diff --git a/.agents/skills/inkreach-teable/guides/cli-reference.md b/.agents/skills/inkreach-teable/guides/cli-reference.md
index e751829..ec10bdf 100644
--- a/.agents/skills/inkreach-teable/guides/cli-reference.md
+++ b/.agents/skills/inkreach-teable/guides/cli-reference.md
@@ -165,6 +165,35 @@ Read-only. Must use `dbTableName`/`dbFieldName` (from `table get`/`field get`),
 inkreach-teable sql 'SELECT "name" FROM "bseXXX"."tbl_abc" LIMIT 10'
 ```
 
+## plugin
+
+Manage plugins and developer whitelist.
+
+```bash
+# List plugins registered in the base
+inkreach-teable plugin list
+
+# Register a plugin (set runtimeType, positions, logo)
+inkreach-teable plugin register --name <name> --positions '["base","panel"]'
+
+# Developer whitelist (admin only)
+inkreach-teable plugin dev list
+inkreach-teable plugin dev allow <userIdOrEmail>   # add (userId or email)
+inkreach-teable plugin dev revoke <userIdOrEmail>  # remove
+
+# Install / uninstall (creates a base-level mount node)
+inkreach-teable plugin install --plugin <pluginId> --name "My Plugin" --position base
+inkreach-teable plugin installs        # list installs in current base
+inkreach-teable plugin uninstall --install <installId>
+
+# Enable/disable plugins
+inkreach-teable plugin config enable --plugin <pluginId>
+inkreach-teable plugin config disable --plugin <pluginId>
+```
+
+Developer whitelist is admin-only (requires `user.isAdmin=true`). Routes:
+`/api/plugin-developers` (GET/POST/DELETE).
+
 ## Output Modes
 
 - **Human (default)**: tables / key-values, colored where supported.