baseten org - Baseten

Manage the organization: describe it, list the deployment regions it can use, read its workspace audit logs, and manage its API keys, secrets, billing, teams, and users.

audit-logs

baseten org audit-logs [OPTIONS]

List audit-log entries for the workspace, newest first. Returns up to --limit entries (default 20) across the full history by default. Use --start/--end or --since to scope the time window, and the filter flags (--event-type-group, --source, --user-id, --deployment-id, --environment, --search) to narrow results. For machine-readable streaming, prefer --output jsonl over --output json.

Options

TEXT (repeatable)

Only return entries referencing one of these model deployment IDs. May be repeated.

TEXT

default:"desc"

Sort order by the time the action occurred: ‘desc’ (newest first) or ‘asc’ (oldest first).One of: asc, desc

TEXT

End of the time window. Accepts ISO 8601; values without a timezone designator are interpreted in the local timezone. Defaults to now.

TEXT (repeatable)

Only return entries for one of these environments. May be repeated.

TEXT (repeatable)

Only return entries whose event type falls in one of these groups. May be repeated. One of: activated-deactivated, api-keys, autoscaling-settings, deleted, deployed, directory-group-management, environment-settings, gateway, instance-type-changed, promoted, replica-terminated, secrets, ssh, user-management, webhook-signing-secrets.

TEXT

Filter JSON output with a jq expression; implies --output json (or jsonl for streamed commands)

INTEGER

default:"20"

Maximum number of entries to return, paging as needed. Use 0 for no limit (every entry in the window).

TEXT

default:"text"

Output formatOne of: text, json, jsonl, none

TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

TEXT

Case-insensitive substring matched against resource names and IDs in the entry.

TEXT

Shortcut for a window from a relative time ago until now. Accepts a duration (e.g. ‘30m’, ‘1h30m’) or ‘Nd’ (e.g. ‘3d’). Mutually exclusive with --start and --end.

TEXT (repeatable)

Only return entries issued from one of these surfaces. May be repeated. One of: ui, api, mcp, other.

TEXT

Start of the time window. Accepts ISO 8601 (e.g. ‘2026-05-14’, ‘2026-05-14T12:00:00’, ‘2026-05-14T12:00:00Z’). Values without a timezone designator are interpreted in the local timezone. Defaults to the beginning of the audit-log history.

TEXT (repeatable)

Only return entries whose acting user is one of these IDs. May be repeated.

BOOL

Enable verbose logging

Examples

List the 20 most recent audit-log entries

baseten org audit-logs

List deploy and promote events from the UI over the last 7 days

baseten org audit-logs --since 7d --event-type-group deployed --event-type-group promoted --source ui

Filter output with `--jq`

Stream each entry’s event type as a JSONL stream

baseten org audit-logs --output jsonl --jq '.event_type'

Output

Text mode (--output text): Table with columns: TIME, ACTOR, EVENT, SOURCE. When no entries match, prints “No audit-log entries found.” to stderr. JSON mode (--output json): payload type managementapi.AuditLogEntry.

describe

baseten org describe [OPTIONS]

Describe the caller’s organization.

Options

TEXT

Filter JSON output with a jq expression; implies --output json (or jsonl for streamed commands)

TEXT

default:"text"

Output formatOne of: text, json, jsonl, none

TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

BOOL

Enable verbose logging

Examples

Describe the organization

baseten org describe

Filter output with `--jq`

Print just the organization ID

baseten org describe --jq '.org_id'

Output

Text mode (--output text): Field-per-line summary: org ID, name (when set), and the AWS AssumeRole role ARN and external ID (if enabled). JSON mode (--output json): payload type managementapi.OrganizationInfo.

regions

baseten org regions [OPTIONS]

List the regions the organization can deploy models in. Pass a region’s slug to baseten model push --region. Pass --team to list the regions available to one team instead, which may be a subset of the organization’s.

Options

TEXT

Filter JSON output with a jq expression; implies --output json (or jsonl for streamed commands)

TEXT

default:"text"

Output formatOne of: text, json, jsonl, none

TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

TEXT

List the regions available to this team by name or ID, instead of the organization’s. Run ‘baseten org team list’ to see teams.

BOOL

Enable verbose logging

Examples

List the organization’s regions

baseten org regions

List one team’s regions

baseten org regions --team <team>

Filter output with `--jq`

Print just the region slugs

baseten org regions --jq '.regions[].slug'

Output

Text mode (--output text): Table with columns: SLUG, NAME. When the organization has no regions, prints “No regions found.” to stderr. JSON mode (--output json): payload type managementapi.Regions.

api-key

API keys authenticate requests to the Management API and to model inference. Grid API keys come from this list too, filtered with --type grid.

list

baseten org api-key list [OPTIONS]

List API keys (metadata only; key values are never returned). Grid API keys, which baseten grid setup creates and manages, are listed only with --type grid.

Options

TEXT

Filter JSON output with a jq expression; implies --output json (or jsonl for streamed commands)

TEXT

default:"text"

Output formatOne of: text, json, jsonl, none

TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

TEXT

Only list keys of this category.One of: personal, workspace-export-metrics, workspace-invoke, workspace-manage-all, workspace-manage-api-keys, grid

BOOL

Enable verbose logging

Examples

List all API keys in the org

baseten org api-key list

Filter output with `--jq`

Print just the prefixes of personal keys

baseten org api-key list --jq '.keys[] | select(.type == "PERSONAL") | .prefix'

Output

Text mode (--output text): Table with columns: NAME, KEY (prefix + ****), TYPE, TEAM. When no keys exist, prints “No API keys found.” to stderr. JSON mode (--output json): payload type managementapi.APIKeys.

create

baseten org api-key create [OPTIONS]

Create a new API key. The key value is printed to stdout exactly once and cannot be retrieved later; capture or pipe it on creation. --model-id may be repeated to scope the key to specific models and is only valid with --type workspace-export-metrics or --type workspace-invoke.

Options

TEXT

Filter JSON output with a jq expression; implies --output json (or jsonl for streamed commands)

TEXT (repeatable)

Restrict the key to a specific model. May be repeated. Only valid with --type workspace-export-metrics or workspace-invoke.

TEXT

Optional human-readable name for the key.

TEXT

default:"text"

Output formatOne of: text, json, jsonl, none

TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

TEXT

Team name or ID to create the key in. Defaults to the organization’s default team. Run ‘baseten org team list’ to see teams.

TEXT

required

API key category.One of: personal, workspace-export-metrics, workspace-invoke, workspace-manage-all, workspace-manage-api-keys

BOOL

Enable verbose logging

Examples

Create a personal API key

baseten org api-key create --type personal --name <label>

Create a workspace-invoke key scoped to specific models

baseten org api-key create --type workspace-invoke --model-id <id-1> --model-id <id-2>

Filter output with `--jq`

Print just the raw key value

baseten org api-key create --type personal --jq '.api_key'

Output

Text mode (--output text): Prints the raw API key value on stdout (one line). Also prints “Save this key now. It will not be shown again.” to stderr. JSON mode (--output json): payload type managementapi.APIKey.

delete

baseten org api-key delete [OPTIONS]

Delete an API key. Exactly one of --name or --prefix is required: --name matches the human-readable name, --prefix matches the leading characters shown in org api-key list.

Options

TEXT

Filter JSON output with a jq expression; implies --output json (or jsonl for streamed commands)

TEXT

Human-readable name of the API key to delete.Mutually exclusive with other flags in group identifier.

TEXT

default:"text"

Output formatOne of: text, json, jsonl, none

TEXT

Prefix of the API key to delete (as shown in list).Mutually exclusive with other flags in group identifier.

TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

BOOL

Enable verbose logging

Examples

Delete an API key by name

baseten org api-key delete --name <label>

Delete by visible prefix

baseten org api-key delete --prefix <prefix>

Filter output with `--jq`

Print just the deleted key’s prefix

baseten org api-key delete --name <label> --jq '.prefix'

Output

Text mode (--output text): Prints “Deleted API key prefix” to stderr on success; no stdout output. JSON mode (--output json): payload type managementapi.APIKeyTombstone.

billing

The usage summary breaks spending down by dedicated deployments, model APIs, and training.

usage

baseten org billing usage [OPTIONS]

Show a billing usage summary for the organization, broken down into dedicated deployments, model APIs, and training. Pass --since (relative duration, e.g. 7d, 24h) for a sliding window ending now, or --start and --end together for an explicit ISO 8601 range. The two modes are mutually exclusive. The range cannot exceed 31 days and cannot start before 2026-01-01 UTC. Defaults to --since 7d.

Options

TEXT

End of the window. Accepts ISO 8601; values without a timezone are interpreted in the local timezone. Requires --start. Mutually exclusive with --since.

TEXT

Filter JSON output with a jq expression; implies --output json (or jsonl for streamed commands)

TEXT

default:"text"

Output formatOne of: text, json, jsonl, none

TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

TEXT

Relative window ending now (e.g. 24h, 7d). Used when neither --start nor --end is given. Maximum 31d. Mutually exclusive with --start/--end.

TEXT

Start of the window. Accepts ISO 8601 (e.g. ‘2026-05-01’, ‘2026-05-01T12:00:00Z’); values without a timezone are interpreted in the local timezone. Requires --end. Mutually exclusive with --since.

BOOL

Enable verbose logging

Examples

Show usage over the last 7 days (default)

baseten org billing usage

Show usage over the last 30 days

baseten org billing usage --since 30d

Show usage over an explicit ISO 8601 range

baseten org billing usage --start 2026-05-01 --end 2026-05-08

Filter output with `--jq`

Print the total cost of model API usage

baseten org billing usage --jq '.model_apis_usage.total'

Output

Text mode (--output text): The resolved window on stderr, then a table on stdout with one row per category present (Dedicated, Model APIs, Training), plus an “All” total row when more than one category is present, with columns CATEGORY, MINUTES, TOTAL, CREDITS, SUBTOTAL. Costs are in USD; SUBTOTAL is the net cost after credits. Prints “No usage in the selected window.” to stderr when every category is absent. JSON mode (--output json): payload type managementapi.UsageSummary. The usage summary: optional dedicated_usage, model_apis_usage, and training_usage objects, each with total/credits_used/subtotal costs and a per-resource breakdown whose items each carry an optional daily series.

secret

Secrets hold values that deployments and training jobs read at runtime. Set, list, and delete them.

list

baseten org secret list [OPTIONS]

List secrets (metadata only; values are never returned).

Options

TEXT

Filter JSON output with a jq expression; implies --output json (or jsonl for streamed commands)

TEXT

default:"text"

Output formatOne of: text, json, jsonl, none

TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

TEXT

Filter to a specific team by name or ID. Defaults to all teams the caller belongs to.

BOOL

Enable verbose logging

Examples

List secrets across all accessible teams

baseten org secret list

List secrets in a specific team

baseten org secret list --team <team>

Filter output with `--jq`

Print just the secret names

baseten org secret list --jq '.secrets[].name'

Output

Text mode (--output text): Table with columns: NAME, TEAM, CREATED. When no secrets exist, prints “No secrets found.” to stderr. JSON mode (--output json): payload type managementapi.Secrets.

set

baseten org secret set [OPTIONS]

Create or update a secret. The value is read from stdin (or prompted interactively on a TTY). --value is supported but discouraged: it leaks the secret into shell history and ps output. Pass --team to target a specific team; without it the organization’s default team is used.

Options

TEXT

Filter JSON output with a jq expression; implies --output json (or jsonl for streamed commands)

TEXT

required

Name of the secret.

TEXT

default:"text"

Output formatOne of: text, json, jsonl, none

TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

TEXT

Team name or ID the secret belongs to. Defaults to the organization’s default team. Run ‘baseten org team list’ to see teams.

TEXT

Secret value. Discouraged: leaks into shell history and process list. Prefer stdin or prompt.

BOOL

Enable verbose logging

Examples

Set a secret by piping its value through stdin

echo $TOKEN | baseten org secret set --name <name>

Set a secret scoped to a specific team

echo $TOKEN | baseten org secret set --name <name> --team <team>

Filter output with `--jq`

Print the secret’s team

echo $TOKEN | baseten org secret set --name <name> --jq '.team_name'

Output

Text mode (--output text): Prints “Set secret name” to stderr on success; no stdout output. JSON mode (--output json): payload type managementapi.Secret.

delete

baseten org secret delete [OPTIONS]

Delete a secret by name.

Options

TEXT

Filter JSON output with a jq expression; implies --output json (or jsonl for streamed commands)

TEXT

required

Name of the secret to delete.

TEXT

default:"text"

Output formatOne of: text, json, jsonl, none

TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

TEXT

Team name or ID the secret belongs to. Defaults to the organization’s default team. Run ‘baseten org team list’ to see teams.

BOOL

Enable verbose logging

Examples

Delete a secret by name

baseten org secret delete --name <name>

Filter output with `--jq`

Print just the deleted secret name

baseten org secret delete --name <name> --jq '.name'

Output

Text mode (--output text): Prints “Deleted secret name” to stderr on success; no stdout output. JSON mode (--output json): payload type managementapi.SecretTombstone.

team

List and inspect the teams in the organization.

describe

baseten org team describe [OPTIONS]

Describe a single team. Pass exactly one of --team-id or --team-name.

Options

TEXT

Filter JSON output with a jq expression; implies --output json (or jsonl for streamed commands)

TEXT

default:"text"

Output formatOne of: text, json, jsonl, none

TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

TEXT

Team ID to describe.Mutually exclusive with other flags in group team-ref.

TEXT

Team name to describe.Mutually exclusive with other flags in group team-ref.

BOOL

Enable verbose logging

Examples

Describe a team by ID

baseten org team describe --team-id <team-id>

Describe a team by name

baseten org team describe --team-name <team-name>

Filter output with `--jq`

Print the team’s name

baseten org team describe --team-id <team-id> --jq '.name'

Output

Text mode (--output text): Field-per-line summary of the team. JSON mode (--output json): payload type managementapi.Team.

list

baseten org team list [OPTIONS]

List the teams in the organization.

Options

TEXT

Filter JSON output with a jq expression; implies --output json (or jsonl for streamed commands)

TEXT

default:"text"

Output formatOne of: text, json, jsonl, none

TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

BOOL

Enable verbose logging

Examples

List all teams in the org

baseten org team list

Filter output with `--jq`

Print just the team names

baseten org team list --jq '.teams[].name'

Output

Text mode (--output text): Table with columns: ID, NAME, DEFAULT, CREATED. When no teams exist, prints “No teams found.” to stderr. JSON mode (--output json): payload type managementapi.Teams.

user

List and inspect the users in the organization.

describe

baseten org user describe [OPTIONS]

Describe a single user. Pass exactly one of --user-id or --user-email. Pass --user-id me for the authenticated user.

Options

TEXT

Filter JSON output with a jq expression; implies --output json (or jsonl for streamed commands)

TEXT

default:"text"

Output formatOne of: text, json, jsonl, none

TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

TEXT

Email of the user to describe.Mutually exclusive with other flags in group user-ref.

TEXT

User ID to describe. Pass ‘me’ for the authenticated user.Mutually exclusive with other flags in group user-ref.

BOOL

Enable verbose logging

Examples

Describe the authenticated user

baseten org user describe --user-id me

Describe a user by email

baseten org user describe --user-email <email>

Filter output with `--jq`

Print the user’s email

baseten org user describe --user-id me --jq '.email'

Output

Text mode (--output text): Field-per-line summary of the user. JSON mode (--output json): payload type managementapi.UserInfo.

list

baseten org user list [OPTIONS]

List the users in the organization.

Options

TEXT

Filter JSON output with a jq expression; implies --output json (or jsonl for streamed commands)

TEXT

default:"text"

Output formatOne of: text, json, jsonl, none

TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

BOOL

Enable verbose logging

Examples

List all users in the org

baseten org user list

Filter output with `--jq`

Print just the user emails

baseten org user list --jq '.items[].email'

Output

Text mode (--output text): Table with columns: USER ID, EMAIL, NAME. When no users exist, prints “No users found.” to stderr. JSON mode (--output json): payload type cmd.OrgUserList.

​audit-logs

​Options

​Examples

​Filter output with --jq

​Output

​describe

​Options

​Examples

​Filter output with --jq

​Output

​regions

​Options

​Examples

​Filter output with --jq

​Output

​api-key

​list

​Options

​Examples

​Filter output with --jq

​Output

​create

​Options

​Examples

​Filter output with --jq

​Output

​delete

​Options

​Examples

​Filter output with --jq

​Output

​billing

​usage

​Options

​Examples

​Filter output with --jq

​Output

​secret

​list

​Options

​Examples

​Filter output with --jq

​Output

​set

​Options

​Examples

​Filter output with --jq

​Output

​delete

​Options

​Examples

​Filter output with --jq

​Output

​team

​describe

​Options

​Examples

​Filter output with --jq

​Output

​list

​Options

​Examples

​Filter output with --jq

​Output

​user

​describe

​Options

​Examples

​Filter output with --jq

​Output

​list

​Options

​Examples

​Filter output with --jq

​Output

audit-logs

Options

Examples

Filter output with `--jq`

Output

describe

Options

Examples

Filter output with `--jq`

Output

regions

Options

Examples

Filter output with `--jq`

Output

api-key

list

Options

Examples

Filter output with `--jq`

Output

create

Options

Examples

Filter output with `--jq`

Output

delete

Options

Examples

Filter output with `--jq`

Output

billing

usage

Options

Examples

Filter output with `--jq`

Output

secret

list

Options

Examples

Filter output with `--jq`

Output

set

Options

Examples

Filter output with `--jq`

Output

delete

Options

Examples

Filter output with `--jq`

Output

team

describe

Options

Examples

Filter output with `--jq`

Output

list

Options

Examples

Filter output with `--jq`

Output

user

describe

Options

Examples

Filter output with `--jq`

Output

list

Options

Examples

Filter output with `--jq`

Output