# Account

URL: https://docs.hanzo.ai/docs/cli/account

> The `hanzo account` commands.

Also for this capability: [API](https://docs.hanzo.ai/docs/openapi/account) · **CLI** · [MCP](https://docs.hanzo.ai/docs/mcp-tools/account) · [SDKs](https://docs.hanzo.ai/docs/sdks)

Your own account: API keys you mint and revoke, and org onboarding.

[API reference →](https://docs.hanzo.ai/docs/openapi/account)

```bash
hanzo account csrf
```

Every command takes `--json` for the raw response and `--help` for its own flags. Sign in once with `hanzo auth login`; the commands below use that session, and the org they act in is the one it carries.

| Command               | What it does                                                                                                                                                                                             |
| --------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `hanzo account csrf`  | Mints the anti-forgery token a browser echoes as X-CSRF-Token on every change it asks for.                                                                                                               |
| `hanzo account embed` | Reports whether one of this brand's shared embedded apps (cms, erp, help) may be framed by the caller and is actually running, so a console module can choose between the embed and the provision panel. |
| `hanzo account orgs`  | Creates the caller's organization.                                                                                                                                                                       |

### Appearance

| Command                           | What it does                                                                                                                                                                      |
| --------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `hanzo account appearance create` | Stores the caller's appearance preference on their IAM account, preserving every other field of the row.                                                                          |
| `hanzo account appearance get`    | Returns the signed-in caller's own appearance preference — text size, density and accent — read from their IAM account so it is the same on every device and every Hanzo surface. |

### Avatar

| Command                                                   | What it does           |
| --------------------------------------------------------- | ---------------------- |
| `hanzo account avatar create`                             | Set your profile photo |
| `hanzo account avatar org user get <org> <user> <digest>` | Fetch a profile photo  |

### Keys

| Command                     | What it does                                                                                                                 |
| --------------------------- | ---------------------------------------------------------------------------------------------------------------------------- |
| `hanzo account keys create` | Creates a NEW API key and returns its secret ONCE.                                                                           |
| `hanzo account keys get`    | Returns the API keys the caller may see, newest first: their own, or every key the org holds when the caller administers it. |