@whop/cli 0.14.0 → 0.14.2

package/skills/whop-team-members/SKILL.md

@@ -9,14 +9,85 @@ A Team Member is a member of an account's team: the link between a user and an a
 
 Use the Team Members API to list an account's team, add a user to the team with a system role, change a member's role, and remove members. Adding a user who has not yet accepted sends an invitation instead.
 
-## Commands
+# whop team-members create
 
-| Command | Description |
-|---------|-------------|
-| `whop team-members list` | List Team Members |
-| `whop team-members create` | Create Team Member |
-| `whop team-members delete` | Delete Team Member |
-| `whop team-members get` | Retrieve Team Member |
-| `whop team-members update` | Update Team Member |
+Create Team Member
 
-Run `whop team-members <command> --help` for options, or `whop team-members <command> --schema` for full argument details.
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | yes |  | Account ID, prefixed `biz_`. |
+| `--email` | `string` | no |  | Email address to invite. Mutually exclusive with `user_id`. If the email already belongs to a Whop account it is treated the same as passing that account's `user_id`; otherwise a pending invite is created for the email. |
+| `--role` | `string` | yes |  | The system role to grant. |
+| `--user_id` | `string` | no |  | The user to add to the team, prefixed `user_`. Mutually exclusive with `email`. |
+| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop team-members delete
+
+Delete Team Member
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | Team member ID — `ausr_` for accepted members, `ausri_` for pending invites. |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop team-members get
+
+Retrieve Team Member
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | Team member ID — `ausr_` for accepted members, `ausri_` for pending invites. |
+
+---
+
+# whop team-members list
+
+List Team Members
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | Account ID, prefixed `biz_`. |
+| `--status` | `string` | no |  | Only return members with this status: `joined` (accepted members) or `pending` (pending invites). Both are returned by default. |
+| `--user_id` | `string` | no |  | Only return the membership for this user ID, prefixed `user_`. |
+| `--role` | `string` | no |  | Only return members with this role. `custom` matches members on a dashboard-managed custom role. |
+| `--created_before` | `string` | no |  | Only return members added before this ISO 8601 timestamp. |
+| `--created_after` | `string` | no |  | Only return members added after this ISO 8601 timestamp. |
+| `--order` | `string` | no |  | Field used to sort members. |
+| `--direction` | `string` | no |  | Sort direction. Defaults to `desc`. |
+| `--first` | `number` | no |  | Number of members to return. Defaults to 20; maximum 100. |
+| `--after` | `string` | no |  | Cursor for the next page of members. |
+
+---
+
+# whop team-members update
+
+Update Team Member
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | Team member ID — `ausr_` for accepted members, `ausri_` for pending invites. |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--role` | `string` | yes |  | The system role to grant. |
+
+> Confirm with the user before executing this destructive command.

package/skills/whop-transfers/SKILL.md

@@ -9,13 +9,72 @@ Transfers move value between identities on Whop. They are used for account-to-ac
 
 Use the Transfers API to create a transfer, list previous transfers, and retrieve a transfer by ID when reconciling money movement between accounts or users.
 
-## Commands
+# whop transfers create
 
-| Command | Description |
-|---------|-------------|
-| `whop transfers list` | List Transfers |
-| `whop transfers create` | Create Transfer |
-| `whop transfers recipients` | List Transfer Recipients |
-| `whop transfers get` | Retrieve Transfer |
+Create Transfer
 
-Run `whop transfers <command> --help` for options, or `whop transfers <command> --schema` for full argument details.
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--amount` | `number` | yes |  | The amount to move, in the transfer currency. For example 25.00. |
+| `--currency` | `string` | no |  | Currency, such as `usd`. Required for ledger transfers. |
+| `--destination_id` | `string` | no |  | The recipient. Required for ledger and wallet_send (a user_/biz_/ldgr_ ID, or — for sends — an email). Omit for claim_link. |
+| `--expires_at` | `unknown` | no |  | claim_link only. Link expiry as an ISO 8601 timestamp. Defaults to 24 hours from creation. |
+| `--idempotence_key` | `unknown` | no |  | Ledger transfers and wallet sends. A unique key that makes retries safe. Retrying with the same key returns the original transfer, or attaches to the original wallet send, instead of moving money twice. |
+| `--metadata` | `unknown` | no |  | Ledger transfers only. Custom key-value pairs attached to the transfer. Max 50 keys, 100 chars per key, 500 chars per string value. |
+| `--notes` | `unknown` | no |  | Ledger transfers only. A short note describing the transfer. |
+| `--origin_id` | `string` | yes |  | The account sending the funds. A user ID (user_xxx), account ID (biz_xxx), or ledger account ID (ldgr_xxx). |
+| `--redeemable_count` | `number` | no |  | claim_link only. How many different users can claim the link. Defaults to 1. |
+| `--type` | `string` | no |  | The kind of money movement, which decides what comes back. Defaults to ledger. `ledger` moves credit between two Whop balances and returns a `transfer`; `wallet_send` sends USDT from the origin account's Ethereum wallet and returns a `send`; `claim_link` funds a shareable link anyone with the URL can redeem and returns a `claim_link`. A `ledger` transfer from a stablecoin-rails account settles on-chain when covered, and still returns a `transfer`. |
+| `--idempotency-key` | `string` | yes |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
+
+> Confirmation policy: For `--type ledger` only, the user's request to execute the transfer counts as confirmation when it includes exact `--origin_id`, `--destination_id`, `--amount`, and `--currency` values and both IDs use a `biz_`, `user_`, or `ldgr_` prefix. Execute that confirmed transfer yourself. This exception does not apply to `wallet_send` or `claim_link`; ask for explicit confirmation before executing those transfer types. Always include a unique `--idempotency-key`. If a result is uncertain, retry the same transfer with the same key.
+
+---
+
+# whop transfers get
+
+Retrieve Transfer
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | The transfer ID. |
+
+---
+
+# whop transfers list
+
+List Transfers
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--origin_id` | `string` | no |  | Filter to transfers sent from this account. Provide this or destination_id. |
+| `--destination_id` | `string` | no |  | Filter to transfers received by this account. Provide this or origin_id. |
+| `--order` | `string` | no |  | Sort column. Defaults to created_at. |
+| `--direction` | `string` | no |  | Sort direction. Defaults to desc. |
+| `--created_before` | `string` | no |  | Only transfers created strictly before this ISO 8601 timestamp. |
+| `--created_after` | `string` | no |  | Only transfers created strictly after this ISO 8601 timestamp. |
+| `--first` | `number` | no | `50` | Number of transfers to return from the start of the window. |
+| `--after` | `string` | no |  | Cursor to fetch the page after (from page_info.end_cursor). |
+| `--last` | `number` | no |  | Number of transfers to return from the end of the window. |
+| `--before` | `string` | no |  | Cursor to fetch the page before (from page_info.start_cursor). |
+
+---
+
+# whop transfers recipients
+
+List Transfer Recipients
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--origin_id` | `string` | yes |  | The originating account ID, prefixed `biz_`. |
+| `--query` | `string` | no |  | Search users and accounts by name, username, or ID, in the dashboard's relevance order — this additionally requires the member:basic:read scope. Omit it to get the origin account's team members followed by your own other accounts. Complete email addresses return no matches. |
+| `--first` | `number` | no | `20` | Number of recipients per page. Search queries preserve the dashboard's 20-result maximum. |
+| `--after` | `string` | no |  | Cursor to fetch the page after (from page_info.end_cursor). |

package/skills/whop-users/SKILL.md

@@ -9,21 +9,274 @@ A User represents a person on Whop. Users have a public profile and can buy prod
 
 Use the Users API to search for users, retrieve or update profiles, and check whether a user has access to an account, product, or experience.
 
-## Commands
-
-| Command | Description |
-|---------|-------------|
-| `whop users list` | List Users |
-| `whop users me` | Retrieve Current User |
-| `whop users update-me` | Update Current User |
-| `whop users preferences` | Retrieve |
-| `whop users update-preferences` | Update |
-| `whop users set-notification-preferences` | Set |
-| `whop users experience-notification-preferences` | List Experiences |
-| `whop users notification-topic-preferences` | List Topics |
-| `whop users get` | Retrieve User |
-| `whop users update` | Update User |
-| `whop users access` | Check User Access |
-| `whop users recommend_actions` | List Recommended Actions |
-
-Run `whop users <command> --help` for options, or `whop users <command> --schema` for full argument details.
+# whop users access
+
+Check User Access
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | The user_ tag or username to check access for. |
+| `resource_id` | `string` | yes | An account (biz_), product (prod_), or experience (exp_) ID. |
+
+---
+
+# whop users delete-passkey
+
+Delete
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | Passkey ID, prefixed `wcred_`. |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--authenticator_data` | `string` | yes |  | The `authenticatorData` from the WebAuthn assertion, base64url-encoded. |
+| `--client_data_json` | `string` | yes |  | The `clientDataJSON` from the WebAuthn assertion, base64url-encoded. |
+| `--signature` | `string` | yes |  | The `signature` from the WebAuthn assertion, base64url-encoded. |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop users experience-notification-preferences
+
+List Experiences
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--first` | `number` | no |  | The number of preferences to return. |
+| `--after` | `string` | no |  | A cursor; returns preferences after this position. |
+
+---
+
+# whop users get
+
+Retrieve User
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | User ID (prefixed `user_`) or username. |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | When set, returns the user's account-specific profile overrides for this account. |
+
+---
+
+# whop users list
+
+List Users
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--query` | `string` | no |  | A search term to filter users by name or username. |
+| `--first` | `number` | no |  | The number of users to return (max 50). |
+| `--after` | `string` | no |  | A cursor; returns users after this position. |
+| `--last` | `number` | no |  | The number of users to return from the end of the range. |
+| `--before` | `string` | no |  | A cursor; returns users before this position. |
+
+---
+
+# whop users me
+
+Retrieve Current User
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | When set, returns your account-specific profile overrides for this account. |
+| `--include_balance_history` | `boolean` | no |  | Also compute your balance history (opt-in; runs a heavier query). Ignored for callers without balance-read scope. |
+| `--from` | `string` | no |  | Balance-history window start, ISO 8601 date or datetime. Defaults to 30 days ago. Only used with `include_balance_history`. |
+| `--to` | `string` | no |  | Balance-history window end, ISO 8601 date or datetime. Defaults to now. Only used with `include_balance_history`. |
+| `--interval` | `string` | no |  | Balance-history point granularity. Defaults to `day`. Only used with `include_balance_history`. |
+| `--time_zone` | `string` | no |  | IANA time zone the balance-history points are bucketed in. Defaults to `UTC`. Only used with `include_balance_history`. |
+
+---
+
+# whop users me-oauth_grants
+
+List OAuth Grants
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--app_id` | `string` | no |  | Only return grants for this app, prefixed `app_`. An app the user has never authorized returns an empty list. |
+| `--first` | `number` | no |  | The number of grants to return (default 20, max 100). |
+| `--after` | `string` | no |  | A cursor; returns grants after this position. |
+| `--last` | `number` | no |  | The number of grants to return from the end of the range. |
+| `--before` | `string` | no |  | A cursor; returns grants before this position. |
+| `--order` | `string` | no |  | The field to sort grants by. |
+| `--direction` | `string` | no |  | Sort direction. |
+
+---
+
+# whop users notification-topic-preferences
+
+List Topics
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--channel` | `string` | no |  | Only return preferences for this delivery channel (or not narrowed to a channel). |
+| `--account_id` | `string` | no |  | Only return preferences scoped to this account's member notifications (`biz_` tag). |
+| `--team_account_id` | `string` | no |  | Only return preferences scoped to this account's team notifications (`biz_` tag). |
+| `--experience_id` | `string` | no |  | Only return preferences scoped to this experience (`exp_` tag). |
+| `--topic_id` | `string` | no |  | Only return preferences scoped to this notification topic (`topic_` tag). |
+| `--first` | `number` | no |  | The number of preferences to return. |
+| `--after` | `string` | no |  | A cursor; returns preferences after this position. |
+
+---
+
+# whop users passkey-challenge
+
+Create Challenge
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--challenge_type` | `string` | yes |  | The ceremony this challenge is for. |
+| `--passkey_id` | `string` | no |  | The passkey the ceremony targets, prefixed `wcred_`. Required when `challenge_type` is `deletion`, ignored otherwise. |
+| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop users passkeys
+
+List
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--first` | `number` | no |  | The number of passkeys to return (default 20, max 100). |
+| `--after` | `string` | no |  | A cursor; returns passkeys after this position. |
+| `--last` | `number` | no |  | The number of passkeys to return from the end of the range. |
+| `--before` | `string` | no |  | A cursor; returns passkeys before this position. |
+| `--order` | `string` | no |  | The field to sort passkeys by. |
+| `--direction` | `string` | no |  | Sort direction. |
+
+---
+
+# whop users preferences
+
+Retrieve
+
+---
+
+# whop users recommend_actions
+
+List Recommended Actions
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | `me`, or the authenticated user's own `user_` tag or username. |
+
+---
+
+# whop users register-passkey
+
+Register
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--attestation_object` | `string` | yes |  | The `attestationObject` from the WebAuthn attestation response, base64url-encoded. |
+| `--client_data_json` | `string` | yes |  | The `clientDataJSON` from the WebAuthn attestation response, base64url-encoded. |
+| `--credential_id` | `string` | yes |  | The WebAuthn credential ID the authenticator returned, base64url-encoded. |
+| `--nickname` | `string` | yes |  | A name for this passkey, usually the device it lives on. 255 characters or fewer. |
+| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop users set-notification-preferences
+
+Set
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--preferences` | `array` | yes |  | The preferences to set, at most 100 per request. |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop users update
+
+Update User
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | User ID (prefixed `user_`) or username. |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | The account whose profile override to update. Required for API key callers. |
+| `--bio` | `string` | no |  |  |
+| `--name` | `string` | no |  |  |
+| `--profile_picture` | `object` | no |  |  |
+| `--username` | `string` | no |  |  |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop users update-me
+
+Update Current User
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | When set, updates the authenticated user's profile override for this account instead of their global profile. |
+| `--bio` | `string` | no |  |  |
+| `--name` | `string` | no |  |  |
+| `--profile_picture` | `object` | no |  |  |
+| `--username` | `string` | no |  |  |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop users update-preferences
+
+Update
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--investigation_enabled` | `boolean` | no |  | Whether investigation mode is enabled for the user. Only meaningful for staff users with investigation access. |
+
+> Confirm with the user before executing this destructive command.

package/skills/whop-verifications/SKILL.md

@@ -9,17 +9,59 @@ A Verification represents a legal identity for a person or business. Accounts an
 
 Use the Verifications API to start or resume a hosted verification session, check review status, and submit requested details or documents. If `requested_information` contains items, submit answers with [Update Verification](https://docs.whop.com/api-reference/beta/verifications/update-verification).
 
-## Commands
+# whop verifications create
 
-| Command | Description |
-|---------|-------------|
-| `whop verifications list` | List Verifications |
-| `whop verifications create` | Create Verification |
-| `whop verifications get` | Retrieve Verification |
-| `whop verifications update` | Update Verification |
+Create Verification
 
-Run `whop verifications <command> --help` for options, or `whop verifications <command> --schema` for full argument details.
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | Account or user ID whose identity you want to verify. Use a `biz_` account ID for account verifications, or the caller's `user_` ID for personal verification. |
+| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop verifications get
+
+Retrieve Verification
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `verification_id` | `string` | yes | Verification profile ID, prefixed `idpf_`. |
+
+---
+
+# whop verifications list
+
+List Verifications
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | Account or user ID whose verifications you want to list. Use a `biz_` account ID, or the caller's `user_` ID for personal verifications. |
+| `--order` | `string` | no |  | Field used to sort returned verifications. |
+| `--direction` | `string` | no |  | Sort direction for returned verifications. |
+
+---
+
+# whop verifications update
+
+Update Verification
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `verification_id` | `string` | yes | Verification profile ID, prefixed `idpf_`. |
+
+> Confirm with the user before executing this destructive command.
 
 ## Steps that finish in the browser
 
-Some commands respond with a URL the user must open in a browser to finish the flow (`authorize_url`, `session_url`, `deposit_url`) — the CLI cannot complete that step itself. When a response contains one of these fields, or the CLI prints "Action required: open this link in the user's browser", open that link in the user's browser for them, tell them what to complete there, then re-run the matching `get`/`list` command to confirm the step finished.
+Some commands respond with a URL the user must open in a browser to finish the flow (`authorize_url`, `session_url`, `deposit_url`, `checkout_url`) — the CLI cannot complete that step itself. When a response contains one of these fields, or the CLI prints "Action required: open this link in the user's browser", open that link in the user's browser for them, tell them what to complete there, then re-run the matching `get`/`list` command to confirm the step finished.