Skip to main content
Updated May 10, 2026 The raff project command group manages projects — the access-control unit that owns every resource. See Team & Projects — Projects for the model.

Subcommand index


list

List every project the API key has visibility into. Owner-level keys see all; project-only keys see only their assigned projects.

get

Show details for one project — name, description, default region, member count, created-at, the Default badge if applicable.

create

Create a new project. Default region is us-east if omitted. Project names must be unique per account.

update

Rename or change the description. The project’s identifier and slug stay stable; automation referencing the project by UUID is unaffected.

delete

Delete an empty project. Fails if any resources still belong to it. The Default project cannot be deleted, ever — see Edit or delete a project for the rules.

Member subcommands

raff project member manages project-scoped members. The project is taken from --project-id (global flag), RAFF_PROJECT_ID, or the active profile — same precedence as every other project-scoped command. Account Owners have implicit access via their account-level role and don’t need to be added explicitly. Alias: raff project members.

member list

List members of the current project. Output columns: ID, EMAIL, STATUS, ROLE.

member get

member add

Add an existing account user (or API key) to the current project. Required: --role-id plus one of --target-user-id / --api-key-id (mutually exclusive). For brand-new users, send an account invitation first via raff invitation create-account, or invite directly to a project via raff invitation create-project.

member update

Update a project member’s role or status. At least one flag must be provided.

member remove

Remove a member from the current project. Pass --force to skip the confirmation prompt. The member’s account-level access is unaffected.

Permission notes

If you get 403 Forbidden, the key’s role doesn’t include the permission for that action.

VM commands

Use —project-id to scope VM operations.

Roles, scopes, and the Owner

Why delete may 403 even on Admin keys.

Permissions matrix

Which role grants which account.projects.* permission.
Last modified on May 11, 2026