fm account
Reference for the fm account command group (auto-generated from fm account --help).
fm account
text
Manage your account profile, API keys, sessions, and MFA settings.
Examples:
fm account profile
fm account api-key list
fm account session list
fm account mfa status
Usage:
fm account [command]
Available Commands:
api-key Manage API keys
delete Delete your account
mfa Manage multi-factor authentication
profile Show your profile
session Manage sessions
Flags:
-h, --help help for account
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)
Use "fm account [command] --help" for more information about a command.fm account api-key
text
Manage API keys for programmatic access to the platform.
Usage:
fm account api-key [command]
Aliases:
api-key, api-keys
Available Commands:
create Create an API key
delete Delete an API key
get Get API key details
list List API keys
revoke Revoke an API key
scopes List the scopes an API key can be granted
Flags:
-h, --help help for api-key
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)
Use "fm account api-key [command] --help" for more information about a command.fm account api-key create
text
Create a new API key for programmatic access.
The full API key is only shown once at creation time. Store it securely.
API keys are least-privilege: at least one scope is required, the global "*"
wildcard is rejected, and a key can never exceed your own permissions. Grant
<service>:read / <service>:write — those are what the services enforce. Run
"fm account api-key scopes" to list them.
Examples:
fm account api-key create --name "CI/CD Key" --scopes compute:read,storage:read
fm account api-key create --name "Deployer" --scopes compute:read,compute:write
fm account api-key create --name "Production" --scopes "compute:*,storage:read" --expires 2027-01-01
Usage:
fm account api-key create [flags]
Flags:
--description string key description
--expires string expiry as YYYY-MM-DD (end of that day, local time — the Terraform provider uses UTC, so the same date can differ by up to a day) or an RFC3339 timestamp; default ~1y, max 2y
-h, --help help for create
--name string key name (required)
--rate-limit int rate limit (requests per minute)
--scopes strings access scopes, e.g. compute:read,compute:write. List them with: fm account api-key scopes
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)fm account api-key delete
text
Permanently delete an API key.
Usage:
fm account api-key delete <api-key-id> [flags]
Flags:
-h, --help help for delete
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)fm account api-key get
text
Get detailed information about a specific API key.
Usage:
fm account api-key get <api-key-id> [flags]
Flags:
-h, --help help for get
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)fm account api-key list
text
List all API keys for your account.
Usage:
fm account api-key list [flags]
Flags:
-h, --help help for list
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)fm account api-key revoke
text
Revoke an API key, preventing further use.
Usage:
fm account api-key revoke <api-key-id> [flags]
Flags:
-h, --help help for revoke
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)fm account api-key scopes
text
List the scopes an API key can be granted.
The catalog is served by the platform, so there is no client-side list to fall
out of date. A scope is <service>:<action>, e.g. compute:read.
Grant :read and :write — they are the actions the services actually enforce,
and :write covers every mutation including start/stop/restart. The catalog also
carries other verbs, and identity additionally ACCEPTS the finer
service:resource:action form (compute:instances:read), but no service enforces
those as key scopes: a key holding only them is created and then denied on every
request. Use an access policy (fm iam) when you need finer granularity.
The global "*" is never listed: creation rejects it. Your own permissions still
apply — a key can never be granted more than you hold.
Examples:
fm account api-key scopes
fm account api-key scopes -o json
Usage:
fm account api-key scopes [flags]
Flags:
-h, --help help for scopes
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)fm account delete
text
Delete your account. This action can be reversed within 30 days by contacting support.
Usage:
fm account delete [flags]
Flags:
-h, --help help for delete
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)fm account mfa
text
Manage TOTP-based multi-factor authentication for your account.
Usage:
fm account mfa [command]
Aliases:
mfa, 2fa, totp
Available Commands:
disable Disable MFA
enable Enable MFA
setup Set up MFA
status Show MFA status
Flags:
-h, --help help for mfa
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)
Use "fm account mfa [command] --help" for more information about a command.fm account mfa disable
text
Disable MFA for your account. Requires a TOTP verification code.
Usage:
fm account mfa disable [flags]
Flags:
--code string 6-digit TOTP code from authenticator app (required)
-h, --help help for disable
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)fm account mfa enable
text
Enable MFA by verifying a TOTP code from your authenticator app.
Usage:
fm account mfa enable [flags]
Flags:
--code string 6-digit TOTP code from authenticator app (required)
-h, --help help for enable
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)fm account mfa setup
text
Set up TOTP-based multi-factor authentication.
This generates a secret key and recovery codes. Add the secret to your
authenticator app, then use 'fm account mfa enable' with a code to activate.
Usage:
fm account mfa setup [flags]
Flags:
-h, --help help for setup
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)fm account mfa status
text
Show the current MFA/TOTP status for your account.
Usage:
fm account mfa status [flags]
Flags:
-h, --help help for status
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)fm account profile
text
Show your current user profile information.
Usage:
fm account profile [flags]
Flags:
-h, --help help for profile
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)fm account session
text
Manage your active sessions across devices.
Usage:
fm account session [command]
Aliases:
session, sessions
Available Commands:
list List active sessions
revoke-all Revoke all sessions
Flags:
-h, --help help for session
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)
Use "fm account session [command] --help" for more information about a command.fm account session list
text
List all active sessions for your account.
Usage:
fm account session list [flags]
Flags:
-h, --help help for list
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)fm account session revoke-all
text
Revoke all active sessions (logout all devices).
Usage:
fm account session revoke-all [flags]
Flags:
-h, --help help for revoke-all
Global Flags:
--config string config file (default is $HOME/.fm/config.yaml)
-d, --debug enable debug/verbose output
--no-color disable colored output
-o, --output string output format: table, json, yaml, wide (default "table")
-q, --quiet suppress non-essential output
--tenant string tenant ID to operate on (overrides the active/default tenant; also FM_TENANT)