CLI
oz0
The server binary and the operator CLI: run servers, manage nodes, plugins, secrets and jobs.
For: Operators and developers looking up a command.
Orchestrator Zero: mission control for AI agents
oz0 and orchestrator-zero run the same commands. The build and install scripts provide both names.
Commands by task
Choose a command group below. Each command has its own usage, flags and subcommands.
| Group | Commands |
|---|---|
| Get started | dev, doctor, login, logout, run, setup |
| Run | approval, changes, chat, conversation, event, job, search |
| Build | agent, catalog, channel, client, hub, index, mcp, plugin, routine, tool, workspace |
| Improve | compare, compare-savings, eval, insights |
| Govern | audit, change, egress, evidence, incident, inventory, kill, memory, policy, receipt, replay, retention, subject |
| Fleet | cluster, node, queue, region, rollout, server, support, token |
| Spend | model, provider, quota, usage |
| Admin | account, apikey, app, connection, mfa, notify, oidc, operator, roles, secret, setting, team, tenant, user |
| Other commands | version |
Usage
oz0 [command]
Global flags
These flags apply to every command.
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
Command index
Each entry opens a separate reference page. Existing section links still land on the matching entry here.
account: usage and flags.account disable: usage and flags.account enable: usage and flags.account get: usage and flags.account groups: usage and flags.account list: usage and flags.account memberships: usage and flags.account remove: usage and flags.account upsert: usage and flags.agent: usage and flags.agent new: usage and flags.apikey: usage and flags.apikey create: usage and flags.apikey list: usage and flags.apikey revoke: usage and flags.app: usage and flags.app create: usage and flags.app delete: usage and flags.app list: usage and flags.approval: usage and flags.approval allowlist: usage and flags.approval answer: usage and flags.approval approve: usage and flags.approval args: usage and flags.approval decide: usage and flags.approval deny: usage and flags.approval list: usage and flags.approval stats: usage and flags.audit: usage and flags.audit export: usage and flags.audit key: usage and flags.audit key rotate: usage and flags.audit verify: usage and flags.catalog: usage and flags.change: usage and flags.change approve: usage and flags.change list: usage and flags.change reject: usage and flags.change show: usage and flags.changes: usage and flags.changes approve: usage and flags.changes diff: usage and flags.changes reject: usage and flags.changes rollback: usage and flags.changes show: usage and flags.channel: usage and flags.channel bind: usage and flags.channel link: usage and flags.channel links: usage and flags.channel list: usage and flags.channel member: usage and flags.channel member add: usage and flags.channel member remove: usage and flags.channel members: usage and flags.channel threads: usage and flags.channel unbind: usage and flags.channel unlink: usage and flags.chat: usage and flags.client: usage and flags.client generate: usage and flags.cluster: usage and flags.cluster confirm-registry: usage and flags.cluster edges: usage and flags.cluster info: usage and flags.cluster leases: usage and flags.compare: usage and flags.compare list: usage and flags.compare show: usage and flags.compare start: usage and flags.compare-savings: usage and flags.compare-savings export: usage and flags.compare-savings list: usage and flags.compare-savings show: usage and flags.compare-savings start: usage and flags.connection: usage and flags.connection delete: usage and flags.connection list: usage and flags.connection package: usage and flags.connection set: usage and flags.connection show: usage and flags.connection start: usage and flags.conversation: usage and flags.conversation archive: usage and flags.conversation get: usage and flags.conversation list: usage and flags.conversation mine: usage and flags.conversation pin: usage and flags.conversation read: usage and flags.conversation remove: usage and flags.conversation rename: usage and flags.- : usage and flags.
- : usage and flags.
conversation unarchive: usage and flags.conversation unpin: usage and flags.- : usage and flags.
dev: usage and flags.doctor: usage and flags.egress: usage and flags.egress learn: usage and flags.eval: usage and flags.eval anchors: usage and flags.eval feedback: usage and flags.eval findings: usage and flags.eval resolve: usage and flags.eval runs: usage and flags.eval samples: usage and flags.event: usage and flags.event list: usage and flags.event sources: usage and flags.event waits: usage and flags.evidence: usage and flags.evidence export: usage and flags.evidence verify: usage and flags.hub: usage and flags.hub search: usage and flags.hub submit: usage and flags.incident: usage and flags.incident clock: usage and flags.incident close: usage and flags.incident edit: usage and flags.incident export: usage and flags.incident link: usage and flags.incident list: usage and flags.incident note: usage and flags.incident notify: usage and flags.incident open: usage and flags.incident regimes: usage and flags.incident show: usage and flags.incident unlink: usage and flags.incident verify: usage and flags.index: usage and flags.index add: usage and flags.index advisories: usage and flags.index advisories import: usage and flags.index advisories list: usage and flags.index advisories remove: usage and flags.index certify: usage and flags.index keygen: usage and flags.index list: usage and flags.index plugins: usage and flags.index refresh: usage and flags.index remove: usage and flags.index sign: usage and flags.index trust: usage and flags.index verify: usage and flags.insights: usage and flags.insights agent: usage and flags.insights node: usage and flags.insights overview: usage and flags.insights tool: usage and flags.insights versions: usage and flags.inventory: usage and flags.inventory assessment: usage and flags.inventory delete: usage and flags.inventory export: usage and flags.inventory legal-basis: usage and flags.inventory list: usage and flags.inventory purposes: usage and flags.inventory purposes set: usage and flags.inventory recipients: usage and flags.inventory retire: usage and flags.inventory set: usage and flags.inventory tombstones: usage and flags.inventory unretire: usage and flags.job: usage and flags.job board: usage and flags.job cancel: usage and flags.job compare: usage and flags.job errors: usage and flags.job export: usage and flags.job findings: usage and flags.job get: usage and flags.job keep-as-eval: usage and flags.job list: usage and flags.job outcome: usage and flags.job retry: usage and flags.job run: usage and flags.job save-as-flow: usage and flags.job search: usage and flags.job step: usage and flags.job tag: usage and flags.job trace: usage and flags.job watch: usage and flags.job why: usage and flags.kill: usage and flags.kill agent: usage and flags.kill list: usage and flags.kill release: usage and flags.kill tenant: usage and flags.kill tool: usage and flags.login: usage and flags.logout: usage and flags.mcp: usage and flags.mcp clients: usage and flags.mcp clients list: usage and flags.mcp clients policy: usage and flags.mcp clients revoke: usage and flags.memory: usage and flags.memory person: usage and flags.memory renew: usage and flags.memory settings: usage and flags.memory settings set: usage and flags.mfa: usage and flags.mfa require: usage and flags.mfa reset: usage and flags.mfa status: usage and flags.model: usage and flags.model alias: usage and flags.model alias delete: usage and flags.model alias list: usage and flags.model alias seed: usage and flags.model alias set: usage and flags.model canary: usage and flags.model canary list: usage and flags.model canary off: usage and flags.model canary on: usage and flags.model canary reset: usage and flags.model list: usage and flags.model map: usage and flags.model map delete: usage and flags.model map list: usage and flags.model map presets: usage and flags.model map set: usage and flags.model provenance: usage and flags.model resolve: usage and flags.model rules: usage and flags.model unvet: usage and flags.model vet: usage and flags.node: usage and flags.node accept: usage and flags.node block: usage and flags.node delete: usage and flags.node drain: usage and flags.node list: usage and flags.node purge: usage and flags.node reject: usage and flags.node runtimes: usage and flags.node sandbox-optout: usage and flags.node show: usage and flags.node unblock: usage and flags.node undrain: usage and flags.node upgrade: usage and flags.notify: usage and flags.notify address: usage and flags.notify rule: usage and flags.notify rule delete: usage and flags.notify rule list: usage and flags.notify rule put: usage and flags.notify rule test: usage and flags.oidc: usage and flags.oidc list: usage and flags.oidc remove: usage and flags.oidc set: usage and flags.operator: usage and flags.operator renew: usage and flags.plugin: usage and flags.plugin approve-tools: usage and flags.plugin candidates: usage and flags.plugin change-budget: usage and flags.plugin config: usage and flags.plugin config apply: usage and flags.plugin config export: usage and flags.plugin config rollback: usage and flags.plugin declare: usage and flags.plugin dependents: usage and flags.plugin eject: usage and flags.plugin explain: usage and flags.plugin gc: usage and flags.plugin grant: usage and flags.plugin import: usage and flags.plugin import openapi: usage and flags.plugin inspect: usage and flags.plugin install: usage and flags.plugin lint: usage and flags.plugin list: usage and flags.plugin mcp: usage and flags.plugin new: usage and flags.plugin pack: usage and flags.plugin policy: usage and flags.plugin preview: usage and flags.plugin procedure: usage and flags.plugin push: usage and flags.plugin reads: usage and flags.plugin reads grant: usage and flags.plugin reads revoke: usage and flags.plugin remove: usage and flags.plugin retire: usage and flags.plugin revoke: usage and flags.plugin revoke-provides: usage and flags.plugin revoke-reads: usage and flags.plugin sbom: usage and flags.plugin show: usage and flags.plugin test: usage and flags.plugin unretire: usage and flags.plugin update: usage and flags.plugin versions: usage and flags.plugin vulns: usage and flags.policy: usage and flags.policy allow: usage and flags.policy apply: usage and flags.policy ask: usage and flags.policy duties: usage and flags.policy duties explain: usage and flags.policy duties list: usage and flags.policy duties set: usage and flags.policy edit: usage and flags.policy explain: usage and flags.policy export: usage and flags.policy lint: usage and flags.policy refuse: usage and flags.policy remove: usage and flags.policy show: usage and flags.provider: usage and flags.provider delete: usage and flags.provider list: usage and flags.provider model: usage and flags.provider pool: usage and flags.provider pool add: usage and flags.provider pool list: usage and flags.provider pool remove: usage and flags.provider set: usage and flags.provider show: usage and flags.queue: usage and flags.queue list: usage and flags.quota: usage and flags.quota approve: usage and flags.quota deny: usage and flags.quota list: usage and flags.quota mine: usage and flags.quota request: usage and flags.quota requests: usage and flags.quota set: usage and flags.quota usage: usage and flags.receipt: usage and flags.receipt list: usage and flags.receipt show: usage and flags.receipt verify: usage and flags.region: usage and flags.region list: usage and flags.region name: usage and flags.replay: usage and flags.replay cancel: usage and flags.replay continue: usage and flags.replay continue cancel: usage and flags.replay list: usage and flags.replay privilege: usage and flags.replay privilege propose: usage and flags.replay privilege suggest: usage and flags.replay privilege test: usage and flags.replay reprice: usage and flags.replay show: usage and flags.replay start: usage and flags.retention: usage and flags.retention held: usage and flags.retention hold: usage and flags.retention keep-for: usage and flags.retention release: usage and flags.retention set: usage and flags.retention show: usage and flags.roles: usage and flags.rollout: usage and flags.rollout abort: usage and flags.rollout list: usage and flags.rollout show: usage and flags.rollout start: usage and flags.routine: usage and flags.routine backfill: usage and flags.routine check: usage and flags.routine delete: usage and flags.routine fires: usage and flags.routine list: usage and flags.routine outputs: usage and flags.routine pause: usage and flags.routine resume: usage and flags.routine rollback: usage and flags.routine run: usage and flags.routine save: usage and flags.routine show: usage and flags.run: usage and flags.search: usage and flags.secret: usage and flags.secret delete: usage and flags.secret dependents: usage and flags.secret expiry: usage and flags.secret export-to-sealed: usage and flags.secret list: usage and flags.secret reminders: usage and flags.secret rollback: usage and flags.secret set: usage and flags.secret stores: usage and flags.secret usage: usage and flags.server: usage and flags.server backup: usage and flags.server backup record: usage and flags.server ca: usage and flags.server ca export-key: usage and flags.server ca forget-key: usage and flags.server dist: usage and flags.server dist channel: usage and flags.server dist pull: usage and flags.server dist status: usage and flags.server healthcheck: usage and flags.server init: usage and flags.server master-key: usage and flags.server master-key confirm-backup: usage and flags.server master-key unwrap-to-file: usage and flags.server master-key wrap: usage and flags.server operator: usage and flags.server operator disable: usage and flags.server operator enable: usage and flags.server operator issue: usage and flags.server provisioner: usage and flags.server provisioner disable: usage and flags.server provisioner enable: usage and flags.server provisioner issue: usage and flags.server restore: usage and flags.server secrets-key: usage and flags.server secrets-key confirm-backup: usage and flags.server secrets-key create: usage and flags.server secrets-key move-flavour: usage and flags.server secrets-key reseal-older: usage and flags.server secrets-key unwrap-to-file: usage and flags.server secrets-key wrap: usage and flags.server start: usage and flags.setting: usage and flags.setting delete: usage and flags.setting list: usage and flags.setting set: usage and flags.setup: usage and flags.subject: usage and flags.subject contest: usage and flags.subject decisions: usage and flags.subject erase: usage and flags.subject erasures: usage and flags.subject export: usage and flags.subject find: usage and flags.subject object: usage and flags.subject restrict: usage and flags.subject rule: usage and flags.subject rule delete: usage and flags.subject rule list: usage and flags.subject rule set: usage and flags.subject rule test: usage and flags.support: usage and flags.support bundle: usage and flags.team: usage and flags.team add: usage and flags.team create: usage and flags.team delete: usage and flags.team list: usage and flags.team remove: usage and flags.tenant: usage and flags.tenant ai-label: usage and flags.tenant ai-label set: usage and flags.tenant ai-label show: usage and flags.tenant ask: usage and flags.tenant backends: usage and flags.tenant budget: usage and flags.tenant cache: usage and flags.tenant chat-read-notices: usage and flags.tenant chat-titles: usage and flags.tenant cors: usage and flags.tenant create: usage and flags.tenant credential: usage and flags.tenant credential bind: usage and flags.tenant credential list: usage and flags.tenant credential unbind: usage and flags.tenant egress: usage and flags.tenant encryption: usage and flags.tenant erasure-policy: usage and flags.tenant export: usage and flags.tenant four-eyes: usage and flags.tenant labels: usage and flags.tenant labels clearance: usage and flags.tenant labels clearance remove: usage and flags.tenant labels clearance set: usage and flags.tenant labels egress: usage and flags.tenant labels egress remove: usage and flags.tenant labels egress set: usage and flags.tenant labels people: usage and flags.tenant labels people remove: usage and flags.tenant labels people set: usage and flags.tenant labels walls: usage and flags.tenant labels walls remove: usage and flags.tenant labels walls set: usage and flags.tenant list: usage and flags.tenant mail-domains: usage and flags.tenant mail-domains add: usage and flags.tenant mail-domains list: usage and flags.tenant mail-domains remove: usage and flags.tenant mail-outside: usage and flags.tenant mail-sender: usage and flags.tenant max-effort: usage and flags.tenant move: usage and flags.tenant notify-content: usage and flags.tenant offload: usage and flags.tenant oidc: usage and flags.tenant oidc delegated-off-cluster: usage and flags.tenant oidc jwks: usage and flags.tenant oidc publish: usage and flags.tenant oidc rotate: usage and flags.tenant oidc show: usage and flags.tenant orphan-pause: usage and flags.tenant provisioner: usage and flags.tenant provisioner allow: usage and flags.tenant provisioner list: usage and flags.tenant provisioner remove: usage and flags.tenant quality: usage and flags.tenant region: usage and flags.tenant remote-sandbox: usage and flags.tenant removed-account-keys: usage and flags.tenant review-widening: usage and flags.tenant role-rules: usage and flags.tenant rotate-payload-key: usage and flags.tenant sandbox-isolation: usage and flags.tenant sandbox-limits: usage and flags.tenant spend: usage and flags.tenant spend-alerts: usage and flags.tenant tasks: usage and flags.tenant temporal-namespace: usage and flags.tenant test-approvals: usage and flags.tenant tool-policy: usage and flags.tenant tool-policy load: usage and flags.tenant tool-policy set: usage and flags.tenant tool-policy shadow-report: usage and flags.tenant tool-policy show: usage and flags.tenant vulnerable-installs: usage and flags.tenant works-council: usage and flags.token: usage and flags.token create: usage and flags.token list: usage and flags.token revoke: usage and flags.tool: usage and flags.tool call: usage and flags.usage: usage and flags.usage anomalies: usage and flags.usage cache: usage and flags.usage export: usage and flags.usage outside: usage and flags.user: usage and flags.user add: usage and flags.user grant: usage and flags.user link: usage and flags.user link-temporal-cloud: usage and flags.user list: usage and flags.user password: usage and flags.user remove: usage and flags.user revoke: usage and flags.user sessions: usage and flags.user signout: usage and flags.user unlink: usage and flags.version: usage and flags.workspace: usage and flags.workspace cat: usage and flags.workspace create: usage and flags.workspace delete: usage and flags.workspace discard: usage and flags.workspace edit: usage and flags.workspace explain: usage and flags.workspace export: usage and flags.workspace files: usage and flags.workspace graph: usage and flags.workspace lint: usage and flags.workspace list: usage and flags.workspace log: usage and flags.workspace rm: usage and flags.workspace save: usage and flags.workspace write: usage and flags.