---
title: "oz0 app create"
description: "Usage and flags for oz0 app create."
canonical_url: "https://docs.oz0.ai/reference/cli/oz0/app/create"
---
# oz0 app create

> Usage and flags for oz0 app create.

For: Operators and developers looking up a command.

Register an app whose backend exchanges a signed-in person's token from one of the cluster's identity providers (--provider) for a short-lived token that acts as that person on the runtime API: POST /v1/token on the edge (RFC 8693), with the app's key as actor_token.

The person's ID token, or a JWT access token, must be for the app's own client ID at that provider (--client-id), and the person must have signed in to this cluster once (the console or oz0 login). The token lasts at most 15 minutes and acts as the person: approvals, questions, budgets and the audit log see them, with the app beside them.

What it may do is the person's own permissions narrowed to the app's (--permission, from jobs.read[.own], jobs.start[.granted], jobs.cancel[.own], approvals.decide[.named], questions.answer[.own], feeds.read, budget.request and tenant.read; by default the agent user's without the chat drawer, and jobs.start). Content (what jobs read and wrote) only with --content, for people who have it. Only the tenant's members act through it, and the tenant's owners register it. A client ID belongs to one app in the cluster, and never the cluster's own.

## Usage

```bash
oz0 app create <name> [flags]
```

## Flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --client-id
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      
    </td>
    
    <td>
      the app's own client ID at that provider: its tokens' audience
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --content
      </code>
    </td>
    
    <td>
      bool
    </td>
    
    <td>
      
    </td>
    
    <td>
      let people who see content see it through the app
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --json
      </code>
    </td>
    
    <td>
      bool
    </td>
    
    <td>
      
    </td>
    
    <td>
      print JSON instead of a table
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --permission
      </code>
    </td>
    
    <td>
      stringArray
    </td>
    
    <td>
      <code>
        the agent user's
      </code>
    </td>
    
    <td>
      what people may do through the app; repeat for more
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --provider
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      
    </td>
    
    <td>
      the cluster's identity provider whose people use the app (oz0 oidc list)
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --tenant
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        default
      </code>
    </td>
    
    <td>
      tenant
    </td>
  </tr>
</tbody>
</table>

## Inherited flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --context
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        $OZ0_CONTEXT or &lt;config dir>/orchestrator-zero/context.json
      </code>
    </td>
    
    <td>
      CLI context file written by server init
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --log-level
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        info
      </code>
    </td>
    
    <td>
      log level: debug, info, warn or error
    </td>
  </tr>
</tbody>
</table>

See [all `oz0` commands](https://docs.oz0.ai/reference/cli/oz0) and the [global flags](https://docs.oz0.ai/reference/cli/oz0#global-flags).


## Sitemap

See the full [sitemap](https://docs.oz0.ai/sitemap.md) for all pages.