Skip to main content
The knowledge graph contains an inventory of what you run in production. The inventory includes your domains and hosts, the applications and repositories behind them, and the websites that Tolmo crawls. These commands read that inventory from your terminal. To browse it in the web app, see Explore your production. All commands accept the global --org flag. All commands also accept --json for scripting.

​
Domains

tolmo domains list shows your organization’s canonical domain inventory. By default it lists apex domains with host counts and probe summaries.
Pass --apex to list individual hosts under one apex domain. JSON output includes items, page, limit, total, and totalPages.

​
Filters and pagination

Each command returns one page. Increase --page to read more results. The domain export endpoint provides a CSV or JSON export through the REST API. To decide which of these domains the agents may test, see Define scope.

​
Applications

Use tolmo apps to inspect applications discovered in your organization’s repositories. The commands read the infrastructure graph.

​
List applications

The table shows each application’s name, type, system, endpoint count, and linked hostnames. Applications can appear before hostnames have been linked.

​
Inspect one application

Pass an exact application name or resource key:
The detail view lists HTTP methods and paths, linked hostnames, and URLs assembled from those values. Use the resource key to distinguish applications with the same name. JSON output is an array of matching graph rows. Linked hostnames reflect the graph’s recorded deployment relationships. A displayed URL does not confirm that an endpoint is currently reachable.

​
Repositories

The tolmo code command lets you browse and clone repositories connected to your organization. Tolmo resolves access credentials on the backend, so you can clone repositories from GitHub or GitLab without managing tokens locally. All subcommands accept the global --org flag to target a specific organization.

​
List repositories

Use tolmo code list to see every repository Tolmo knows about for your organization.
The --cloneable flag filters to repositories that have storage artifacts ready for cloning. Use it before running a bulk clone to preview what will be fetched.

​
Clone a repository

Use tolmo code clone to clone a single repository. Tolmo accepts and normalizes the repository in any of these formats:
Tolmo defaults to GitHub. Pass --provider gitlab when the short group/repo notation is ambiguous or when the host is not included in the URL.

​
Select a ref and working tree

A repository URL containing /tree/<branch>/<directory> identifies the repository only. Use --ref to select the branch, tag, or commit, and repeat --sparse to limit the checked-out files:
Sparse patterns use Git’s non-cone, gitignore-style syntax. They restrict the working tree; the repository archive is still downloaded. You need git installed locally.

​
Clone all repositories

Use tolmo code clone all to clone every repository in your organization that is available for cloning. Tolmo prompts for confirmation before starting.
tolmo code clone all may clone a large number of repositories, some of which can be several gigabytes. Check tolmo code list --cloneable first to understand the scope, and make sure you have sufficient disk space before proceeding.

​
Websites

Use the tolmo website subcommands to review crawled domains and their scan history. Tolmo runs the crawls, and these commands show you the results.

List crawled domains

Display crawled website records from the graph:

View scan history

List scan history with timestamps to see when each domain was last scanned:
Tolmo schedules and configures the crawls, so you don’t trigger scans from the CLI. Use tolmo website list and tolmo website scans to review the results.
website list reads up to 200 graph nodes. website scans reads up to 50 scan records. Both support --json. For a paginated inventory with DNS, web, and lifecycle filters, use Domains.

​
Next steps