Skip to content

grafos costs

Inspect tenant-scoped invoice totals and per-resource line items for a billing window.

grafos costs

Tenant-scoped cost rollup. Reads the scheduler's `/api/v1/billing/invoice` endpoint with the resolved tenant auth context: a `tenant_user` credential sees its own invoice, an admin credential may pass `--tenant <name>` to inspect any tenant. JSON mode is byte-passthrough; table mode summarizes invoice header + per-resource line items
Usage: grafos costs [OPTIONS]
Options:
--fabric <FABRIC> Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
--scheduler <SCHEDULER> Scheduler URL. Falls back to `GRAFOS_SCHEDULER`, then to the Tenura-hosted credentials when that context applies [env: GRAFOS_SCHEDULER=]
--bearer <BEARER> FabricAdmin bearer token (alternative to mTLS) [env: GRAFOS_BEARER=]
--cert <CERT> Client certificate (PEM) for mTLS [env: GRAFOS_CERT=]
--wide Show additional columns in table output
--key <KEY> Client private key (PEM) matching `--cert` [env: GRAFOS_KEY=]
--no-color Disable color output
--ca <CA> CA bundle (PEM) used to verify the scheduler's TLS cert [env: GRAFOS_CA=]
--pool <POOL> Pool name (default: "default") [default: default]
--window <WINDOW> Billing window: `minute` / `hour` / `day` or a custom integer in seconds. Defaults to `hour` [default: hour]
--start <START> Window start (Unix epoch seconds, inclusive). When set together with `--end`, takes precedence over `--window`
--end <END> Window end (Unix epoch seconds, exclusive). Pairs with `--start`
--tenant <TENANT> Tenant name filter. Tenant-user credentials are restricted to their own tenant by the scheduler regardless of this flag; admin credentials may set it to inspect any tenant
--json Emit JSON. The body is byte-passthrough of the scheduler's invoice response so existing `jq` scripts keep working unchanged
-h, --help Print help
-V, --version Print version