# CLI Reference

You need every Bumpkit action from a terminal or a script; this page lists every command and flag, for developers, release engineers and CI authors.

The `bumpkit` CLI reads the code between two versions, proves what changed, and applies your `bumpkit.yml` policy: pass, needs approval, or fail. Authenticate with `bumpkit login`. Check the active workspace with `bumpkit whoami`. In CI, set `BUMPKIT_API_KEY`.

```bash
bumpkit login
bumpkit check --base v1.4.2
bumpkit gate --comment
bumpkit whoami --json
```

Run `bumpkit [command] --help` for the help text of any command. For setup, see [Getting Started](/docs/). For the policy file, see the [bumpkit.yml Reference](/docs/bumpkit-yml).

Many commands call a feature that is still in Beta. Those sections carry a Beta note naming the feature flag. Beta features are in early access: until your workspace is on the list, those commands print `<Feature> is in early access. Request access at https://dashboard.bumpkit.dev/early-access?feature=<flag>`. Open the link to sign up, and we'll email you when it's on. `bumpkit features` lists the features turned on for your workspace.

The CLI reference is split by topic. Pick one below, or use the command index at the bottom of this page.

## Topics

- [Install & sign in](/docs/cli-install): install, update and sign in to the bumpkit CLI, connect a repository and pick a workspace
- [Checks & gate](/docs/cli-checks): check releases, run the release gate, record approvals and overrides, and manage policy from the CLI
- [Releases](/docs/cli-releases): version, changelog, release, deploy, hotfix, roll back and announce releases from the CLI
- [Agents](/docs/cli-agents): hooks, the MCP server, memory, claims, swarms and agent reports from the CLI
- [Integrations](/docs/cli-integrations): connect Slack, Jira, PostHog and the rest of your tools, and add error sources, from the CLI
- [Admin](/docs/cli-admin): team, keys, billing, settings, audit, evidence, incidents, reports, domains and SCIM from the CLI
- [Global flags & exit codes](/docs/cli-flags): global flags, environment variables, the config file, exit codes and the utility commands every bumpkit command shares

## Command index

Every command in this release, with the MCP tool that does the same thing. Commands without a tool run only on your machine.

| Command | What it does | MCP tool |
| --- | --- | --- |
| `bumpkit account link-github` | Connect your GitHub account to your Bumpkit login so your approvals count | `github_link_status` |
| `bumpkit agent policy diff` | Show what changed between two agent policy versions | `agent_policy_diff` |
| `bumpkit agent policy history` | List the agent policy's versions | `agent_policy_history` |
| `bumpkit agent policy set` | Save a new agent policy version. Needs a person in the dashboard; needs `--yes` | `agent_policy_set` |
| `bumpkit agent policy show` | Print the company-wide agent policy | `agent_policy_show` |
| `bumpkit agent-report` | Report what an agent claims about a commit and have Bumpkit verify each claim | `report_work` |
| `bumpkit agents records` | Show each agent's track record by work type | `agents_records` |
| `bumpkit agents spend` | Record what an agent spent against its spend limit | `agents_spend` |
| `bumpkit agents telemetry disable` | Turn off org agent telemetry; incoming events are rejected; needs `--yes` | `agent_telemetry_disable` |
| `bumpkit agents telemetry enable` | Turn on org agent telemetry for the whole org; needs `--yes` | `agent_telemetry_enable` |
| `bumpkit agents telemetry events` | List recent agent telemetry events, redacted per the identity setting | `agent_telemetry_events` |
| `bumpkit agents telemetry identity` | Keep, hash or drop developer email on agent telemetry events; needs `--yes` | `agent_telemetry_identity` |
| `bumpkit agents telemetry keys create` | Create an ingest key; its secret and IT snippets are shown once | `agent_telemetry_keys_create` |
| `bumpkit agents telemetry keys list` | List ingest keys with last use, IP and event counts | `agent_telemetry_keys_list` |
| `bumpkit agents telemetry keys revoke` | Revoke an ingest key; machines using it stop reporting; needs `--yes` | `agent_telemetry_keys_revoke` |
| `bumpkit agents telemetry keys rotate` | Rotate an ingest key; the old secret stops working; needs `--yes` | `agent_telemetry_keys_rotate` |
| `bumpkit agents telemetry mode` | Set agent telemetry to observe only or to count toward the gate; needs `--yes` | `agent_telemetry_mode` |
| `bumpkit agents telemetry purge` | Delete every stored agent telemetry event now; needs `--yes` | `agent_telemetry_purge` |
| `bumpkit agents telemetry retention` | Keep agent telemetry events for 1, 7 or 30 days; needs `--yes` | `agent_telemetry_retention` |
| `bumpkit agents telemetry scope` | Collect agent telemetry from all repositories or an allow or deny list; needs `--yes` | `agent_telemetry_scope` |
| `bumpkit agents telemetry status` | Show agent telemetry settings, match rate and the last error | `agent_telemetry_status` |
| `bumpkit agents telemetry test` | Check that Bumpkit accepts an ingest key and when it last reported | `agent_telemetry_test` |
| `bumpkit agents usage` | Show open pull requests, open changed lines and this month's spend per agent | `agents_usage` |
| `bumpkit agents vendors connect` | Connect an AI vendor's admin usage API with an admin key | `agent_vendors_connect` |
| `bumpkit agents vendors disconnect` | Disconnect an AI vendor and delete its stored key and usage; needs `--yes` | `agent_vendors_disconnect` |
| `bumpkit agents vendors identities list` | List AI vendor users mapped to committers | `agent_vendors_identities_list` |
| `bumpkit agents vendors identities map` | Map an AI vendor user to a committer by @github-login or commit email | `agent_vendors_identities_map` |
| `bumpkit agents vendors identities unmap` | Remove an AI vendor user's committer mapping; needs `--yes` | `agent_vendors_identities_unmap` |
| `bumpkit agents vendors retention` | Keep AI vendor usage for 30, 90, 180 or 365 days; needs `--yes` | `agent_vendors_retention` |
| `bumpkit agents vendors status` | Show connected AI vendors, sync state and who used which agent | `agent_vendors_status` |
| `bumpkit agents vendors sync` | Read the latest usage from an AI vendor now | `agent_vendors_sync` |
| `bumpkit agents violations` | Show recent times an agent went outside its budget or scope | `agents_violations` |
| `bumpkit analyze` | Write the changelog and next version from the commits since the last tag | `analyze_commits` |
| `bumpkit approvals` | List the releases waiting for a person's approval | `approvals_list` |
| `bumpkit approvals approve` | Approve a pending release, after confirming in the browser | `decision_approval_status` (reads the approval status only) |
| `bumpkit approvals commands list` | List the pending and recent agent command decisions | `approvals_commands_list` |
| `bumpkit approvals deny` | Deny a pending release, after confirming in the browser | `decision_approval_status` (reads the approval status only) |
| `bumpkit approvals list` | List the releases waiting for a person's approval | `approvals_list` |
| `bumpkit approvals show` | Show what one pending approval waits on and the votes so far | `approvals_show` |
| `bumpkit audit` | List who changed what in the workspace, and from where | `audit` |
| `bumpkit audit export` | Export the audit events for a date range | `audit_export` |
| `bumpkit audit streaming create` | Add an audit streaming destination; needs `--yes` | `audit_streaming_create` |
| `bumpkit audit streaming dead-letters list` | List audit batches that failed to deliver | `audit_streaming_dead_letters_list` |
| `bumpkit audit streaming dead-letters redeliver` | Send a failed audit batch to its destination again; needs `--yes` | `audit_streaming_dead_letters_redeliver` |
| `bumpkit audit streaming disable` | Pause an audit streaming destination; needs `--yes` | `audit_streaming_disable` |
| `bumpkit audit streaming enable` | Resume an audit streaming destination; needs `--yes` | `audit_streaming_enable` |
| `bumpkit audit streaming list` | List audit streaming destinations and their delivery state | `audit_streaming_list` |
| `bumpkit audit streaming remove` | Remove an audit streaming destination; needs `--yes` | `audit_streaming_remove` |
| `bumpkit audit streaming test` | Send a test event to an audit streaming destination; needs `--yes` | `audit_streaming_test` |
| `bumpkit auditors create` | Create a read-only auditor link, shown once; needs `--yes` | `auditors_create` |
| `bumpkit auditors list` | List auditor links without their access tokens | `auditors_list` |
| `bumpkit auditors revoke` | Revoke an auditor link immediately; needs `--yes` | `auditors_revoke` |
| `bumpkit backport open` | Open a backport pull request for a shipped fix | `backport_pr` |
| `bumpkit billing portal` | Open the billing portal for this workspace | `billing_portal` |
| `bumpkit billing status` | Show this period's plan, repositories and people | `billing_status` |
| `bumpkit billing usage` | Show credits for a billing period, broken down by repository, source, outcome or person | `get_billing_usage` |
| `bumpkit blast-radius` | Show which areas of the product a change reaches | `blast_radius` |
| `bumpkit bump` | Suggest the next version from the commits since the last tag | `suggest_version` |
| `bumpkit changelog` | Write a changelog from the commits since the last tag | `generate_changelog` |
| `bumpkit check` | Check a release and list what it proves | `release_check` |
| `bumpkit checks list` | List recent release checks | `checks_list` |
| `bumpkit checks queue` | Show queued, running, retrying and failed pull request checks | `checks_queue` |
| `bumpkit checks view` | Show a release check's verdict and findings | `checks_view` |
| `bumpkit claim` | Lease a resource before an agent uses it | `claim` |
| `bumpkit claims` | List the active claims in a repository | `list_claims` |
| `bumpkit contains` | Show which releases and branches contain a commit or fix | `contains` |
| `bumpkit contracts ack` | Acknowledge a contract alert once its call sites are updated | `contracts_ack` |
| `bumpkit contracts alerts` | List contract alerts for a branch | `contract_alerts` |
| `bumpkit contracts close` | Stop tracking a merged or abandoned branch | `contracts_close` |
| `bumpkit contracts sync` | Record a push's signature changes and the symbols its branch calls | `contracts_sync` |
| `bumpkit coverage upload` | Signed by the CI job's OIDC token, so it runs inside CI. | — |
| `bumpkit criteria` | Map a ticket's acceptance criteria to the evidence in a change | `intent_coverage` |
| `bumpkit cve alerts` | List recent vulnerability alerts: new advisories that affect a live release | `cve_alerts` |
| `bumpkit cve exposure` | List every live release and environment on an affected version of a CVE | `cve_exposure` |
| `bumpkit cve fix` | Open a fix pull request with the smallest upgrade out of a CVE's affected range | `cve_fix` |
| `bumpkit data delete` | Permanently delete this workspace's stored product data. Needs a person in the dashboard; needs `--yes` | `data_delete` |
| `bumpkit data export` | Export this workspace's data to a private JSON file | `data_export` |
| `bumpkit data set` | Change retention, deletion windows or data region; needs `--yes` | `data_set` |
| `bumpkit data view` | Show retention, region, the data inventory and AI handling | `data_view` |
| `bumpkit decisions approve` | Record your approve vote on this check's exact commit, after confirming in the browser | `decision_approval_status` (reads the approval status only) |
| `bumpkit decisions deny` | Record your deny vote on this check's exact commit, after confirming in the browser | `decision_approval_status` (reads the approval status only) |
| `bumpkit decisions view` | Show the recorded release decision: policy, reasons, approvals and evidence | `decisions_view` |
| `bumpkit deploy` | Record that a version went live | `deploy` |
| `bumpkit digest delete` | Delete a digest schedule; needs `--yes` | `digest_delete` |
| `bumpkit digest list` | List digest schedules | `weekly_digests` |
| `bumpkit digest preview` | Print a digest as it would be sent now | `digest_preview` |
| `bumpkit digest send` | Send a digest now | `digest_send` |
| `bumpkit digest set` | Create or change a repository's digest schedule | `digest_set` |
| `bumpkit docs connect` | Connect Notion or Confluence with an integration token | `docs_connect` |
| `bumpkit docs connections` | List Notion and Confluence connections | `docs_connections` |
| `bumpkit docs disconnect` | Disconnect Notion or Confluence; needs `--yes` | `docs_disconnect` |
| `bumpkit docs guide` | Print what consumers of a breaking release must change | `consumer_migration_guide` |
| `bumpkit docs notes` | Print a release's notes for one audience | `release_notes` |
| `bumpkit docs publish` | Publish a release's docs to the chosen targets | `publish_release` |
| `bumpkit docs view` | Print a release's docs | `release_docs` |
| `bumpkit domains add` | Add a domain for single sign-on | `domains_add` |
| `bumpkit domains list` | List domains and their DNS verification records | `domains_list` |
| `bumpkit domains remove` | Remove a workspace domain; needs `--yes` | `domains_remove` |
| `bumpkit domains verify` | Verify a domain's DNS TXT record | `domains_verify` |
| `bumpkit evidence export` | Download tamper-evident change-management evidence for a period | `evidence_export` |
| `bumpkit evidence governance` | Export governance evidence for a date range | `evidence_governance` |
| `bumpkit evidence verify` | Verifies a downloaded bundle offline on this machine; nothing is sent to the workspace. | — |
| `bumpkit features` | Show which features this workspace has | `features` |
| `bumpkit features request` | Request early access to a feature | `features_request` |
| `bumpkit findings feedback` | Mark a finding real or a false positive | `findings_feedback` |
| `bumpkit findings precision` | Show each checker's measured precision | `findings_precision` |
| `bumpkit freeze end` | End a release freeze early. Needs a person in the dashboard; needs `--yes` | `freeze_end` |
| `bumpkit freeze list` | List current, upcoming and recent release freezes | `freeze_list` |
| `bumpkit freeze start` | Freeze releases now or from a start time | `freeze_start` |
| `bumpkit gate` | Decide whether a release ships under the repository's policy | `release_gate` |
| `bumpkit gate connections add` | Connect a GitLab, Bitbucket, Azure DevOps or GitHub Enterprise Server project to the release gate | `gate_connections_add` |
| `bumpkit gate connections list` | List release gate connections | `gate_connections_list` |
| `bumpkit gate connections remove` | Remove a release gate connection; its webhook stops working. Needs a person in the dashboard; needs `--yes` | `gate_connections_remove` |
| `bumpkit github check` | Run the release gate on the latest commit of an open pull request | `github_pull_request_check` |
| `bumpkit guard` | Check this branch against the policy before an agent finishes or pushes | `guard` |
| `bumpkit history` | List the releases that changed a repository or path | `release_history` |
| `bumpkit hooks` | Installs hooks in this checkout; there is nothing to call in the workspace. | — |
| `bumpkit hooks pr` | Open a pull request that adds the agent hooks to a repository through the GitHub App | `agent_hooks_status` (reads the approval status only) |
| `bumpkit hotfix version` | Print the next free patch version for a hotfix | `hotfix_version` |
| `bumpkit identity sso managed-mcp clients add` | Register an MCP client your identity provider issues ID-JAGs to; its secret is shown once | `identity_sso_managed_mcp_clients_add` |
| `bumpkit identity sso managed-mcp clients remove` | Remove an IdP-managed MCP client and cut off its tokens; needs `--yes` | `identity_sso_managed_mcp_clients_remove` |
| `bumpkit identity sso managed-mcp set` | Turn IdP-managed MCP access on or off and require it for verified domains; needs `--yes` | `identity_sso_managed_mcp_set` |
| `bumpkit identity sso managed-mcp test` | Check an ID-JAG from your identity provider without using it | `identity_sso_managed_mcp_test` |
| `bumpkit identity sso managed-mcp view` | Show IdP-managed MCP access, the values for your identity provider and the registered clients | `identity_sso_managed_mcp_view` |
| `bumpkit identity sso remove` | Remove single sign-on; needs `--yes` | `identity_sso_remove` |
| `bumpkit identity sso set` | Save single sign-on settings from a JSON file. Changing the identity provider or turning it off needs a person in the dashboard; needs `--yes` | `identity_sso_set` |
| `bumpkit identity sso unlink` | Clear a member's identity provider link so they link again on their next sign-in; needs `--yes` | `identity_sso_unlink` |
| `bumpkit identity sso view` | Show single sign-on settings without stored secrets | `identity_sso_view` |
| `bumpkit inbox approve` | Approve one item waiting for a person | `inbox_approve` |
| `bumpkit inbox batch` | Approve several low-risk items at once | `inbox_batch` |
| `bumpkit inbox deny` | Deny one item waiting for a person | `inbox_deny` |
| `bumpkit inbox list` | List what needs a person, riskiest first: release gates, release drafts, releases ready to publish, agent commands, memories and lessons | `inbox_list` |
| `bumpkit index upload` | Upload a SCIP index for a commit | `index_upload` |
| `bumpkit incidents list` | List recent production errors and the release that fixed each one | `incidents_list` |
| `bumpkit incidents report` | Report a production error and rank the releases behind it, with a likelihood | `what_broke` |
| `bumpkit incidents resolve` | Record the release that fixed an incident | `incidents_resolve` |
| `bumpkit install` | Runs only on this machine; it changes the local installation, not the workspace. | — |
| `bumpkit integrations authorize` | Authorize the Slack App, Jira, Notion or Confluence in the browser | `integrations_authorize` |
| `bumpkit integrations connect` | Connect an integration | `integrations_connect` |
| `bumpkit integrations deliveries list` | List failed deliveries for an integration | `integrations_deliveries_list` |
| `bumpkit integrations deliveries retry` | Queue a failed delivery for retry | `integrations_deliveries_retry` |
| `bumpkit integrations disconnect` | Disconnect an integration; needs `--yes` | `integrations_disconnect` |
| `bumpkit integrations linear teams` | List Linear teams for a privately supplied key | `integrations_linear_teams` |
| `bumpkit integrations list` | Show which integrations are connected | `integrations_list` |
| `bumpkit integrations oauth-status` | Show an integration's authorization status | `integrations_oauth_status` |
| `bumpkit integrations request` | Request access to an upcoming integration | `integrations_request` |
| `bumpkit integrations slack-app channel` | Verify and select the Slack App channel | `integrations_slack_app_channel` |
| `bumpkit integrations slack-app reauthorize` | Update the Slack App's permissions, keeping its channel and settings | `integrations_slack_app_reauthorize` |
| `bumpkit integrations slack-app posting` | Choose whether the Slack App posts every pull request check or only approval requests | `integrations_slack_app_posting` |
| `bumpkit integrations slack-app disconnect` | Disconnect the Slack App; needs `--yes` | `integrations_slack_app_disconnect` |
| `bumpkit integrations test` | Send a test message through an integration | `integrations_test` |
| `bumpkit intent` | Declare what an agent will touch and see what it collides with | `declare_intent` |
| `bumpkit keys create` | Create an API key; it is shown once | `keys_create` |
| `bumpkit keys delete` | Delete an API key you created, or any key as an owner or admin; anything using it stops working; needs `--yes` | `keys_delete` |
| `bumpkit keys list` | List this workspace's API keys | `keys_list` |
| `bumpkit lessons approve` | Approve a proposed lesson so every agent gets it | `lessons_approve` |
| `bumpkit lessons list` | List the team's lessons | `lessons` |
| `bumpkit lessons propose` | Propose a lesson for a person to approve | `propose_lesson` |
| `bumpkit lessons reject` | Reject a proposed lesson | `lessons_reject` |
| `bumpkit lessons retire` | Retire a lesson that no longer holds | `lessons_retire` |
| `bumpkit login` | Signs this computer in; an MCP client is already signed in through the CLI. | — |
| `bumpkit logout` | Signs this computer out and revokes its key. | — |
| `bumpkit loop` | Show what Bumpkit found, who it routed to and the fix it opened | `fix_tasks` |
| `bumpkit mcp` | This is the MCP server itself. | — |
| `bumpkit mcp config` | Prints the configuration an MCP client uses to start this server. | — |
| `bumpkit mcp connect` | Print the connector URL and the setup for Claude, Codex and Grok | `mcp_connect` |
| `bumpkit mcp connections list` | List apps connected to this workspace through the hosted connector | `mcp_connections_list` |
| `bumpkit mcp connections revoke` | Revoke an app's connection; it must sign in again; needs `--yes` | `mcp_connections_revoke` |
| `bumpkit memory add` | Save what the team learned about a path | `remember` |
| `bumpkit memory approve` | Approve a pending memory so agents recall it | `memory_approve` |
| `bumpkit memory forget` | Delete a memory; needs `--yes` | `forget` |
| `bumpkit memory list` | List memories for the repository or a path | `recall` |
| `bumpkit memory pending` | List memories that wait for a person's approval | `memory_pending` |
| `bumpkit memory reject` | Reject a pending memory; it is never recalled | `memory_reject` |
| `bumpkit merge-plan` | Show a safe merge order for the open pull requests | `merge_plan` |
| `bumpkit merge-plans` | Show the stored merge plans | `merge_plans` |
| `bumpkit notes audience delete` | Delete an audience, or reset a built-in one; needs `--yes` | `notes_audience_delete` |
| `bumpkit notes audience set` | Create or change a release notes audience | `notes_audience_set` |
| `bumpkit notes config` | Show release notes audiences, segments and feature tags | `release_audiences` |
| `bumpkit notes feature delete` | Delete a feature tag; needs `--yes` | `notes_feature_delete` |
| `bumpkit notes feature set` | Create or change a feature tag | `notes_feature_set` |
| `bumpkit notes generate` | Generate and save a release notes draft | `notes_generate` |
| `bumpkit notes list` | List recorded releases with their check IDs | `notes_list` |
| `bumpkit notes segment delete` | Delete a customer segment; needs `--yes` | `notes_segment_delete` |
| `bumpkit notes segment set` | Create or change a customer segment | `notes_segment_set` |
| `bumpkit notes view` | Print a saved release notes draft | `notes_view` |
| `bumpkit onboarding confirm` | Save the workspace name and finish its naming step | `onboarding_confirm` |
| `bumpkit onboarding dismiss` | Dismiss this workspace's first-run checklist | `onboarding_dismiss` |
| `bumpkit onboarding view` | Show this workspace's first-run progress | `onboarding_view` |
| `bumpkit override` | Explain how a person overrides a failing gate in the dashboard; a key is refused | `override` |
| `bumpkit override list` | List overrides and whether each had its review | `override_list` |
| `bumpkit override review` | Record the review of an override | `override_review` |
| `bumpkit pause` | Check a command before an agent runs it | `pause` |
| `bumpkit playground examples` | List the Playground samples and the default policy | `playground_examples` |
| `bumpkit playground run` | Run a Playground sample or pasted diff against a policy | `playground_run` |
| `bumpkit policy diff` | Show what changed between two org policy versions | `policy_diff` |
| `bumpkit policy history` | List the org policy's versions | `policy_history` |
| `bumpkit policy set` | Save a new org policy version. Needs a person in the dashboard; needs `--yes` | `policy_set` |
| `bumpkit policy show` | Print the org policy | `policy_show` |
| `bumpkit predict` | Rank the existing behavior a change can break, with a likelihood | `predict_regressions` |
| `bumpkit provenance attest` | Print the signed provenance attestation for a release check | `provenance_attest` |
| `bumpkit provenance disable` | Installs hooks in this checkout; there is nothing to call in the workspace. | — |
| `bumpkit provenance enable` | Installs hooks in this checkout; there is nothing to call in the workspace. | — |
| `bumpkit provenance record` | Runs inside agent hooks with the hook payload on stdin. | — |
| `bumpkit provenance show` | Show who or what made each change in a release check | `provenance_show` |
| `bumpkit quality` | Show architecture drift, code quality and performance changes between versions | `quality` |
| `bumpkit quality history` | Show stored quality trends for a repository | `quality_history` |
| `bumpkit recall` | Print what the team learned about this code | `recall` |
| `bumpkit release approve` | Approve a draft release, after confirming in the browser | `show_release` (reads the approval status only) |
| `bumpkit release correct` | Correct a published release's notes everywhere they were published, or an older changelog entry by version | `correct_release_notes` |
| `bumpkit release deny` | Deny a draft release, after confirming in the browser | `show_release` (reads the approval status only) |
| `bumpkit release health` | Compare errors after a deploy with before and name the top suspect commit | `release_health` |
| `bumpkit release health-settings set` | Change release health settings | `release_health_settings_set` |
| `bumpkit release health-settings view` | Show release health settings | `release_health_settings_view` |
| `bumpkit release list` | List grouped releases, newest first | `list_releases` |
| `bumpkit release notes` | Replace or regenerate one audience's notes on a draft or approved release | `edit_release_notes` |
| `bumpkit release prepare` | Group everything merged since the last release into one draft release | `prepare_release` |
| `bumpkit release publish` | Publish an approved release, each target with its audience's notes: tag, GitHub Release, changelog, docs and Slack | `show_release` (reads the approval status only) |
| `bumpkit release show` | Show a grouped release with one audience's notes, its pull requests, commits, verdict and publish status | `show_release` |
| `bumpkit renew` | Extend a claim you hold | `renew_claim` |
| `bumpkit repo add` | Connect a repository through GitHub approval and verify its access | `repo_add` |
| `bumpkit repo list` | List the repositories this workspace's GitHub App can reach | `repo_list` |
| `bumpkit repo pulls list` | List a connected repository's open pull requests | `repo_pulls_list` |
| `bumpkit repo verify` | Verify this workspace's access to a repository and read its default branch | `repo_verify` |
| `bumpkit report` | Show the team report for a period | `report` |
| `bumpkit report authorship-coverage` | Show how many releases have verified authorship and how the authorship model scores | `report_authorship_coverage` |
| `bumpkit report confidence` | Show how accurate the confidence score has been | `report_confidence` |
| `bumpkit report confidence status` | Show release confidence calibration and the latest scores | `report_confidence_status` |
| `bumpkit report outcome` | Record what happened to a release after it shipped | `report_outcome` |
| `bumpkit report pooling` | Opt this workspace in or out of cross-workspace learning | `report_pooling` |
| `bumpkit report readiness` | Download the release readiness report as PDF, CSV or JSON | `report_readiness` |
| `bumpkit report retrain` | Update this workspace's confidence and risk scores from recorded outcomes now | `report_retrain` |
| `bumpkit report risk` | Show where releases broke before, per file, area or repository | `report_risk` |
| `bumpkit report score` | Show a release's confidence score and what moved it | `report_score` |
| `bumpkit rollback open` | Open the revert pull request for a rollback; needs `--yes` | `rollback_pr` |
| `bumpkit rollback plan` | Rank the commits behind a regression and dry-run the smallest revert | `rollback_plan` |
| `bumpkit rules approve` | Approve a compiled release rule; needs `--yes` | `rules_approve` |
| `bumpkit rules compile` | Compile a plain-English rule into a reviewed policy change | `compile_rule` |
| `bumpkit rules list` | List compiled rules, who wrote and approved them | `rules_list` |
| `bumpkit compatibility` | Show each supported version pair and its verdict from recorded evidence | `compatibility_matrix` |
| `bumpkit compatibility export` | Print the matrix as CSV or JSON for a procurement review | `compatibility_matrix` |
| `bumpkit compatibility show` | Show one supported pair, version by version, with each break's file and version | `compatibility_matrix` |
| `bumpkit compatibility sync` | Read the compatibility section of bumpkit.yml into the matrix now | `compatibility_sync` |
| `bumpkit proven` | Show which kinds of change ship without problems, per repository, and the backtest | `proven_changes` |
| `bumpkit proven show` | Show one class's changes and problems | `proven_changes` |
| `bumpkit rules view` | Show a saved release rule and its proposed policy change | `rules_view` |
| `bumpkit scim groups list` | List SCIM groups and their mapped roles | `scim_groups_list` |
| `bumpkit scim groups set-role` | Map a SCIM group to a role; needs `--yes` | `scim_groups_set_role` |
| `bumpkit scim tokens create` | Needs a person in the dashboard, so the CLI gets a refusal saying where to create it | `scim_tokens_create` |
| `bumpkit scim tokens list` | List SCIM tokens without their secrets | `scim_tokens_list` |
| `bumpkit scim tokens revoke` | Revoke a SCIM token; provisioning with it stops; needs `--yes` | `scim_tokens_revoke` |
| `bumpkit scorecards` | Show how each coding agent's changes fared | `agent_scorecards` |
| `bumpkit settings set` | Change workspace settings | `settings_set` |
| `bumpkit settings view` | Show workspace settings | `settings_view` |
| `bumpkit sources add` | Add an incident or change source for a repository | `sources_add` |
| `bumpkit sources list` | List a provider's sources without signing secrets | `sources_list` |
| `bumpkit sources remove` | Remove a source and stop accepting its deliveries; needs `--yes` | `sources_remove` |
| `bumpkit sources set-secret` | Save a provider-issued signing secret | `sources_set_secret` |
| `bumpkit stack list` | List a repository's stacks in merge order with each pull request's decision | `list_stacks` |
| `bumpkit stack show` | Show one pull request's stack and what must merge first | `get_stack` |
| `bumpkit status` | Show this workspace's release activity, recent checks and setup progress | `status` |
| `bumpkit swarm status` | Show active claims, intents and stored merge plans | `swarm_status` |
| `bumpkit team cancel` | Cancel a pending invitation; needs `--yes` | `team_cancel` |
| `bumpkit team invite` | Email someone an invitation as member or viewer | `team_invite` |
| `bumpkit team list` | List members and pending invitations | `team_list` |
| `bumpkit team remove` | Remove a member and revoke every API key they created; needs `--yes` | `team_remove` |
| `bumpkit team role` | Change a member's role | `team_role` |
| `bumpkit test attest` | Upload test results and the tests expected for this commit, attested by the CI job | Runs in CI |
| `bumpkit test evidence` | Show which expected tests passed, failed or didn't run on a commit | `test_evidence` |
| `bumpkit test expected` | List the tests a change's blast radius expects, and why | `test_expected` |
| `bumpkit test flaky` | List known flaky tests | `test_flaky` |
| `bumpkit test triage` | Say whether failing tests are known flaky or likely real | `test_triage` |
| `bumpkit test upload` | Upload a CI run's test results | `test_upload` |
| `bumpkit testdb lease` | Create a test database and print its URL | `test_database_lease` |
| `bumpkit testdb list` | List this workspace's leased test databases | `testdb_list` |
| `bumpkit testdb release` | Drop a leased test database now | `test_database_release` |
| `bumpkit testdb sweep` | Drop every expired leased test database | `testdb_sweep` |
| `bumpkit tests` | List new behavior no test reaches and suggest tests | `untested_behavior` |
| `bumpkit train add` | Add a pull request to a release batch | `join_train` |
| `bumpkit train approve` | Explain how a person approves a release batch in the dashboard; a key is refused | `train_approve` |
| `bumpkit train cut` | Explain how a person cuts a release batch in the dashboard; a key is refused; needs `--yes` | `train_cut` |
| `bumpkit train list` | List release batches | `train_list` |
| `bumpkit train map` | Show the service map: each service's health, last release and dependencies | `service_map` |
| `bumpkit train multi abandon` | Abandon a multi-repo train and every step that hasn't released; needs `--yes` | `multi_train_abandon` |
| `bumpkit train multi list` | List multi-repo trains | `multi_train_list` |
| `bumpkit train multi new` | Start a multi-repo train with one step per repository | `multi_train_new` |
| `bumpkit train multi order` | Explain how a person sets a multi-repo train's order in the dashboard; a key is refused | `multi_train_status` (reads the approval status only) |
| `bumpkit train multi show` | Show a multi-repo train: the order and why, and each repository's gate result and state | `multi_train_status` |
| `bumpkit train multi sync` | Refresh every step's pull requests from GitHub | `multi_train_sync` |
| `bumpkit train new` | Start a release batch | `train_new` |
| `bumpkit train remove` | Take a pull request off a release batch | `train_remove` |
| `bumpkit train show` | Show a release batch's readiness: each pull request's decision and the verdict | `train_status` |
| `bumpkit train sync` | Refresh a release batch's pull requests from GitHub | `train_sync` |
| `bumpkit tried` | Search reverts, removed features and gate blocks for something already tried | `has_this_been_tried` |
| `bumpkit unclaim` | Release a claim so other agents can use the resource | `release_claim` |
| `bumpkit uninstall` | Runs only on this machine; it changes the local installation, not the workspace. | — |
| `bumpkit update` | Runs only on this machine; it changes the local installation, not the workspace. | — |
| `bumpkit verify` | Run the base and head side by side and compare how they behave | `verify_report` |
| `bumpkit version` | Prints this CLI's version. | — |
| `bumpkit when` | Find the release where a symbol, file, finding or dependency first appeared | `when_introduced` |
| `bumpkit whoami` | Show the workspace and key this CLI uses | `whoami` |
| `bumpkit workspace create` | Create a workspace you own | `create_workspace` |
| `bumpkit workspace delete` | Permanently delete this workspace and its data. Needs a person in the dashboard; needs `--yes` | `workspace_delete` |
| `bumpkit workspace list` | List the workspaces you belong to and your role in each | `workspace_list` |
| `bumpkit workspace switch` | Signs this computer in to another workspace through the browser, like login; a running bumpkit mcp follows the switch on its next tool call and says so once. | — |