diff --git a/ai/claude-code.mdx b/ai/claude-code.mdx
new file mode 100644
index 0000000..9c03f50
--- /dev/null
+++ b/ai/claude-code.mdx
@@ -0,0 +1,94 @@
+---
+title: Claude Code
+description: The forest plugin for Claude Code — vibe-code your Forest back-office from natural language.
+---
+
+# Claude Code — the `forest` plugin
+
+The **`forest` plugin** for [Claude Code](https://docs.claude.com/en/docs/claude-code) turns natural-language requests into Forest changes. You describe what you want; Claude runs the Forest CLI to make it happen, and you review the result in the app.
+
+One plugin, one skill per domain — each invoked as `/forest:<skill>`.
+
+## Prerequisites
+
+<Steps>
+  <Step title="Claude Code">
+    Install [Claude Code](https://docs.claude.com/en/docs/claude-code).
+  </Step>
+  <Step title="Forest CLI, logged in">
+    ```bash
+    npm install -g forest-cli
+    forest login
+    ```
+  </Step>
+</Steps>
+
+## Install the plugin
+
+```bash
+# add the Forest Admin marketplace, then install the plugin
+/plugin marketplace add forestadmin/ai-marketplace
+/plugin install forest@forest-admin-ai
+```
+
+Then reload and check the skills are available:
+
+```bash
+/reload-plugins
+/plugin        # Installed → forest → Skills
+```
+
+## The skills
+
+<CardGroup cols={2}>
+  <Card title="/forest:onboard" icon="rocket">
+    From zero to a running back-office — create a project (your database or a zero-DB demo), boot the dev agent, and (opt-in) deploy to production and invite your team.
+  </Card>
+  <Card title="/forest:layout" icon="table-cells">
+    Build the UI as code — workspaces with master→detail components, dashboards & charts, collection display, and folders.
+  </Card>
+  <Card title="/forest:workflows" icon="diagram-project">
+    Author workflows from a declarative `steps` spec — the skill compiles them to BPMN and deploys them, editable afterwards in the UI.
+  </Card>
+  <Card title="/forest:management" icon="users-gear">
+    Administer the project — roles (RBAC as code), users, teams, environments, branches, and production deploys.
+  </Card>
+</CardGroup>
+
+## Example prompts
+
+Just describe the outcome — the skill picks the right commands:
+
+- **Onboard** — *"Create me a Forest demo and start it."*
+- **Layout** — *"Add an 'AML Review' workspace: the list of AML alerts, and when I select one, the related customer's details below it."*
+- **Workflows** — *"Add a refund approval workflow on refund_requests: review → approve/reject → if approved, mark refunded → end."*
+- **Management** — *"Invite alice@acme.co as an editor on the Support team."*
+
+## The loop
+
+<Steps>
+  <Step title="Describe">
+    Tell Claude the outcome you want, in plain language.
+  </Step>
+  <Step title="Preview">
+    The skill shows the plan (and supports `--dry-run` on the underlying commands) before sending anything.
+  </Step>
+  <Step title="Apply">
+    Claude runs the CLI — creating the workspace, compiling the workflow, applying the layout…
+  </Step>
+  <Step title="Review">
+    Open the result in the Forest app, or pull it back as code (`forest layout pull`). Iterate by asking for changes.
+  </Step>
+</Steps>
+
+## How it works
+
+The plugin is a thin layer over the [Forest CLI](/reference/cli/overview): each skill resolves your intent into deterministic `forest` commands (`projects:create:*`, `layout:*`, `workflow:apply`, `roles:*`/`users:*`/`teams:*`, `environments:*`). Because the output is CLI calls and JSON (`forest-layout.json`, workflow BPMN, role CSVs), everything is versionable and reproducible.
+
+<Tip>
+Working on a `development` environment? Layout and workflow edits need a branch first (`forest branch <name>`) — the skills handle this. A zero-DB `create:demo` project accepts direct edits without a branch.
+</Tip>
+
+<Info>
+For writing agent code (Smart Actions, computed fields, hooks) use the companion **forest-code** plugin; for querying/manipulating data from an agent, see [MCP](/ai/mcp).
+</Info>
diff --git a/ai/mcp.mdx b/ai/mcp.mdx
new file mode 100644
index 0000000..57246ea
--- /dev/null
+++ b/ai/mcp.mdx
@@ -0,0 +1,53 @@
+---
+title: MCP
+description: Expose your Forest Admin project to AI agents over the Model Context Protocol — query and manipulate data, run actions, inspect the schema.
+---
+
+# MCP — the Forest MCP server
+
+The **Forest MCP server** exposes your Forest project to any [Model Context Protocol](https://modelcontextprotocol.io) client (Claude, IDE agents, your own tools). Where the [`forest` plugin](/ai/claude-code) *builds* your back-office, MCP lets an agent *operate* on it — the same data and actions your team uses, through a governed interface.
+
+## What an agent can do
+
+<CardGroup cols={2}>
+  <Card title="Read" icon="magnifying-glass">
+    List and search records, follow relationships, and read a single record.
+  </Card>
+  <Card title="Write" icon="pen">
+    Create, update, and delete records, and associate/dissociate relationships.
+  </Card>
+  <Card title="Act" icon="bolt">
+    Run your collection's **Smart Actions** — the same business operations exposed in the UI.
+  </Card>
+  <Card title="Understand" icon="sitemap">
+    Describe collections, fields, and relationships so the agent can reason about your schema.
+  </Card>
+</CardGroup>
+
+## Governed by your permissions
+
+The MCP server acts **within Forest's authorization model** — an agent only sees and does what the authenticated scope is allowed to. Roles, scopes and permissions apply exactly as they do in the app, so exposing Forest over MCP doesn't widen access.
+
+<Warning>
+Giving an agent write and action access to production data is powerful. Start against a non-production environment, and scope the agent to a role with the minimum permissions it needs.
+</Warning>
+
+## Connecting
+
+Add the Forest MCP server to your MCP client (for example, as a connector in Claude). It's distributed as the **`forest-mcp`** plugin in the Forest Admin marketplace:
+
+```bash
+/plugin marketplace add forestadmin/ai-marketplace
+/plugin install forest-mcp@forest-admin-ai
+```
+
+<Info>
+Setup specifics (authentication, selecting the project/environment) are covered by the `forest-mcp` plugin. This page describes what the server enables; follow the plugin for exact connection steps.
+</Info>
+
+## When to use MCP vs the plugin
+
+| Goal | Use |
+|---|---|
+| Let an agent **read/write data or run actions** on an existing back-office | **MCP** (this page) |
+| **Build or configure** the back-office itself (layout, workflows, roles, onboarding) | [`forest` plugin](/ai/claude-code) |
diff --git a/ai/overview.mdx b/ai/overview.mdx
new file mode 100644
index 0000000..d42bff3
--- /dev/null
+++ b/ai/overview.mdx
@@ -0,0 +1,40 @@
+---
+title: AI & MCP
+description: Drive Forest Admin with AI — build and operate your back-office from Claude, and expose it to your own agents over MCP.
+---
+
+# AI & MCP
+
+Forest Admin is drivable by AI, in two complementary ways:
+
+<CardGroup cols={2}>
+  <Card title="Claude Code — the forest plugin" icon="wand-magic-sparkles" href="/ai/claude-code">
+    Describe what you want in plain language; Claude runs the Forest CLI to build it — onboarding, UI/layout, workflows, and administration. **Vibe-code your back-office.**
+  </Card>
+  <Card title="MCP — the Forest MCP server" icon="plug" href="/ai/mcp">
+    Expose your Forest project's data and actions to any MCP-compatible agent — query records, create/update/delete, run Smart Actions, inspect the schema.
+  </Card>
+</CardGroup>
+
+## Which one do I use?
+
+| You want to… | Use |
+|---|---|
+| **Build or configure** Forest (create a project, lay out a workspace, author a workflow, manage roles/teams) | **Claude Code** — the [`forest` plugin](/ai/claude-code) |
+| **Operate on your data** from an agent (read/write records, run actions) | **MCP** — the [Forest MCP server](/ai/mcp) |
+
+Both talk to Forest through interfaces you already have — the plugin orchestrates the [CLI](/reference/cli/overview); MCP speaks the Model Context Protocol. No UI required.
+
+## The idea
+
+Everything you do in the Forest UI can be done **headlessly** — and therefore **driven by an AI**:
+
+- **Layout as code** — collections display, workspaces (master→detail), dashboards, folders.
+- **Workflows as code** — author a process from a declarative `steps` spec; it compiles to BPMN.
+- **Administration as code** — roles (RBAC as CSV), users, teams, environments, deploy.
+
+Claude composes these from natural language; you review the result in the app. Because it all maps to CLI commands and JSON, it's **versionable, reviewable, and reproducible**.
+
+<Info>
+These capabilities are rolling out. The `forest` Claude Code plugin ships onboarding today, with layout, workflows and management skills in the same plugin.
+</Info>
diff --git a/docs.json b/docs.json
index 29b1f58..7fe7d3e 100644
--- a/docs.json
+++ b/docs.json
@@ -304,6 +304,19 @@
           }
         ]
       },
+      {
+        "tab": "AI & MCP",
+        "groups": [
+          {
+            "group": "AI & MCP",
+            "pages": [
+              "ai/overview",
+              "ai/claude-code",
+              "ai/mcp"
+            ]
+          }
+        ]
+      },
       {
         "tab": "Reference",
         "groups": [
@@ -343,10 +356,70 @@
               "reference/cli/overview",
               "reference/cli/init",
               "reference/cli/login",
-              "reference/cli/branch",
-              "reference/cli/push",
-              "reference/cli/deploy",
-              "reference/cli/switch"
+              {
+                "group": "Branches & deployment",
+                "pages": [
+                  "reference/cli/branch",
+                  "reference/cli/switch",
+                  "reference/cli/push",
+                  "reference/cli/deploy"
+                ]
+              },
+              {
+                "group": "Projects",
+                "pages": [
+                  "reference/cli/projects-create-demo",
+                  "reference/cli/projects-create-sql",
+                  "reference/cli/projects-create-nosql"
+                ]
+              },
+              {
+                "group": "Layout",
+                "pages": [
+                  "reference/cli/layout-pull",
+                  "reference/cli/layout-apply",
+                  "reference/cli/layout-patch"
+                ]
+              },
+              {
+                "group": "Workflows",
+                "pages": ["reference/cli/workflow-apply"]
+              },
+              {
+                "group": "Environments",
+                "pages": [
+                  "reference/cli/environments-create",
+                  "reference/cli/environments-get",
+                  "reference/cli/environments-update",
+                  "reference/cli/environments-delete",
+                  "reference/cli/environments-reset"
+                ]
+              },
+              {
+                "group": "Roles",
+                "pages": [
+                  "reference/cli/roles-create",
+                  "reference/cli/roles-apply",
+                  "reference/cli/roles-copy",
+                  "reference/cli/roles-export"
+                ]
+              },
+              {
+                "group": "Teams",
+                "pages": [
+                  "reference/cli/teams-create",
+                  "reference/cli/teams-delete",
+                  "reference/cli/teams-copy-layout"
+                ]
+              },
+              {
+                "group": "Users",
+                "pages": [
+                  "reference/cli/users-list",
+                  "reference/cli/users-invite",
+                  "reference/cli/users-edit"
+                ]
+              }
             ]
           },
           {
diff --git a/reference/cli/environments-create.mdx b/reference/cli/environments-create.mdx
new file mode 100644
index 0000000..6a3290a
--- /dev/null
+++ b/reference/cli/environments-create.mdx
@@ -0,0 +1,26 @@
+---
+title: forest environments:create
+description: "Create a new environment"
+---
+
+# forest environments:create
+
+Create a new environment.
+
+## Usage
+
+```bash
+forest environments:create [options]
+```
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-f, --format=<option>` | [default: table] Ouput format. <options: table\|json> |
+| `-n, --name=<value>` | (required) Environment name. |
+| `-p, --projectId=<value>` | Forest project ID. |
+| `-t, --type=<option>` | Environment type (defaults to "remote" when omitted). Use "production" to create the first production environment. Development environments are created with "forest init". <options: production\|remote> |
+| `-u, --url=<value>` | Application URL. Required, except with --type production where it may be omitted. |
+| `--disableRoles` | Disable roles on new environment. |
+
diff --git a/reference/cli/environments-delete.mdx b/reference/cli/environments-delete.mdx
new file mode 100644
index 0000000..57f6198
--- /dev/null
+++ b/reference/cli/environments-delete.mdx
@@ -0,0 +1,27 @@
+---
+title: forest environments:delete
+description: "Delete an environment"
+---
+
+# forest environments:delete
+
+Delete an environment.
+
+## Usage
+
+```bash
+forest environments:delete [ENVIRONMENTID] [options]
+```
+
+## Arguments
+
+| Argument | Description |
+|---|---|
+| `ENVIRONMENTID` | ID of an environment. |
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-f, --force` | Force delete. |
+
diff --git a/reference/cli/environments-get.mdx b/reference/cli/environments-get.mdx
new file mode 100644
index 0000000..8efa272
--- /dev/null
+++ b/reference/cli/environments-get.mdx
@@ -0,0 +1,27 @@
+---
+title: forest environments:get
+description: "Get the configuration of an environment"
+---
+
+# forest environments:get
+
+Get the configuration of an environment.
+
+## Usage
+
+```bash
+forest environments:get [ENVIRONMENTID] [options]
+```
+
+## Arguments
+
+| Argument | Description |
+|---|---|
+| `ENVIRONMENTID` | ID of an environment. |
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-f, --format=<option>` | [default: table] Output format. <options: table\|json> |
+
diff --git a/reference/cli/environments-reset.mdx b/reference/cli/environments-reset.mdx
new file mode 100644
index 0000000..b7f8db5
--- /dev/null
+++ b/reference/cli/environments-reset.mdx
@@ -0,0 +1,23 @@
+---
+title: forest environments:reset
+description: "Reset a remote environment by removing all layout changes"
+---
+
+# forest environments:reset
+
+Reset a remote environment by removing all layout changes.
+
+## Usage
+
+```bash
+forest environments:reset [options]
+```
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-e, --environment=<value>` | The remote environment name to reset. |
+| `-p, --projectId=<value>` | The id of the project to work on. |
+| `--force` | Skip reset changes confirmation. |
+
diff --git a/reference/cli/environments-update.mdx b/reference/cli/environments-update.mdx
new file mode 100644
index 0000000..c469c53
--- /dev/null
+++ b/reference/cli/environments-update.mdx
@@ -0,0 +1,23 @@
+---
+title: forest environments:update
+description: "Update an environment"
+---
+
+# forest environments:update
+
+Update an environment.
+
+## Usage
+
+```bash
+forest environments:update [options]
+```
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-e, --environmentId=<value>` | (required) The forest environment ID to update. |
+| `-n, --name=<value>` | To update the environment name. |
+| `-u, --url=<value>` | To update the application URL. |
+
diff --git a/reference/cli/layout-apply.mdx b/reference/cli/layout-apply.mdx
new file mode 100644
index 0000000..50cceec
--- /dev/null
+++ b/reference/cli/layout-apply.mdx
@@ -0,0 +1,31 @@
+---
+title: forest layout:apply
+description: "Apply a forest-layout.json to an environment (pushes JSON-Patch changes)"
+---
+
+# forest layout:apply
+
+Apply a forest-layout.json to an environment (pushes JSON-Patch changes).
+
+## Usage
+
+```bash
+forest layout:apply [FILE] [options]
+```
+
+## Arguments
+
+| Argument | Description |
+|---|---|
+| `FILE` | Layout file to apply (e.g. forest-layout.json). |
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-e, --env=<value>` | Environment to apply to (name or id). Prompted if omitted. |
+| `-f, --force` | Skip the confirmation prompt. |
+| `-p, --projectId=<value>` | Id of the project (resolved/prompted when omitted). |
+| `-t, --team=<value>` | Team to apply to (name or id). Prompted if omitted. |
+| `--with-workflows` | Also upload workflow BPMN sidecars (workflows/<id>.bpmn) to the target env — the round-trip counterpart of `pull --with-workflows`. |
+
diff --git a/reference/cli/layout-patch.mdx b/reference/cli/layout-patch.mdx
new file mode 100644
index 0000000..a3ddbcd
--- /dev/null
+++ b/reference/cli/layout-patch.mdx
@@ -0,0 +1,31 @@
+---
+title: forest layout:patch
+description: "Patch the layout directly (single PATCH per domain, like the front — no pull/apply)"
+---
+
+# forest layout:patch
+
+Patch the layout directly (single PATCH per domain, like the front — no pull/apply).
+
+## Usage
+
+```bash
+forest layout:patch [FILE] [options]
+```
+
+## Arguments
+
+| Argument | Description |
+|---|---|
+| `FILE` | JSON patch file to apply. Use "-" or omit to read from stdin. |
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-e, --env=<value>` | Environment name or id. |
+| `-f, --force` | Skip the confirmation prompt (required when reading from stdin). |
+| `-p, --projectId=<value>` | Project id. |
+| `-t, --team=<value>` | Team name or id. |
+| `--dry-run` | Print operations without sending them. |
+
diff --git a/reference/cli/layout-pull.mdx b/reference/cli/layout-pull.mdx
new file mode 100644
index 0000000..8b3c05e
--- /dev/null
+++ b/reference/cli/layout-pull.mdx
@@ -0,0 +1,25 @@
+---
+title: forest layout:pull
+description: "Pull the layout (rendering) of an environment into a forest-layout.json file"
+---
+
+# forest layout:pull
+
+Pull the layout (rendering) of an environment into a forest-layout.json file.
+
+## Usage
+
+```bash
+forest layout:pull [options]
+```
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-e, --env=<value>` | Environment to pull from (name or id). Defaults to the environment of FOREST_ENV_SECRET when set, otherwise the development environment. |
+| `-o, --out=<value>` | [default: forest-layout.json] Output file path (default: forest-layout.json). |
+| `-p, --projectId=<value>` | Id of the project (resolved automatically when you only have one). |
+| `-t, --team=<value>` | Team whose layout to pull (name or id). Defaults to the "Operations" team. |
+| `--with-workflows` | Also download each workflow's BPMN into sidecar files (workflows/<id>.bpmn) for round-trip. |
+
diff --git a/reference/cli/overview.mdx b/reference/cli/overview.mdx
index 4361758..a246fb7 100644
--- a/reference/cli/overview.mdx
+++ b/reference/cli/overview.mdx
@@ -62,22 +62,65 @@ forest init
 | [`forest push`](/reference/cli/push) | Push layout changes from your branch to its origin environment |
 | [`forest deploy`](/reference/cli/deploy) | Deploy layout changes to the production (reference) environment |
 
-### Environment management
+### Environments
 
 | Command | Description |
 |---|---|
 | `forest environments` | List all environments |
-| `forest environments:create` | Create a new environment |
-| `forest environments:delete` | Delete an environment |
-| `forest environments:update` | Update an environment |
-| `forest environments:reset` | Reset all layout changes on a remote environment |
+| [`forest environments:create`](/reference/cli/environments-create) | Create a new environment |
+| [`forest environments:get`](/reference/cli/environments-get) | Get an environment's configuration |
+| [`forest environments:update`](/reference/cli/environments-update) | Update an environment |
+| [`forest environments:delete`](/reference/cli/environments-delete) | Delete an environment |
+| [`forest environments:reset`](/reference/cli/environments-reset) | Reset all layout changes on a remote environment |
 
-### Project management
+### Projects
 
 | Command | Description |
 |---|---|
 | `forest projects` | List all projects |
 | `forest projects:get` | Get a project's configuration |
+| [`forest projects:create:demo`](/reference/cli/projects-create-demo) | Create a project with a zero-DB demo datasource |
+| [`forest projects:create:sql`](/reference/cli/projects-create-sql) | Create a project from a SQL database |
+| [`forest projects:create:nosql`](/reference/cli/projects-create-nosql) | Create a project from a NoSQL (Mongo) database |
+
+### Layout
+
+| Command | Description |
+|---|---|
+| [`forest layout:pull`](/reference/cli/layout-pull) | Pull an environment's layout into a `forest-layout.json` file |
+| [`forest layout:apply`](/reference/cli/layout-apply) | Apply a `forest-layout.json` to an environment |
+| [`forest layout:patch`](/reference/cli/layout-patch) | Patch the layout directly (single PATCH per domain, like the front) |
+
+### Workflows
+
+| Command | Description |
+|---|---|
+| [`forest workflow:apply`](/reference/cli/workflow-apply) | Create or update a workflow from a JSON `steps` spec (compiles to BPMN) |
+
+### Roles
+
+| Command | Description |
+|---|---|
+| [`forest roles:create`](/reference/cli/roles-create) | Create a role |
+| [`forest roles:apply`](/reference/cli/roles-apply) | Apply a wide-format CSV of role permissions to an environment |
+| [`forest roles:copy`](/reference/cli/roles-copy) | Copy roles between environments |
+| [`forest roles:export`](/reference/cli/roles-export) | Export an environment's roles to a CSV |
+
+### Teams
+
+| Command | Description |
+|---|---|
+| [`forest teams:create`](/reference/cli/teams-create) | Create a team |
+| [`forest teams:delete`](/reference/cli/teams-delete) | Delete a team |
+| [`forest teams:copy-layout`](/reference/cli/teams-copy-layout) | Copy a team's layout to another team |
+
+### Users
+
+| Command | Description |
+|---|---|
+| [`forest users:list`](/reference/cli/users-list) | List the users of a project |
+| [`forest users:invite`](/reference/cli/users-invite) | Invite users to a project |
+| [`forest users:edit`](/reference/cli/users-edit) | Edit a user's role, teams, or permission level |
 
 ### Schema
 
diff --git a/reference/cli/projects-create-demo.mdx b/reference/cli/projects-create-demo.mdx
new file mode 100644
index 0000000..793fe6f
--- /dev/null
+++ b/reference/cli/projects-create-demo.mdx
@@ -0,0 +1,29 @@
+---
+title: forest projects:create:demo
+description: "Create a new Forest Admin project with demo data — no database required"
+---
+
+# forest projects:create:demo
+
+Create a new Forest Admin project with demo data — no database required.
+
+## Usage
+
+```bash
+forest projects:create:demo [APPLICATIONNAME] [options]
+```
+
+## Arguments
+
+| Argument | Description |
+|---|---|
+| `APPLICATIONNAME` | Name of the project to create. |
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-H, --applicationHost=<value>` | Hostname of your admin backend application. |
+| `-P, --applicationPort=<value>` | Port of your admin backend application. |
+| `-l, --language=<option>` | Choose the language you want to use for your project. <options: javascript\|typescript> |
+
diff --git a/reference/cli/projects-create-nosql.mdx b/reference/cli/projects-create-nosql.mdx
new file mode 100644
index 0000000..5c2f723
--- /dev/null
+++ b/reference/cli/projects-create-nosql.mdx
@@ -0,0 +1,38 @@
+---
+title: forest projects:create:nosql
+description: "Create a new Forest Admin project"
+---
+
+# forest projects:create:nosql
+
+Create a new Forest Admin project.
+
+## Usage
+
+```bash
+forest projects:create:nosql [APPLICATIONNAME] [options]
+```
+
+## Arguments
+
+| Argument | Description |
+|---|---|
+| `APPLICATIONNAME` | Name of the project to create. |
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-H, --applicationHost=<value>` | Hostname of your admin backend application. |
+| `-P, --applicationPort=<value>` | Port of your admin backend application. |
+| `-c, --databaseConnectionURL=<value>` | Enter the database credentials with a connection URL. |
+| `-h, --databaseHost=<value>` | Enter your database host. |
+| `-l, --language=<option>` | Choose the language you want to use for your project. <options: javascript\|typescript> |
+| `-n, --databaseName=<value>` | Enter your database name. |
+| `-p, --databasePort=<value>` | Enter your database port. |
+| `-u, --databaseUser=<value>` | Enter your database user. |
+| `--databasePassword=<value>` | Enter your database password. |
+| `--databaseSSL` | Use SSL for database connection. |
+| `--databaseSslMode=<option>` | SSL mode. <options: preferred\|verify\|required\|disabled> |
+| `--mongoDBSRV` | Use SRV DNS record for mongoDB connection. |
+
diff --git a/reference/cli/projects-create-sql.mdx b/reference/cli/projects-create-sql.mdx
new file mode 100644
index 0000000..4728c50
--- /dev/null
+++ b/reference/cli/projects-create-sql.mdx
@@ -0,0 +1,39 @@
+---
+title: forest projects:create:sql
+description: "Create a new Forest Admin project"
+---
+
+# forest projects:create:sql
+
+Create a new Forest Admin project.
+
+## Usage
+
+```bash
+forest projects:create:sql [APPLICATIONNAME] [options]
+```
+
+## Arguments
+
+| Argument | Description |
+|---|---|
+| `APPLICATIONNAME` | Name of the project to create. |
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-H, --applicationHost=<value>` | Hostname of your admin backend application. |
+| `-P, --applicationPort=<value>` | Port of your admin backend application. |
+| `-c, --databaseConnectionURL=<value>` | Enter the database credentials with a connection URL. |
+| `-d, --databaseDialect=<option>` | Enter your database dialect. <options: mssql\|mysql / mariadb\|postgres> |
+| `-h, --databaseHost=<value>` | Enter your database host. |
+| `-l, --language=<option>` | Choose the language you want to use for your project. <options: javascript\|typescript> |
+| `-n, --databaseName=<value>` | Enter your database name. |
+| `-p, --databasePort=<value>` | Enter your database port. |
+| `-s, --databaseSchema=<value>` | Enter your database schema. |
+| `-u, --databaseUser=<value>` | Enter your database user. |
+| `--databasePassword=<value>` | Enter your database password. |
+| `--databaseSSL` | Use SSL for database connection. |
+| `--databaseSslMode=<option>` | SSL mode. <options: preferred\|verify\|required\|disabled> |
+
diff --git a/reference/cli/roles-apply.mdx b/reference/cli/roles-apply.mdx
new file mode 100644
index 0000000..ffc7160
--- /dev/null
+++ b/reference/cli/roles-apply.mdx
@@ -0,0 +1,29 @@
+---
+title: forest roles:apply
+description: "Apply a wide-format CSV to update role permissions in an environment"
+---
+
+# forest roles:apply
+
+Apply a wide-format CSV to update role permissions in an environment.
+
+## Usage
+
+```bash
+forest roles:apply [FILE] [options]
+```
+
+## Arguments
+
+| Argument | Description |
+|---|---|
+| `FILE` | Path to the wide-format CSV file. |
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-F, --force` | Skip confirmation prompt. |
+| `-e, --env=<value>` | (required) Environment name to apply to. |
+| `-p, --projectId=<value>` | Forest project ID. |
+
diff --git a/reference/cli/roles-copy.mdx b/reference/cli/roles-copy.mdx
new file mode 100644
index 0000000..5e2d8ae
--- /dev/null
+++ b/reference/cli/roles-copy.mdx
@@ -0,0 +1,23 @@
+---
+title: forest roles:copy
+description: "Copy role permissions from one environment to another"
+---
+
+# forest roles:copy
+
+Copy role permissions from one environment to another.
+
+## Usage
+
+```bash
+forest roles:copy [options]
+```
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-f, --from=<value>` | (required) Source environment name. |
+| `-p, --projectId=<value>` | Forest project ID. |
+| `-t, --to=<value>` | (required) Destination environment name. |
+
diff --git a/reference/cli/roles-create.mdx b/reference/cli/roles-create.mdx
new file mode 100644
index 0000000..acbf703
--- /dev/null
+++ b/reference/cli/roles-create.mdx
@@ -0,0 +1,22 @@
+---
+title: forest roles:create
+description: "Create a new role in a project"
+---
+
+# forest roles:create
+
+Create a new role in a project.
+
+## Usage
+
+```bash
+forest roles:create [options]
+```
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-n, --name=<value>` | (required) Name of the role to create. |
+| `-p, --projectId=<value>` | Forest project ID. |
+
diff --git a/reference/cli/roles-export.mdx b/reference/cli/roles-export.mdx
new file mode 100644
index 0000000..ebafda4
--- /dev/null
+++ b/reference/cli/roles-export.mdx
@@ -0,0 +1,23 @@
+---
+title: forest roles:export
+description: "Export all roles and their permissions to a wide CSV file"
+---
+
+# forest roles:export
+
+Export all roles and their permissions to a wide CSV file.
+
+## Usage
+
+```bash
+forest roles:export [options]
+```
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-e, --env=<value>` | (required) Environment name to export permissions for. |
+| `-o, --output=<value>` | Output file path (default: stdout). |
+| `-p, --projectId=<value>` | Forest project ID. |
+
diff --git a/reference/cli/teams-copy-layout.mdx b/reference/cli/teams-copy-layout.mdx
new file mode 100644
index 0000000..94659e0
--- /dev/null
+++ b/reference/cli/teams-copy-layout.mdx
@@ -0,0 +1,24 @@
+---
+title: forest teams:copy-layout
+description: "Copy a team's whole layout onto another team of the same project"
+---
+
+# forest teams:copy-layout
+
+Copy a team's whole layout onto another team of the same project.
+
+## Usage
+
+```bash
+forest teams:copy-layout [options]
+```
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-f, --from=<value>` | (required) Name of the team to copy the layout from. |
+| `-p, --projectId=<value>` | Forest project ID. |
+| `-t, --to=<value>` | (required) Name of the team to copy the layout to (its layout is overwritten). |
+| `--force` | Skip the confirmation prompt. |
+
diff --git a/reference/cli/teams-create.mdx b/reference/cli/teams-create.mdx
new file mode 100644
index 0000000..65f4382
--- /dev/null
+++ b/reference/cli/teams-create.mdx
@@ -0,0 +1,22 @@
+---
+title: forest teams:create
+description: "Create a new team in a project"
+---
+
+# forest teams:create
+
+Create a new team in a project.
+
+## Usage
+
+```bash
+forest teams:create [options]
+```
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-n, --name=<value>` | (required) Name of the team to create. |
+| `-p, --projectId=<value>` | Forest project ID. |
+
diff --git a/reference/cli/teams-delete.mdx b/reference/cli/teams-delete.mdx
new file mode 100644
index 0000000..023fad2
--- /dev/null
+++ b/reference/cli/teams-delete.mdx
@@ -0,0 +1,23 @@
+---
+title: forest teams:delete
+description: "Delete a team from a project"
+---
+
+# forest teams:delete
+
+Delete a team from a project.
+
+## Usage
+
+```bash
+forest teams:delete [options]
+```
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-n, --name=<value>` | (required) Name of the team to delete. |
+| `-p, --projectId=<value>` | Forest project ID. |
+| `--force` | Skip the confirmation prompt. |
+
diff --git a/reference/cli/users-edit.mdx b/reference/cli/users-edit.mdx
new file mode 100644
index 0000000..1b5562d
--- /dev/null
+++ b/reference/cli/users-edit.mdx
@@ -0,0 +1,26 @@
+---
+title: forest users:edit
+description: "Edit a user's role, team(s) or permission level"
+---
+
+# forest users:edit
+
+Edit a user's role, team(s) or permission level.
+
+## Usage
+
+```bash
+forest users:edit [options]
+```
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-e, --email=<value>` | (required) Email of the user to edit. |
+| `-f, --force` | Skip the confirmation prompt when teams would be removed. |
+| `-l, --permission-level=<option>` | New permission level. <options: admin\|editor\|user\|developer\|manager> |
+| `-p, --projectId=<value>` | Forest project ID. |
+| `-r, --role=<value>` | New role name to assign. |
+| `-t, --team=<value>...` | Team name to set for this project. Repeatable; this REPLACES the user’s current team set on the project. |
+
diff --git a/reference/cli/users-invite.mdx b/reference/cli/users-invite.mdx
new file mode 100644
index 0000000..31ca8e9
--- /dev/null
+++ b/reference/cli/users-invite.mdx
@@ -0,0 +1,26 @@
+---
+title: forest users:invite
+description: "Invite users to a project"
+---
+
+# forest users:invite
+
+Invite users to a project.
+
+## Usage
+
+```bash
+forest users:invite [options]
+```
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-e, --email=<value>...` | (required) Email of the user to invite (repeat the flag to invite several users). |
+| `-f, --format=<option>` | [default: table] Output format. <options: table\|json> |
+| `-l, --permission-level=<option>` | (required) Permission level of the invited users. <options: admin\|editor\|user\|developer\|manager> |
+| `-p, --projectId=<value>` | Forest project ID. |
+| `-r, --role=<value>` | Role name to assign (prompted if omitted and several exist). |
+| `-t, --team=<value>` | Team name to add the invited users to (prompted if omitted and several exist). |
+
diff --git a/reference/cli/users-list.mdx b/reference/cli/users-list.mdx
new file mode 100644
index 0000000..fc40610
--- /dev/null
+++ b/reference/cli/users-list.mdx
@@ -0,0 +1,22 @@
+---
+title: forest users:list
+description: "List all users of a project"
+---
+
+# forest users:list
+
+List all users of a project.
+
+## Usage
+
+```bash
+forest users:list [options]
+```
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-f, --format=<option>` | [default: table] Output format. <options: table\|json> |
+| `-p, --projectId=<value>` | Forest project ID. |
+
diff --git a/reference/cli/workflow-apply.mdx b/reference/cli/workflow-apply.mdx
new file mode 100644
index 0000000..b4999d0
--- /dev/null
+++ b/reference/cli/workflow-apply.mdx
@@ -0,0 +1,31 @@
+---
+title: forest workflow:apply
+description: "Create or update a workflow from a JSON steps spec (compiles to BPMN and uploads it)"
+---
+
+# forest workflow:apply
+
+Create or update a workflow from a JSON steps spec (compiles to BPMN and uploads it). Reading the spec from stdin disables prompts: pass -p/-e/-t and --force explicitly.
+
+## Usage
+
+```bash
+forest workflow:apply [FILE] [options]
+```
+
+## Arguments
+
+| Argument | Description |
+|---|---|
+| `FILE` | JSON workflow spec ({ name, collection, steps, id?, segments?, position?, start?, version? }). "-" or omit to read stdin. |
+
+## Options
+
+| Option | Description |
+|---|---|
+| `-e, --env=<value>` | Environment name or id. |
+| `-f, --force` | Skip the confirmation prompt (required when the spec is read from stdin). |
+| `-p, --projectId=<value>` | Project id. |
+| `-t, --team=<value>` | Team name or id. |
+| `--dry-run` | Resolve the scope, match the workflow and print the plan; send nothing. |
+