> ## Documentation Index
> Fetch the complete documentation index at: https://docs.phala.com/llms.txt
> Use this file to discover all available pages before exploring further.

# allow-devices

> Manage on-chain device allowlist for an app contract

<Note>
  This command is marked as unstable and may change in future releases.
</Note>

### Command: `phala allow-devices`

#### Syntax

```
phala allow-devices <command> [options]
```

#### Description

Manage on-chain device allowlist for an app contract

#### Global Options

| Option                               | Description                                               |
| ------------------------------------ | --------------------------------------------------------- |
| `-h, --help`                         | Show help information for the current command             |
| `-v, --version`                      | Show CLI version                                          |
| `--api-token TOKEN, --api-key TOKEN` | API token for authenticating with Phala Cloud             |
| `-j, --json, --no-json`              | Output in JSON format                                     |
| `--interactive`                      | Enable interactive mode for commands that support it      |
| `--cvm-id <value>`                   | CVM identifier (UUID, app\_id, instance\_id, or name)     |
| `--profile PROFILE`                  | Temporarily use a different auth profile for this command |
| `--api-version <value>`              | API version to use (e.g. 2025-10-28, 2026-01-21)          |

#### Examples

* Display help:

```bash theme={"system"}
phala allow-devices --help
```

### Subcommands

| Command            | Description                                                                    |
| ------------------ | ------------------------------------------------------------------------------ |
| `list`             | List allowed devices from the on-chain contract                                |
| `add`              | Add devices to the on-chain allowlist                                          |
| `remove`           | Remove devices from the on-chain allowlist                                     |
| `allow-any`        | Set the allow-any-device flag on the contract. Requires --enable or --disable. |
| `disallow-any`     | Disable allow-any-device on the contract. Equivalent to `allow-any --disable`. |
| `toggle-allow-any` | Toggle allow-any-device on the contract (or force via --enable/--disable)      |