# Reference

URL: https://docs.hanzo.ai/docs/cli/reference

> The `hanzo reference` commands.

Also for this capability: [API](https://docs.hanzo.ai/docs/openapi/reference) · **CLI** · [MCP](https://docs.hanzo.ai/docs/mcp-tools/reference) · [SDKs](https://docs.hanzo.ai/docs/sdks)

The lookup data a risk decision needs but cannot derive: which email domains hand out throwaway inboxes, which addresses belong to a datacentre or a Tor exit, which card scheme an issuer prefix belongs to, which browsers the fleet sees everywhere, and how current the designation lists the screening engine holds actually are.

[API reference →](https://docs.hanzo.ai/docs/openapi/reference)

```bash
hanzo reference list
```

Every command takes `--json` for the raw response and `--help` for its own flags. Sign in once with `hanzo auth login`; the commands below use that session, and the org they act in is the one it carries.

| Command                     | What it does                                                                |
| --------------------------- | --------------------------------------------------------------------------- |
| `hanzo reference get <set>` | Describes one set and lists your org's overrides in it.                     |
| `hanzo reference list`      | Lists every set this plane publishes, with its version and how fresh it is. |
| `hanzo reference resolve`   | Looks keys up against the reference plane.                                  |
| `hanzo reference rm <set>`  | Removes one of your organisation's overrides.                               |
| `hanzo reference set <set>` | Writes your organisation's own allow and deny entries over a set.           |