guild llm - Guild

Manage LLM credentials and model policies from the CLI. The credential and policy groups each have their own section below, with subcommands in alphabetical order. See LLM settings for the full model gateway guide.

credential

Inspect an account’s LLM credentials.

credential list

List an account’s LLM credentials and the access each grants. Use it to find the credential ID that policy create binds to.

guild llm credential list <account>              # List an account's LLM credentials
guild llm credential list <account> --archived   # Show archived credentials instead of live ones

Option	Description
`--archived`	Show archived credentials instead of live ones.
`--limit <number>`	Number of results to return. Defaults to `20`.
`--offset <number>`	Offset for pagination. Defaults to `0`.

Argument	Description
`<account>`	Account ID or name. Required.

The output has one row per credential, ending with the credential UUID to pass to guild llm policy create --credential.

policy

View and manage model policies for a workspace, agent, or workspace-agent target. A policy binds a credential access to a target with an optional model allowlist.

policy create

Create a model policy for a target.

guild llm policy create --credential <id> --target-id <id>                              # Allow all models
guild llm policy create --credential <id> --target-id <id> --models "haiku-*,sonnet-*"  # Restrict models
guild llm policy create --credential <id> --publisher ANTHROPIC --target-id <id>        # Choose a publisher

Option	Description
`--credential <credential-id>`	Required. The LLM credential the policy uses. Find it with `credential list`.
`--models <patterns>`	Comma-separated model globs the credential may use for this target, such as `haiku-,sonnet-`. Omit it to allow all models.
`--publisher <publisher>`	The model publisher on the credential, such as `ANTHROPIC`. Case-insensitive. Omit it when the credential serves a single publisher and Guild infers it.
`--target-id <target-id>`	Required. The target ID: a workspace, agent, or workspace-agent.

If the credential serves more than one publisher and you omit --publisher, the command fails and lists the publishers the credential serves.

policy delete

Delete a model policy.

guild llm policy delete <policy-id>   # Delete a policy

Argument	Description
`<policy-id>`	The policy ID.

policy list

List an account’s model policies.

guild llm policy list <account>                    # List an account's model policies
guild llm policy list <account> --target-id <id>   # Show only one target's rules

Option	Description
`--limit <number>`	Number of results to return. Defaults to `20`.
`--offset <number>`	Offset for pagination. Defaults to `0`.
`--target-id <target-id>`	Only show the rules on one workspace, agent, or workspace-agent. Defaults to every target.

Argument	Description
`<account>`	Account ID or name.

policy reorder

Reorder a target’s model policies by rank, highest first.

guild llm policy reorder <target-id> --policies <id1>,<id2>,<id3>   # Set the rank order

Option	Description
`--policies <ids>`	Required. Comma-separated policy IDs in the order you want. The list must include all of the target’s policies, with no duplicates.

Argument	Description
`<target-id>`	The target ID: a workspace, agent, or workspace-agent.

policy update

Update a policy’s allowed models. Pass exactly one of --models or --all-models.

guild llm policy update <policy-id> --models "haiku-*,sonnet-*"   # Replace the model allowlist
guild llm policy update <policy-id> --all-models                  # Allow all models

Option	Description
`--all-models`	Allow all models, clearing any model restriction.
`--models <patterns>`	Comma-separated model patterns. Replaces the current list. An empty list allows no models.

Argument	Description
`<policy-id>`	The policy ID.

​credential

​credential list

​policy

​policy create

​policy delete

​policy list

​policy reorder

​policy update