account-kits

naive account-kits list

naive account-kits create --name Pro \
  --mode allowlist --toolkits gmail,slack,stripe \
  --tool gmail.enable=GMAIL_FETCH_EMAILS,GMAIL_SEND_EMAIL \
  --custom-auth gmail=ac_brand_gmail

naive account-kits assign <kit_id> <user_id>

Kits belong to a project. These commands act inside the active one (naive projects use), else the organization’s default; --project <project_id> selects another for one command. assign refuses a child project from a different project than the kit — policy does not cross the boundary.

--mode — open | allowlist | blocklist
--tool <toolkit>.enable=A,B / .disable=A,B — per-tool filter (repeatable)
--custom-auth <toolkit>=ac_xxx — white-label OAuth (repeatable)

Governance / approval gating (requiresApproval per primitive) is configured via the dashboard Account Kit editor or the REST API (primitives_config / connections_config) — see Approvals. Sensitive actions are gated by default.

CLI Reference

Durable runtime

Multi-tenant

Legacy orchestration (deprecated)

Primitives