oz0 hub search

Search the plugins the cluster's trusted indexes offer, by their facets: facts the engine computed from each listed version's code and manifest, never what its authors say.

For: Operators and developers looking up a command.

Search the plugins the cluster's trusted indexes offer, by their facets: facts the engine computed from each listed version's code and manifest, never what its authors say.

  • --models takes any-model (no agent names a vendor's model), needs:<vendor>, local-capable (every agent can run on a local model and nothing reaches past the node) or sampling.
  • --harness takes a harness's name.
  • --kind takes connector, capability, policy, set or unknown.
  • --connects takes a connection's name or a host.
  • --trust takes verified (one of the project's verified plugins), publisher-proven, custody or no-advisories.
  • --platform takes an OS, any or tier-1.
  • --function takes the type of at least one of its functions, in the tool policy's words: read, write, sends-out, destructive or unknown (what its calls do, as the install screen groups them).
  • --permission takes what the plugin may do on a node, by its listing's permission sections: shell, write (files), unchecked, network, secrets, hooks, outside-input, approvals or uses.
  • --tag takes an author's tag.

A flag may be repeated or take a comma-separated list: a plugin matches any value of a flag and every flag given. The server filters and counts: after the plugins come, for each facet, how many plugins the search would hold with it added. The text matches the name and the summary. It reads the copies the cluster has and fetches nothing.

Usage

oz0 hub search [text] [flags]

Flags

FlagTypeDefaultDescription
--connectsstringsa connection's name or a host it reaches
--functionstringsread, write, sends-out, destructive or unknown: a type one of its functions has
--harnessstringsa harness's name, such as codex
--indexstringonly this index
--jsonboolprint JSON instead of a table
--kindstringsconnector, capability, policy, set or unknown
--modelsstringsany-model, needs:<vendor>, local-capable or sampling
--permissionstringswhat it may do on a node: shell, write, unchecked, network, secrets, hooks, outside-input, approvals or uses
--platformstringsan OS such as linux, any, or tier-1
--tagstringsan author's tag
--truststringsverified, publisher-proven, custody or no-advisories

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026