CLI: Organizations

Manage tenant organizations via the porta org command.

Mode: HTTP (requires porta login)

porta org create

porta org create --name "Acme Corp" [--locale en] [--login-methods password,magic_link]

Flag	Required	Description
--name	✅	Organization name
--locale		Default locale (e.g., en)
--login-methods		Comma-separated login methods

porta org list

porta org list [--status active] [--search "acme"] [--page 1] [--page-size 20]

Flag	Description
--status	Filter by status
--search	Search by name or slug
--page	Page number
--page-size	Items per page

porta org show

porta org show --id <org-id>

porta org update

porta org update --id <org-id> [--name "New Name"] [--locale en] [--default-login-methods password,magic_link]

porta org suspend

porta org suspend --id <org-id>

Suspends the organization. All authentication requests will be rejected until reactivated.

porta org activate

porta org activate --id <org-id>

Reactivates a suspended organization.

porta org archive

porta org archive --id <org-id>

DANGER

Archiving is permanent and cannot be undone. The CLI will prompt for confirmation unless --force is used.

porta org branding

# View branding
porta org branding --id <org-id>

# Update branding
porta org branding --id <org-id> \
  --logo-url "https://example.com/logo.png" \
  --primary-color "#0078d4" \
  --company-name "Acme Corp"

Flag	Description
--logo-url	Logo URL
--favicon-url	Favicon URL
--primary-color	Primary accent color (hex)
--company-name	Display name on login pages
--custom-css	Custom CSS for login pages

porta org destroy

Permanently destroy an organization and all its child entities (applications, clients, users, roles, permissions, claim definitions). Uses PostgreSQL CASCADE deletion. The super-admin organization is protected and cannot be destroyed.

# Preview what will be destroyed (no changes)
porta org destroy <id-or-slug> --dry-run

# Destroy with type-to-confirm safety prompt
porta org destroy acme-corp

# Skip confirmation (for scripting)
porta org destroy acme-corp --force

Flag	Description
--dry-run	Preview cascade counts without deleting
--force	Skip the type-to-confirm safety prompt

Cascade Preview

The command always shows what will be destroyed before prompting:

⚠️  This will PERMANENTLY destroy the following:

  Organization:      Acme Corp (acme-corp)
  Applications:      3
  Clients:           5
  Users:             42
  Roles:             8
  Permissions:       16
  Claim Definitions: 4

Type the organization slug "acme-corp" to confirm destruction:

Safety

• The super-admin organization cannot be destroyed (enforced at both SQL and application level)
• An audit log entry is written before deletion (the organization ID is preserved in the audit trail)
• The --force flag skips the interactive prompt but still requires admin authentication and the ORG_ARCHIVE permission