Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.phrony.com/llms.txt

Use this file to discover all available pages before exploring further.

Network manifest commands use Authorization: Bearer on internal gateway routes (phrony login or PHRONY_ACCESS_TOKEN). See Authentication. plan, apply, and diff accept a file or a directory that contains index.yaml / index.yml. Default path: ./manifests.

phrony plan [path]

Dry-run manifest apply: sends merged YAML to the API with dryRun=true and prints a planned-change summary (table by default).
FlagDescription
--tenant <id>Workspace tenant id (overrides env / config).
--prunePass prune=true to the apply endpoint.
--name-suffix <s>Optional nameSuffix query parameter.
--anchor-agent <uuid>Optional anchorAgentId query parameter (scopes reconciliation when supported).

phrony apply [path]

Runs plan (dry-run), then prompts Apply these changes? [y/N] unless you pass --auto-approve.
FlagDescription
Same as plan--tenant, --prune, --name-suffix, --anchor-agent
--auto-approveSkip the interactive confirmation (required for non-interactive applies).
JSON behavior: With --json and without --auto-approve, apply only outputs the dry-run result and does not perform the mutating apply (use --auto-approve with --json for scripting).

phrony diff [path]

Compares your local resolved manifest to the manifest exported from the cloud for a given root agent. You must supply the root agent id for the export side via --agent, PHRONY_ROOT_AGENT_ID, or rootAgentId in phrony.config.json.
FlagDescription
--tenant <id>Workspace tenant id (overrides env / config).
--agent <uuid>Root agent id for export (overrides env / config).

See also