oz0 plugin config

Usage and flags for oz0 plugin config.

For: Operators and developers looking up a command.

An installed plugin's configuration: its settings, its agents' model mappings, its functions' tool-policy switches (allow, ask or refuse), its agents' budgets, on_budget and on_unknown, the tenant's egress list, the routines that run it, and its change budget for agent-made changesets (agent_changes: max, period, cooldown). It is what the plugin's Configure tab in the console shows. It never holds the plugin's own files, prompts or code, and never a secret's value.

export writes it as YAML; apply shows what a file changes and files it as one change request of kind plugin_config; rollback files the inverse of an applied one. A tenant admin approves the request (oz0 change approve), with their own permissions for each part, and every part lands together or none does.

A change that loosens a control (wider egress, an approval removed, a function turned on, a governance setting loosened) is listed first and is always approved by another admin than the one who asked.

Usage

oz0 plugin config [command]

Subcommands

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

Copyright © 2026