--raw-json emits one compact line for jq, log processors, and AI-agent tool adapters.
JSON input
Commands that accept complex payloads require exactly one input source:CI configuration
Store credentials in masked CI secrets instead of committing the credentials file:Exit codes and errors
Successful commands exit with0. Authentication, validation, permission, provider, and network errors exit with 1 and print JSON:
429 Too Many Requests, use retryAfter to delay the next attempt. Avoid immediate retry loops that consume the Workspace allowance.
Self-hosted automation
AI agents
Agents can call the CLI as a subprocess and parse--raw-json. Use read-only Token scopes during discovery, require human confirmation before publishing, and issue a separate write Token only to the execution environment that needs it. For clients with native MCP support, prefer the MCP integration instead of wrapping shell commands.