chainctl
chainctl Chainguard Control
2 min read
For the complete documentation index, see llms.txt.
List policy gate bindings.
List active policy gate bindings to see which policies are enabled and in which mode.
Filter by –parent to see bindings for a specific scope. Without a filter, all accessible bindings are listed. Each binding shows the policy it activates and the enforcement mode (enforced or dry-run).
chainctl policy-gate binding list [--parent ORGANIZATION_NAME | ORGANIZATION_ID] [--output=json|table] [flags] # List bindings for an organization to see which policies are active
chainctl policy-gate binding list --parent=engineering
# List all accessible bindings
chainctl policy-gate binding list --parent string The name or id of the organization to list bindings for. --api string The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
--audience string The Chainguard token audience to request. (default "https://console-api.enforce.dev")
--config string A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
--console string The url of the Chainguard platform Console. (default "https://console.chainguard.dev")
--force-color Force color output even when stdout is not a TTY.
-h, --help Help for chainctl
--issuer string The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
--log-level string Set the log level (debug, info) (default "ERROR")
-o, --output string Output format. One of: [csv, env, go-template, id, json, markdown, none, table, terse, tree, wide]
-v, --v int Set the log verbosity level.Last updated: 2026-05-22 22:52