MSP Management Commands

Commands specific to Managed Service Provider (MSP) tenants

Overview

This subset of commands applies to MSP (Managed Service Provider) accounts. They allow you to manage managed companies (MCs), refresh MSP data, switch context between MSP and a managed company, and convert an enterprise node into a managed company.

Commands:

• MSP List Command

• MSP Refresh Data Command

• MSP Create Command

• MSP Update Command

• MSP Delete Command

• MSP Login Command (Switching to MC)

• Convert Enterprise Node to MSP Command

• Switch to MSP Command

Managed Company List

Retrieves and displays a table of all managed companies for the MSP. Each row contains company name, ID, node, plan, storage, addons, seats allowed, seats used, and paused status. Available only when logged in with an MSP-licensed account.

DotNet CLI

Command: mc-list or msp-info or mi

Flags: None

Example:

My Vault> mc-list
  #  Company Name             Company ID  Node                 Plan             Storage       Addons                              Seats Allowed  Seats Used  Paused
---  -----------------------  ----------  -------------------  ---------------  ------------  ----------------------------------  -------------  ----------  ------
  1  21Jan                    311310      abc.                 Business         STORAGE_1TB                                                   0           0        
  2  ADD NO ADDON             310855      ace                  Enterprise       100GB                                                 Unlimited           1        
  3  ADD ON PREM              310858      abe.                 Business         100GB         Keeper Connection Manager (KCM)         Unlimited           0        
  4  ADD11                    310854      aid                  Business Plus    STORAGE_1TB   Advanced Reporting & Alerts Module      Unlimited           1        
                                                                                              BreachWatch                                                          
  5  ADD123                   310852      acme                 Business Plus    STORAGE_1TB   Advanced Reporting & Alerts Module      Unlimited           0        
                                                                                              BreachWatch                                                          
                                                                                              remote_browser_isolation                                             
  6  Adayaa Dev Inc           311536      abcde.               Business         STORAGE_10TB  keeper_endpoint_privilege_manager              10           0                                            

DotNet SDK

Managed company list can be obtained from the SDK when the enterprise loader includes ManagedCompanyData and the account has MSP license:

// When context.Enterprise includes ManagedCompanyData (MSP account)
var managedCompanies = context.RoleManagement.Enterprise.GetPlugins()
    .OfType<ManagedCompanyData>()
    .FirstOrDefault();
if (managedCompanies != null)
{
    foreach (var mc in managedCompanies.ManagedCompanies)
    {
        Console.WriteLine($"{mc.EnterpriseName} (ID: {mc.EnterpriseId})");
    }
}

PowerCommander

Command: Get-KeeperManagedCompany

Aliases: kmc

Flags:

Parameter	Description
Restriction	Show MSP permits: unlimited licenses, allowed products, allowed add-ons, max file plan. Output is list-style for readability.
Pricing	Show BI subscription pricing (products, add-ons, file plans) with currency and unit.
Filter	Optional partial filter on MC name; ignored when using -Restriction, -Pricing, or -ManagedCompany.
Detailed	Full MC list: company_id, company_name, node, node_name, plan, storage, addons (with seats), allocated, active; sorted by name.
ManagedCompany	Filter to a single MC by exact name or ID. Use with -Detailed for one MC’s details.
Format	table (default), json, or csv.
Output	If set, write results to this file path.

Example:

PS> Get-KeeperManagedCompany 

EnterpriseId EnterpriseName                                     ProductId      NumberOfSeats NumberOfUsers FilePlanType  IsExpired     ParentNodeId NodeName            Addons
------------ --------------                                     ---------      ------------- ------------- ------------  ---------     ------------ --------            ------
      309488 test ppppppp etc                                   business          2147483647             0 STORAGE_100GB     False 1169425105420290 Maaaaaalll          keeper_endpoint_privilege_manager
      308504 new test updated                                   business          2147483647             0 STORAGE_100GB     False 1169425105420290 Meeeeeeoooo          

PS> Get-KeeperManagedCompany -ManagedCompany tests2

EnterpriseId EnterpriseName ProductId      NumberOfSeats NumberOfUsers FilePlanType IsExpired     ParentNodeId NodeName   Addons
------------ -------------- ---------      ------------- ------------- ------------ ---------     ------------ --------   ------
      315830 tests2         enterprisePlus            13             1 STORAGE_1TB      False 1169425105420290 Metronlabs enterprise_breach_watch, enterprise_audit_and_reporting

Python CLI

Coming Soon

Python SDK

Coming Soon

MSP Refresh Data

Refreshes local enterprise/MSP data from the server. Use after making changes or to ensure you have the latest managed company list and licenses.

DotNet CLI

Command: enterprise-get-data or msp-down or md

Flags: None

Example:

My Vault> enterprise-get-data
My Vault> md

DotNet SDK

Function: Reload enterprise data (including MSP data when applicable)

await context.Enterprise.Load();

PowerCommander

Command: Sync-KeeperEnterprise

Use after switching MC/MSP or to refresh MSP data.

Example:

PS> Sync-KeeperEnterprise

Python CLI

Coming Soon

Python SDK

Coming Soon

MSP Create

Creates a new managed company with the given name, plan, seats, and optional node, storage, and addons. The add-ons are mentioned here.

DotNet CLI

Command: mc-create <NAME> or msp-add or ma

Flags:

• --product or -p : Product plan: business, businessPlus, enterprise, enterprisePlus

• --seats or -s : Maximum number of seats (-1 = unlimited)

• --node : Node name or ID (default: root)

• --storage : Storage plan: 100GB, 1TB, 10TB

• --addons : Comma-separated addons , e.g. secrets_manager,connection_manager:5

Example:

My Vault> mc-create "New MC" --product=enterprise --seats=10
"new_mc_1" --seats=15 --product=enterprise --node=test1 --storage=100GB --addons="secrets_manager,enterprise_breach_watch"                   
Managed Company "new_mc_1", ID:314913 has been created.

DotNet SDK

Function: CreateManagedCompany(ManagedCompanyOptions options)

Example:

var options = new ManagedCompanyOptions
{
    Name = "New MC",
    ProductId = "enterprise",
    NumberOfSeats = 10,
    FilePlanType = "1TB",
    NodeId = nodeId 
};
var mc = await managedCompanyData.CreateManagedCompany(options);
Console.WriteLine($"Created MC: {mc.EnterpriseName}, ID: {mc.EnterpriseId}");

PowerCommander

Command: New-KeeperManagedCompany

Aliases: kamc

Flags:

Parameter	Description
Name	Display name of the new MC.
PlanId	License plan: business, businessPlus, enterprise, enterprisePlus.
MaximumSeats	Maximum number of seats (licenses).
Storage	File storage plan: 100GB, 1TB, 10TB.
Addons	Array of add-on names; use AddonName:Seats for add-ons with seats (e.g. connection_manager:5).
Node	Node name or ID to attach the MC to. If omitted, root node is used.

Example:

PS> New-KeeperManagedCompany -Name "New MC" -PlanId enterprise -MaximumSeats 10
PS> New-KeeperManagedCompany -Name "New MC" -PlanId enterprise -MaximumSeats 10 -Storage 1TB -Node "Branch"
PS> New-KeeperManagedCompany -Name "new_mc_2" -PlanId enterprise -MaximumSeats 15 -Storage 100GB -Node test1 -Addons "secrets_manager,enterprise_breach_watch"

Python CLI

Coming Soon

Python SDK

Coming Soon

MSP Update

Updates an existing managed company’s name, product, seats, storage, node, or addons.

DotNet CLI

Command: mc-update <COMPANY> or msp-update or mu

Flags:

• --name : New managed company name

• --product or -p : Product plan

• --seats or -s : Maximum seats

• --node : Node name or ID

• --storage : Storage plan

• --addons : Comma-separated addons

Value: COMPANY = managed company name or ID (required)

Example:

My Vault> mc-update 3861 --seats=20 --product=enterprisePlus
My Vault> mc-update "Company 1" --name="Company 1 Updated"
Managed Company "Company 1 Updated", ID:3861 has been updated.

DotNet SDK

Function: UpdateManagedCompany(int companyId, ManagedCompanyOptions options)

Example:

var options = new ManagedCompanyOptions
{
    NumberOfSeats = 20,
    ProductId = "enterprisePlus"
};
var updated = await managedCompanyData.UpdateManagedCompany(3861, options);

PowerCommander

Command: Edit-KeeperManagedCompany

Aliases: kemc

Flags:

• -Id : Managed company name or ID (required, position 0)

• -Name : New name

• -PlanId : Plan

• -MaximumSeats : Seats

• -Storage : 100GB, 1TB, 10TB

• -Addons : Addons

• -Node : Node name or ID

Example:

PS> Edit-KeeperManagedCompany -Id 3861 -MaximumSeats 20 -PlanId enterprisePlus
PS> Edit-KeeperManagedCompany -Id new_mc_2 -Name "New Managed Company"                                                              
                          
CompanyId CompanyName         PlanId     PlanName   FilePlanName Allocated Active
--------- -----------         ------     --------   ------------ --------- ------
314915    New Managed Company enterprise Enterprise 100GB               15      0

Python CLI

Coming Soon

Python SDK

Coming Soon

MSP Delete

Removes a managed company by name or ID.

DotNet CLI

Command: mc-delete <COMPANY> or msp-remove or mrm

Flags: None

Value: COMPANY = managed company name or ID (required)

Example:

My Vault> mc-delete 3861
My Vault> mc-delete "Company 1"
Managed Company "Company 1", ID:3861 has been removed.

DotNet SDK

Function: RemoveManagedCompany(int companyId)

Example:

await managedCompanyData.RemoveManagedCompany(3861);

PowerCommander

Command: Remove-KeeperManagedCompany

Aliases: krmc

Flags:

• Position 0 : Managed company name or ID (required)

Example:

PS> Remove-KeeperManagedCompany 3861
PS> Remove-KeeperManagedCompany "Company 1"

Python CLI

Coming Soon

Python SDK

Coming Soon

MSP Login (Switch to MC)

Switches the CLI context to a managed company so that subsequent commands run in that MC’s context. DotNet CLI uses a dedicated MC context; PowerCommander sets the current managed company ID and syncs.

DotNet CLI

Command: mc-login <MC_COMPANY_ID>

Flags: None

Value: MC_COMPANY_ID = managed company ID (required). Use mc-list to see IDs.

Example:

My Vault> mc-login 3987
# Prompt changes to "Managed Company"; subsequent commands run in MC context

DotNet SDK

Function: LoginToManagedCompany(IEnterpriseLoader enterprise, int mcEnterpriseId) (on ManagedCompanyAuth)

Example:

var mcAuth = new ManagedCompanyAuth();
await mcAuth.LoginToManagedCompany(enterprise, 3987);
// Use mcAuth as the new auth/enterprise context for MC operations

PowerCommander

Command: Switch-KeeperMC

Aliases: switch-to-mc

Flags:

• -Name (position 0) : Managed company ID or name (required)

Example:

PS> Switch-KeeperMC 3987
PS> switch-to-mc "Company Name"
Switched to MC "Company Name"

Python CLI

Coming Soon

Python SDK

Coming Soon

MSP Copy Role

Copy one or more roles (with their enforcements) from the MSP enterprise into one or more Managed Companies.

DotNet CLI

Coming Soon

DotNet SDK

Function: ConvertNodeToManagedCompanyAsync(NodeToManagedCompanyRequest request)

Example:

var request = new NodeToManagedCompanyRequest { CompanyId = companyId };
// Optionally populate Nodes, Roles, Users, RoleKeys, TeamKeys, UsersDataKeys
// with re-encrypted data for the MC.
await managedCompanyData.ConvertNodeToManagedCompanyAsync(request);
await enterprise.Load();

PowerCommander

Command:Copy-KeeperMCRole

Flags:

Parameter	Description
Role	Source role name or ID. Can be repeated (e.g. multiple roles). Resolved in the MSP enterprise.
ManagedCompany	Target MC name or ID. Can be repeated (e.g. multiple MCs).

Example:

PS> Copy-KeeperMCRole -Role "Auditor", "Help Desk" -ManagedCompany "Acme"

Python CLI

Coming Soon

Python SDK

Coming Soon

MSP Switch to MSP

Switches context back to MSP when currently in a managed company context. Basically logs you out of managed company.

DotNet CLI

Command: switch-to-msp or msp

Flags: None

Example:

Managed Company> switch-to-msp
Managed Company> msp
# Or use "exit" to return to MSP context
# Prompt returns to "My Vault"

DotNet SDK

No direct SDK call; context switching is handled by the CLI/shell. When using ManagedCompanyAuth, the application would switch back to the parent auth/context that was stored when entering MC context.

PowerCommander

Command: Switch-KeeperMSP

Aliases: switch-to-msp

Flags: None

Example:

PS> Switch-KeeperMSP
PS> switch-to-msp
Switched to MSP

Python CLI

Coming Soon

Python SDK

Coming Soon

MSP Billing Report Command

Generate the MSP Consumption Billing Statement for a given month. Requires MSP account.

DotNet CLI

Command: mc-delete <COMPANY> or msp-remove or mrm

Flags: None

Value: COMPANY = managed company name or ID (required)

Example:

My Vault> mc-delete 3861
My Vault> mc-delete "Company 1"
Managed Company "Company 1", ID:3861 has been removed.

DotNet SDK

Function: RemoveManagedCompany(int companyId)

Example:

await managedCompanyData.RemoveManagedCompany(3861);

PowerCommander

Command: Get-MspBillingReport

Parameters

Parameter	Description
Month	Month as 1–12 (numeric) or YYYY-MM (e.g. 2022-02). If omitted, previous calendar month is used.
Year	Year (e.g. 2022). Used when Month is numeric only.
ShowDate	Break down the report by date.
ShowCompany	Break down the report by managed company.
Format	table (default), json, or csv.
Output	If set, save the report to this file path.

Examples:

# Previous month (default)
Get-MspBillingReport

# Specific month
Get-MspBillingReport -Year 2025 -Month 11  
Consumption Billing Statement: November 2025


Product                        Licenses Rate AvgPerDay InitialLicenses FinalLicenses MaxLicenses
-------                        -------- ---- --------- --------------- ------------- -----------
enterprise                           30          1.000               1             1           1
enterprise_audit_and_reporting       30          1.000               1             1           1
enterprise_breach_watch              30          1.000               1             1           1
compliance_report                    30          1.000               1             1           1

=======================================================================================
Get-MspBillingReport -Year 2026 -Month 1  
Consumption Billing Statement: January 2026


Product                           Licenses Rate AvgPerDay InitialLicenses FinalLicenses MaxLicenses
-------                           -------- ---- --------- --------------- ------------- -----------
business                                31          1.000               1             1           1
enterprise                              64          2.060               2             3           3
enterprisePlus                          30          0.970               0             2           3
Product 10000                           60          1.940               1             3           3
enterprise_audit_and_reporting          58          1.870               1             2           2
enterprise_breach_watch                 31          1.000               1             1           1
msp_service_and_support                 29          0.940               0             2           2
compliance_report                       60          1.940               1             3           3
secrets_manager                          0          0.000               0             0           0
connection_manager                      64          2.060               0             3           3
remote_browser_isolation                64          2.060               0             3           3
privileged_access_manager               48          1.550               0             3           3
keeper_endpoint_privilege_manager        0          0.000               0             0           0

Python CLI

Coming Soon

Python SDK

Coming Soon

MSP Addon Options

• compliance_report

• enterprise_audit_and_reporting

• secrets_manager

• enterprise_breach_watch

• onboarding_and_certificate

• msp_service_and_support

• connection_manager

• chat

• password_rotation

• remote_browser_isolation

• privileged_access_manager

• keeper_endpoint_privilege_manager