It's All Stack · CLI Reference

IAS Suite WP-CLI

One coherent wp ias surface across the suite: read-first, JSON by default, dry-runnable, and audited. Generated from the command docblocks, so it says exactly what --help says.

• Commands 83
• Plugins 6
• Machine spec cli-spec.json

What this is

Every plugin in the It's All Stack suite exposes its operator-facing functionality as wp ias <plugin> <command>, so developers, hosts, support staff, CI pipelines and AI agents can inspect state and run narrow, explicit actions without clicking through wp-admin. There is nothing to install: the CLI ships inside the plugin you already have, and loads only under WP-CLI, so it adds no overhead to web, cron or AJAX requests.

Start with the discovery command, which lists the groups available on the store you are pointed at:

wp ias

Command groups

• IAS License Activator

  License server: generate, activate, validate, revoke and track licence keys, webhooks and packages.

  wp ias license-activator · 23 commands · v1.1.16

• IAS Serial Key Manager

  Serial keys & redemption codes: list, generate, import/export, assign, redeem, revoke and delete.

  wp ias serial-keys · 13 commands · v1.1.15

• IAS Bundle Deals

  Bundle deals & ownership: list, inspect, create, update, sync and delete bundles.

  wp ias bundle-deals · 8 commands · v1.1.13

• IAS Single Purchase Enforcer

  Duplicate-purchase enforcement: inspect ownership, flush the cache, revoke ownership and purge a customer.

  wp ias single-purchase · 7 commands · v1.1.13 · free

• IAS Subscriptions

  Recurring billing: list, renew, pause, resume, cancel, reactivate, switch, trial, fees and delete.

  wp ias subscriptions · 20 commands · v1.1.16

• IAS S3 Storage

  S3-backed downloads: verify, inspect, regenerate links, offload, migrate back and purge orphans.

  wp ias s3-storage · 11 commands · v1.1.16

Safety model

These commands run under WP-CLI, whose trust boundary is shell access: anyone who can run wp on the server already has full database and PHP access via wp db query and wp eval. The CLI therefore adds no separate capability check — one would add no real protection, and would wrongly refuse commands run without --user=, since WP-CLI bootstraps as user 0. Protection for the commands that matter comes from four things instead:

• Dry run. Every mutating command accepts --dry-run: it resolves the change, reports exactly what would happen, writes an audit entry, and touches nothing.
• Confirmation. Irreversible commands prompt unless --yes is passed, which is the automation path.
• Mandatory scope on bulk deletes. A bulk delete refuses to run without an explicit bound — a --filter, or something like --max-age-days — rather than defaulting to delete-all.
• Audit. Every mutation and every dry run is recorded to the suite-wide CLI audit log with a before-state, readable with wp ias license-activator audit-log list.

Licence tiers behave predictably: read commands run regardless of licence validity, so support and agents can always inspect state, while mutations honour the same feature gates as the admin UI and return a structured licence_required error rather than failing silently.

Every command

83 commands across 6 plugins. Read commands change nothing; Write commands mutate state and accept --dry-run; Irreversible commands cannot be undone from the CLI. The kind is derived from each command's own declared options, not from a separate list, so it cannot drift from the command itself.