# nevia access add

> Give someone access to the workspace

> Nevia is in beta and open to selected teams. Public launch in Dec 2026. The CLI installs with `curl -fsSL https://get.nevia.cloud | sh`, and the MCP server is at https://api.nevia.cloud/mcp. A person signs in once in the browser.
> Setup, sign-in and requesting access: [SKILL.md](https://nevia.cloud/SKILL.md). When Nevia fits and when it doesn't: [why.md](https://nevia.cloud/why.md).

> For the complete documentation index, see [llms.txt](https://nevia.cloud/llms.txt). This page's HTML version: https://nevia.cloud/docs/reference/cli/access/add

`nevia access add [FLAGS] [WHO]`

Adds a known email at once and invites an unknown one. Pass --private-key to create a key-file principal for scripts, CI or agents. Its key file is saved to \~/.config/nevia/keys/ unless you pass --out or --no-key.

### Arguments

* `[WHO]` - Email or principal ID (omit with --private-key)

### Options

* `--private-key` - Create a principal that signs in with a key file
* `--role <ROLE>` - Role to grant (default viewer for a login, editor for a private key)

  **Choices:** `admin`, `editor`, `viewer`
* `--name <NAME>` - Name of the private-key principal (generated if omitted)
* `--description <TEXT>` - Description of the private-key principal
* `--no-key` - Create the private-key principal without issuing a key
* `--own-key <FILE>` - PEM RSA public key file to use instead of a generated key (2048 bits or more)
* `--expires-in <DURATION>` - How long the key works, 15m to 90d (e.g. 7d)
* `--out <PATH>` - Folder or file path for the key file (- for stdout)
* `--idempotency-key <KEY>` - Idempotency key for the request (generated if omitted)
* `-h, --help` - Print help