Skip to main content
Updated November 10, 2026 The raff tag command group manages the account’s tags. A tag is shared by every server that has it, so a rename, colour or priority change shows on all of them. Put a tag on a server with raff vm tags add, and link a tag to a firewall with raff security-group tags set. create, update and delete need the account.tags.manage permission (account Owner and Admin by default; it can be added to custom roles).

​
Subcommand index

​
list

Lists every tag of the account with its colour, priority, server count and the firewalls it carries (one at most per project). Servers are counted in the projects you can see; set --project-id or RAFF_PROJECT_ID to count one project.

​
create

​
update

Change a tag on every server that has it. --priority 0 removes the priority.

​
delete

Delete a tag. It is removed from every server and every firewall link. Firewalls the tag put on servers stay on those servers. Asks for confirmation unless --force is set.

Security group commands

raff security-group tags set to link a tag to a firewall.

VM commands

raff vm tags to tag a server.

Tags and organization

How tags, colours and priorities work.
Last modified on November 10, 2026