CLI Reference

Command-line interface for Triage Warden.

Installation

The CLI is built with the main project:

cargo build --release
./target/release/tw-cli --help

Global Options

tw-cli [OPTIONS] <COMMAND>

Options:
  -c, --config <FILE>     Configuration file path
  -v, --verbose           Enable verbose output
  -q, --quiet             Suppress non-error output
  --json                  Output as JSON
  -h, --help              Print help
  -V, --version           Print version

Environment Variables

VariableDescription
TW_API_URLAPI server URL (default: http://localhost:8080)
TW_API_KEYAPI key for authentication
TW_CONFIGPath to config file

Commands Overview

CommandDescription
incidentManage incidents
actionExecute and manage actions
triageRun AI triage
playbookManage playbooks
policyManage policy rules
connectorManage connectors
userUser management
api-keyAPI key management
webhookWebhook management
configConfiguration management
dbDatabase operations
serveStart API server

Quick Examples

# List open incidents
tw-cli incident list --status open

# Create incident
tw-cli incident create --type phishing --severity high

# Run triage
tw-cli triage run --incident INC-2024-001

# Execute action
tw-cli action execute --incident INC-2024-001 --action quarantine_email

# Approve pending action
tw-cli action approve act-abc123

# Start server
tw-cli serve --port 8080

Next Steps