
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam list
List recent scans
Usage: airs redteam list [OPTIONS]
Options:
--output <format> Output format: pretty, table, json
--status <status> Filter by status (QUEUED, RUNNING, COMPLETED, FAILED, ABORTED)
--quiet Suppress status and decorative output (data and errors still print)
--type <type> Filter by job type (STATIC, DYNAMIC, CUSTOM)
--debug Write redacted API diagnostics to a private JSONL file
--target <uuid> Filter by target UUID
--limit <n> Max results (default: "10")
--tenant <name> Use this registered tenant for one invocation without changing the selection
--offset <n> Item offset (default: 0)
--all Walk all pages
--max <n> Maximum items with --all; 0 removes the cap (default: 10000)
-h, --help Print help
airs redteam network-broker
Manage red team network broker channels
Usage: airs redteam network-broker [OPTIONS] [COMMAND]
Commands:
channels Manage network broker channels
stats Show network broker channel statistics
help Print this message or the help of the given subcommand(s)
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam network-broker channels
Manage network broker channels
Usage: airs redteam network-broker channels [OPTIONS] [COMMAND]
Commands:
create Create a network broker channel
get Get a network broker channel
list List network broker channels [aliases: ls]
update Update a network broker channel
help Print this message or the help of the given subcommand(s)
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam network-broker channels create
Create a network broker channel
Usage: airs redteam network-broker channels create [OPTIONS] --name <name>
Options:
--name <name> Channel name
--output <format> Output format: pretty, table, json
--description <text> Channel description
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam network-broker channels get
Get a network broker channel
Usage: airs redteam network-broker channels get [OPTIONS] <channelId>
Arguments:
<channelId> Channel UUID
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam network-broker channels list
List network broker channels
Usage: airs redteam network-broker channels list [OPTIONS]
Options:
--limit <n> Max results
--output <format> Output format: pretty, table, json
--offset <n> Starting offset
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--search <text> Filter by search text
--all Walk all pages
--tenant <name> Use this registered tenant for one invocation without changing the selection
--max <n> Maximum items with --all; 0 removes the cap (default: 10000)
--status <status>... Filter by status (ONLINE, OFFLINE, DRAFT)
-h, --help Print help
airs redteam network-broker channels update
Update a network broker channel
Usage: airs redteam network-broker channels update [OPTIONS] <channelId>
Arguments:
<channelId> Channel UUID
Options:
--name <name> New channel name
--output <format> Output format: pretty, table, json
--description <text> New channel description
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam network-broker stats
Show network broker channel statistics
Usage: airs redteam network-broker stats [OPTIONS]
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam prompt-sets
Manage custom prompt sets
Usage: airs redteam prompt-sets [OPTIONS] [COMMAND]
Commands:
archive Archive a prompt set
create Create a new prompt set
download Download CSV template for a prompt set
get Get prompt set details
list List custom prompt sets [aliases: ls]
update Update a prompt set
upload Upload CSV prompts to a prompt set
help Print this message or the help of the given subcommand(s)
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam prompt-sets archive
Archive a prompt set
Usage: airs redteam prompt-sets archive [OPTIONS] <uuid>
Arguments:
<uuid> Prompt set UUID
Options:
--output <format> Ignored by this command (it prints no data); must still be one of pretty, table, json
--unarchive Unarchive instead
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam prompt-sets create
Create a new prompt set
Usage: airs redteam prompt-sets create [OPTIONS] --name <name>
Options:
--name <name> Prompt set name
--output <format> Output format: pretty, table, json
--description <desc> Prompt set description
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam prompt-sets download
Download CSV template for a prompt set
Usage: airs redteam prompt-sets download [OPTIONS] <uuid>
Arguments:
<uuid> Prompt set UUID
Options:
--output <format> Ignored by this command (it prints a CSV file); must still be one of pretty, table, json
--output-file <path> Output file path; - for stdout; never overwrite
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam prompt-sets get
Get prompt set details
Usage: airs redteam prompt-sets get [OPTIONS] <uuid>
Arguments:
<uuid> Prompt set UUID
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam prompt-sets list
List custom prompt sets
Usage: airs redteam prompt-sets list [OPTIONS]
Options:
--limit <n> Max results (client-side)
--output <format> Output format: pretty, table, json
--offset <n> Starting offset (client-side)
--quiet Suppress status and decorative output (data and errors still print)
--all Walk all pages
--debug Write redacted API diagnostics to a private JSONL file
--max <n> Maximum items with --all; 0 removes the cap (default: 10000)
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam prompt-sets update
Update a prompt set
Usage: airs redteam prompt-sets update [OPTIONS] <uuid>
Arguments:
<uuid> Prompt set UUID
Options:
--name <name> New name
--output <format> Output format: pretty, table, json
--description <desc> New description
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam prompt-sets upload
Upload CSV prompts to a prompt set
Usage: airs redteam prompt-sets upload [OPTIONS] <uuid> <file>
Arguments:
<uuid> Prompt set UUID
<file> CSV file (at most 7 MiB)
Options:
--output <format> Ignored by this command (it prints no data); must still be one of pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam prompts
Manage prompts within prompt sets
Usage: airs redteam prompts [OPTIONS] [COMMAND]
Commands:
add Add a prompt to a prompt set
delete Delete a prompt [aliases: rm]
get Get prompt details
list List prompts in a prompt set [aliases: ls]
update Update a prompt
help Print this message or the help of the given subcommand(s)
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam prompts add
Add a prompt to a prompt set
Usage: airs redteam prompts add [OPTIONS] --prompt <text> <setUuid>
Arguments:
<setUuid> Prompt set UUID
Options:
--output <format> Output format: pretty, table, json
--prompt <text> Prompt text
--goal <text> Prompt goal
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam prompts delete
Delete a prompt
Usage: airs redteam prompts delete [OPTIONS] <setUuid> <promptUuid>
Arguments:
<setUuid> Prompt set UUID
<promptUuid> Prompt UUID
Options:
--force Skip confirmation prompt
--output <format> Ignored by this command (it prints no data); must still be one of pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam prompts get
Get prompt details
Usage: airs redteam prompts get [OPTIONS] <setUuid> <promptUuid>
Arguments:
<setUuid> Prompt set UUID
<promptUuid> Prompt UUID
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam prompts list
List prompts in a prompt set
Usage: airs redteam prompts list [OPTIONS] <setUuid>
Arguments:
<setUuid> Prompt set UUID
Options:
--limit <n> Max results (default: "50")
--output <format> Output format: pretty, table, json
--offset <n> Item offset (default: 0)
--quiet Suppress status and decorative output (data and errors still print)
--all Walk all pages
--debug Write redacted API diagnostics to a private JSONL file
--max <n> Maximum items with --all; 0 removes the cap (default: 10000)
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam prompts update
Update a prompt
Usage: airs redteam prompts update [OPTIONS] <setUuid> <promptUuid>
Arguments:
<setUuid> Prompt set UUID
<promptUuid> Prompt UUID
Options:
--output <format> Output format: pretty, table, json
--prompt <text> New prompt text
--goal <text> New goal
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam properties
Manage custom attack properties
Usage: airs redteam properties [OPTIONS] [COMMAND]
Commands:
add-value Create a property value
create Create a property name
list List property names [aliases: ls]
values List values for a property
help Print this message or the help of the given subcommand(s)
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam properties add-value
Create a property value
Usage: airs redteam properties add-value [OPTIONS] --name <name> --value <value>
Options:
--name <name> Property name
--output <format> Ignored by this command (it prints no data); must still be one of pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--value <value> Property value
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam properties create
Create a property name
Usage: airs redteam properties create [OPTIONS] --name <name>
Options:
--name <name> Property name
--output <format> Ignored by this command (it prints no data); must still be one of pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam properties list
List property names
Usage: airs redteam properties list [OPTIONS]
Options:
--limit <n> Max results (client-side)
--output <format> Output format: pretty, table, json
--offset <n> Starting offset (client-side)
--quiet Suppress status and decorative output (data and errors still print)
--all Walk all pages
--debug Write redacted API diagnostics to a private JSONL file
--max <n> Maximum items with --all; 0 removes the cap (default: 10000)
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam properties values
List values for a property
Usage: airs redteam properties values [OPTIONS] <name>
Arguments:
<name> Property name
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam registry-credentials
Get or create registry credentials
Usage: airs redteam registry-credentials [OPTIONS]
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam report
Generate an environment report, or view an individual scan report by job ID
Usage: airs redteam report [OPTIONS] [jobId]
Arguments:
[jobId] Scan job UUID (omit for the environment report)
Options:
--attacks Individual scan only: include attack list (default: false)
--output <format> Output format of a scan job report: pretty, table, json; the environment report is written as HTML (omit --output)
--quiet Suppress status and decorative output (data and errors still print)
--severity <level> Individual scan only: filter attacks by severity
--debug Write redacted API diagnostics to a private JSONL file
--limit <n> Individual scan only: max attacks to show (default: "20")
--output-file <path> Destination (default: new timestamped file in CWD); - for stdout; never overwrite
--tenant <name> Use this registered tenant for one invocation without changing the selection
--title <text> Report title (default: "Red Team environment report")
--max-pages <n> Page budget per source, 1–100 (15 records/page) (default: "40")
--strict Exit 1 after writing if any source is incomplete
-h, --help Print help
Examples:
$ airs redteam report --output-file ./airs-daily.html
$ airs redteam report
$ airs redteam report --strict --max-pages 20 --output-file - > daily.html
airs redteam scan
Execute a red team scan against a target
Usage: airs redteam scan [OPTIONS] --target <uuid> --name <name>
Options:
--output <format> Output format: pretty, table, json
--target <uuid> Target UUID
--name <name> Scan name
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--type <type> Job type: STATIC, DYNAMIC, or CUSTOM (default: "STATIC")
--categories <json> Category filter JSON (STATIC scans)
--tenant <name> Use this registered tenant for one invocation without changing the selection
--prompt-sets <uuids> Comma-separated prompt set UUIDs (CUSTOM scans)
--goals <file> JSON file or inline JSON array of attack goals (DYNAMIC scans)
--depth <number> Max conversation turns per goal (DYNAMIC scans) (default: "10")
--breadth <number> Parallel agents per goal (DYNAMIC scans) (default: "6")
--no-wait Submit scan without waiting for completion
--wait-timeout <minutes> Stop waiting after this many minutes; the scan keeps running (default: 1440)
-h, --help Print help
Examples:
$ airs redteam scan --target <target-uuid> --name "nightly-static"
$ airs redteam scan --target <target-uuid> --name "custom-run" --type CUSTOM --prompt-sets <set-uuid>
$ airs redteam scan --target <target-uuid> --name "agent-probe" --type DYNAMIC --goals goals.json --no-wait
airs redteam status
Check scan status
Usage: airs redteam status [OPTIONS] <jobId>
Arguments:
<jobId> Scan job UUID
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam targets
Manage red team targets
Usage: airs redteam targets [OPTIONS] [COMMAND]
Commands:
backup Back up red team targets to one private JSON file
create Create a new red team target
delete Delete a red team target [aliases: rm]
error-logs List target-profile error logs
get Get target details
init Scaffold a target config JSON from a provider template
list List configured red team targets [aliases: ls]
metadata Get target field metadata
probe Test target connection without saving
profile View target profile
restore Restore red team targets from an airs backup file
templates Get provider-specific target templates
update Update a red team target
update-profile Update target profile
validate-auth Validate target auth credentials
help Print this message or the help of the given subcommand(s)
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam targets backup
Back up red team targets to one private JSON file
Usage: airs redteam targets backup [OPTIONS]
Options:
--output <format> Output format: pretty, table, json
--output-dir <path> Existing directory for the backup file (default: the current directory)
--name <targetName> Back up the targets with this name
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--file-format <format> Backup file format: json (default: "json")
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
Examples:
$ airs redteam targets backup
$ airs redteam targets backup --output-dir ./backups --name "Production chatbot"
airs redteam targets create
Create a new red team target
Usage: airs redteam targets create [OPTIONS] --config <path>
Options:
--config <path> JSON file with target configuration
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--validate Validate target connection before saving
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam targets delete
Delete a red team target
Usage: airs redteam targets delete [OPTIONS] <uuid>
Arguments:
<uuid> UUID
Options:
--force Skip confirmation prompt
--output <format> Ignored by this command (it prints no data); must still be one of pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam targets error-logs
List target-profile error logs
Usage: airs redteam targets error-logs [OPTIONS] <targetId>
Arguments:
<targetId> Target UUID
Options:
--limit <n> Max results
--output <format> Output format: pretty, table, json
--offset <n> Not supported by the red team API (refused; use --limit)
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--search <text> Not supported by the red team API (refused)
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
Examples:
$ airs redteam targets error-logs <targetId>
airs redteam targets get
Get target details
Usage: airs redteam targets get [OPTIONS] <uuid>
Arguments:
<uuid> Target UUID
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam targets init
Scaffold a target config JSON from a provider template
Usage: airs redteam targets init [OPTIONS] <provider>
Arguments:
<provider> Provider (OPENAI, HUGGING_FACE, DATABRICKS, BEDROCK, REST, STREAMING, WEBSOCKET, CUSTOM_TARGET_ADAPTER)
Options:
--output <format> Output format: pretty, table, json
--output-file <file> Output file path; never overwrite
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam targets list
List configured red team targets
Usage: airs redteam targets list [OPTIONS]
Options:
--limit <n> Max results (client-side)
--output <format> Output format: pretty, table, json
--offset <n> Starting offset (client-side)
--quiet Suppress status and decorative output (data and errors still print)
--all Walk all pages
--debug Write redacted API diagnostics to a private JSONL file
--max <n> Maximum items with --all; 0 removes the cap (default: 10000)
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
Examples:
$ airs redteam targets list
$ airs redteam targets list --output json
$ airs redteam targets ls --limit 5
airs redteam targets metadata
Get target field metadata
Usage: airs redteam targets metadata [OPTIONS]
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam targets probe
Test target connection without saving
Usage: airs redteam targets probe [OPTIONS] --config <path>
Options:
--config <path> JSON file with connection params
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam targets profile
View target profile
Usage: airs redteam targets profile [OPTIONS] <uuid>
Arguments:
<uuid> Target UUID
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam targets restore
Restore red team targets from an airs backup file
Usage: airs redteam targets restore [OPTIONS]
Options:
--file <path> Backup file to restore
--output <format> Output format: pretty, table, json
--overwrite Update existing targets with same name (default: skip)
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--validate Validate target connection before saving
--dry-run Show what would be restored; change nothing
--tenant <name> Use this registered tenant for one invocation without changing the selection
--force Skip the --overwrite confirmation
--allow-other-tenant Restore a backup exported from another TSG
-h, --help Print help
Examples:
$ airs redteam targets restore --file airs-redteam-targets-20261017T120000Z-0a1b2c3d.json --dry-run
$ airs redteam targets restore --file airs-redteam-targets-20261017T120000Z-0a1b2c3d.json --overwrite
airs redteam targets templates
Get provider-specific target templates
Usage: airs redteam targets templates [OPTIONS]
Options:
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam targets update
Update a red team target
Usage: airs redteam targets update [OPTIONS] --config <path> <uuid>
Arguments:
<uuid> Target UUID
Options:
--config <path> JSON file with target updates
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--validate Validate target connection before saving
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam targets update-profile
Update target profile
Usage: airs redteam targets update-profile [OPTIONS] --config <path> <uuid>
Arguments:
<uuid> Target UUID
Options:
--config <path> JSON file with profile updates
--output <format> Output format: pretty, table, json
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help
airs redteam targets validate-auth
Validate target auth credentials
Usage: airs redteam targets validate-auth [OPTIONS] --auth-type <type> --config <path>
Options:
--auth-type <type> Auth type: HEADERS, BASIC_AUTH, OAUTH2
--output <format> Output format: pretty, table, json
--config <path> JSON file with auth_config
--quiet Suppress status and decorative output (data and errors still print)
--debug Write redacted API diagnostics to a private JSONL file
--target-id <uuid> Existing target UUID
--tenant <name> Use this registered tenant for one invocation without changing the selection
-h, --help Print help