TrustMint commands

fgai manages TrustMint devices and their data through the same public capability APIs used by the TrustMint API reference. Each command group maps to one public /<capability>/v1/... surface; per-command authorization is decided by the platform.

Run fgai <group> --help to list every verb in a group — the list is generated from the installed CLI, so it always matches what your version can do.

Command groups

Group	What it manages
provisioning	Device provisioning, registrars, enrollment & identity (ThingMake)
registry	Vendor / device-model / software registry (ThingMake)
access	Thing repositories, scopes & access grants (ThingHub)
attributes	Device attribute buckets — server / shared / client (ThingIO)
telemetry	Device telemetry query (ThingIO)
twins	Device twin read + desired-state set (ThingIO)
rules	Rule authoring — threshold / windowed rules (ThingLogic)
pipelines	Pipeline DAG authoring & lifecycle (ThingLogic)
alarms	Alarm lifecycle — open / ack / resolve (ThingLogic)
sinks	Data-sink registry — persistence / notification / forward (ThingBand)
connect	Ingest connect adapters + data streams (ThingFeed)
simulation	Virtual-device fleets & runs (ThingLab)
pki	Public PKI discovery — JWKS, CA chain (no credential needed)

Examples

# Public discovery — no credential required
fgai pki jwks

# List thing repositories (needs an authenticated profile)
fgai access repositories-list --json

# Get one device twin
fgai twins get --thing <thing-id> --json

# Create a rule from a JSON body
fgai rules create --body-file rule.json

Every call uses a documented public capability route at api.flexgalaxy.ai, honours the active profile and authentication mode, and prints JSON. TrustMint’s platform-admin, browser-only surfaces (Arsenal, DeckLoad) are intentionally not exposed on the CLI.