> For the complete documentation index, see [llms.txt](https://docs.kyvvu.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.kyvvu.com/cli-reference/inspect.md).

# kyvvu list-agents / list-policies / manifests

**What you'll learn:** How to inspect agents, policies, manifests, and assignments from the command line.

***

## `kyvvu list-agents`

List all registered agents in your organization.

```
Usage: kyvvu list-agents [OPTIONS]

Options:
  --environment TEXT    Filter by environment (development, staging, production)
  --include-inactive    Include inactive (deactivated) agents
```

### Example

```bash
$ kyvvu list-agents
 AGENT_KEY        AGENT_ID     NAME              ENVIRONMENT    ACTIVE
 hello-kyvvu      ag_abc123    Hello Kyvvu       development    ✓
 gmail-assistant   ag_def456    Gmail Assistant    production     ✓
```

Requires an active CLI session (`kyvvu auth`).

***

## `kyvvu list-policies`

List policies for your organization, optionally filtered by agent.

```
Usage: kyvvu list-policies [OPTIONS]

Options:
  --agent-id TEXT         Filter by agent ID
  --enforcement-point TEXT
                          Filter by enforcement point (agent_registration,
                          step_execution)
  --enabled / --disabled  Filter by enabled state
```

### Example

```bash
$ kyvvu list-policies --agent-id ag_abc123
 NAME                                              ENFORCEMENT POINT   RULE_TYPE              SEVERITY  SOURCE                          ENABLED
 Agent must declare a substantive purpose           agent_registration  field_matches_regex    high      owasp_agentic_default.yaml      ✓
 Tool calls must be in the declared allowlist       step_execution      step_name_in_allowlist critical  owasp_agentic_default.yaml      ✓
```

The **Source** column shows which manifest the policy came from (or `-` for manually created policies).

Requires an active CLI session (`kyvvu auth`).

***

## `kyvvu list-manifests`

List available manifests from connected GitHub repositories.

```
Usage: kyvvu list-manifests [OPTIONS]

Options:
  --repo-id INTEGER    Filter by repository ID
```

### Example

```bash
$ kyvvu list-manifests
 MANIFEST                                FILE                          SOURCE            REPO ID  POLICIES  VALID
 OWASP Top 10 for Agentic Applications   owasp_agentic_default.yaml    Kyvvu/manifests   1        8         ✓
 EU AI Act - Basic                        eu_ai_act_basic.yaml          Kyvvu/manifests   1        6         ✓
```

If no repositories are connected, you'll see a message directing you to the dashboard.

Requires an active CLI session (`kyvvu auth`).

***

## `kyvvu assign-manifest`

Assign a manifest to an agent, creating policies automatically.

```
Usage: kyvvu assign-manifest [OPTIONS]

Options:
  --agent-id TEXT    Agent identifier (required)
  --repo-id INTEGER  Repository ID (required)
  --manifest TEXT    Manifest file path in the repo (required)
```

### Example

```bash
$ kyvvu assign-manifest --agent-id ag_abc123 --repo-id 1 --manifest owasp_agentic_default.yaml
✓ Assigned 'OWASP Top 10 for Agentic Applications' to agent ag_abc123 (8 policies created)
```

Risk filtering is applied automatically — policies with a risk classification higher than the agent's level are skipped.

Requires an active CLI session (`kyvvu auth`).

***

## `kyvvu list-assignments`

List manifest assignments, optionally filtered by agent.

```
Usage: kyvvu list-assignments [OPTIONS]

Options:
  --agent-id TEXT    Filter by agent ID
```

### Example

```bash
$ kyvvu list-assignments
 AGENT        MANIFEST                                POLICIES  SHA      ASSIGNED AT
 ag_abc123    OWASP Top 10 for Agentic Applications   8         3523abc  2026-05-14
 ag_def456    EU AI Act - Basic                        6         f91de02  2026-05-14
```

Requires an active CLI session (`kyvvu auth`).

***

## `kyvvu unassign-manifest`

Remove a manifest assignment (and the policies it created) from an agent.

```
Usage: kyvvu unassign-manifest [OPTIONS]

Options:
  --assignment-id INTEGER  Assignment ID from list-assignments (required)
```

### Example

```bash
$ kyvvu unassign-manifest --assignment-id 3
```

Requires an active CLI session (`kyvvu auth`).

***

## Other CLI commands

| Command           | Description                                                   | Reference                          |
| ----------------- | ------------------------------------------------------------- | ---------------------------------- |
| `kyvvu auth`      | Log in via the device-code flow                               | [Auth](/cli-reference/auth.md)     |
| `kyvvu logout`    | Log out                                                       | [Auth](/cli-reference/auth.md)     |
| `kyvvu whoami`    | Show current user and account status                          | [Auth](/cli-reference/auth.md)     |
| `kyvvu doctor`    | Diagnose versions, credentials, and what is actually enforced | [Doctor](/cli-reference/doctor.md) |
| `kyvvu try`       | Enforce policies offline — no account, no API key, no network | [Try](/cli-reference/try.md)       |
| `kyvvu init`      | Scaffold a project                                            | [Init](/cli-reference/init.md)     |
| `kyvvu serve`     | Start local engine server                                     | [Serve](/cli-reference/serve.md)   |
| `kyvvu --version` | Print version                                                 | —                                  |

***

## Next steps

* [Manifests](/policy-authoring/templates.md) — manifest structure and assignment workflow
* [Dashboard Guide](/platform/dashboard.md) — visual interface for the same data