Administration and CI

Manage workspaces, teams, members, credits, and scoped automation tokens.

Workspaces and teams

epismo workspace create --handle team
epismo workspace update <workspace-id> --handle new-name
epismo workspace checkout <workspace-id>
epismo workspace use acme
epismo -w acme workspace member list
epismo workspace member list
epismo workspace member upsert <user-id> --role admin
epismo workspace member delete <user-id>
 
epismo team list
epismo team create --name "Website" --description "Marketing and docs"
epismo team update <team-id> --name "Website launch"
epismo team member list --team-id <team-id>
epismo team member add <user-id> --team-id <team-id>
epismo team member delete <user-id> --team-id <team-id>

epismo workspace checkout <workspace-id> starts a hosted subscription checkout. If the workspace has a cancellation scheduled for the end of its current billing period, it resumes that existing subscription instead of creating a second one.

Workspace roles are owner, admin, and member. A workspace reference is an exact ID or unique handle such as acme; use --workspace/-w for a one-command override, EPISMO_WORKSPACE for a shell or job, and workspace use only to save a default. Teams are private sharing principals inside the selected workspace. Member commands accept supported bulk forms; use --help for the exact current argument shape.

Credits

epismo credit balance
epismo credit checkout --quantity 500

The resolved execution context determines which balance is read or purchased. Check whoami and the current workspace before a large automated job. A credit-gated request may return 402 when the selected context has insufficient balance.

CI tokens

epismo token create --workspace-id <workspace-id>
EPISMO_TOKEN=<access-token> epismo whoami

Store tokens in a secret manager, never in a Playbook Definition, Case input, Record, repository, or shell history. A workspace-scoped EPISMO_TOKEN limits access to its workspace; do not use a conflicting --workspace value. Give each automation environment its own token so it can be rotated without interrupting personal sessions.