Global flags and JSON output

Tolmo exposes two persistent configuration flags:

Flag	Description
`--org <slug>`	Override the organization for one command
`--profile <name>`	Select a named profile for one command

tolmo --org acme findings list
tolmo findings list --org acme
tolmo --profile work sql "SELECT 1"

Flags override the corresponding environment variables and stored profile settings. They do not grant access to other organizations.

JSON output

--json belongs to individual commands or command groups. Put it after the command or group that declares it:

tolmo findings list --json
tolmo sql --json "SELECT 1"

JSON shapes depend on the command:

Command	JSON shape
`findings list`	Array of all matching findings
`sql`, `cypher`	Object with `rows`, `fields`, and `metadata`
`domains list`	Page object with `items` and pagination fields
`apps list`, `apps get`	Array of graph rows

tolmo findings list --status open --json | jq '.[].title'
tolmo sql --json "SELECT 1 AS value" | jq '.rows[]'

Use tolmo <command> --help to check the flags supported by your installed version. --api-url is an auth login option, not a global flag.