oz0 plugin preview

Build a plugin from a source as `plugin install` would, with the same checks against the tenant, and keep nothing.

For: Operators and developers looking up a command.

Build a plugin from a source as plugin install would, with the same checks against the tenant, and keep nothing. A folder or an archive on this machine, such as your working copy, is packed and uploaded as plugin install does it, so a plugin's CI can preview it against a real tenant.

It prints the names, the tool IDs and what the install would refuse (a tool ID or an agent name another plugin of the tenant has; the tenant's queue limits; contracts that break the installed version's without a new major version), the contract changes, and what the tenant's plugins would take of its limits.

For a Claude Code plugin, an Agent Plugin or an MCP Registry entry it prints the inventory, every hook and MCP command it would run on nodes, and its digest, which plugin install --accept-inventory takes, and what does not carry over. For a plugin that uses other plugins it prints what it asks of them, the plugins an install would install first, and the digest plugin install --accept-uses takes.

It names each agent that would combine private data, outside input and sending out while a sending function runs without asking, with the switch that closes it; that never refuses the install. Exits non-zero when the install would be refused; --json prints it all for scripts.

Usage

oz0 plugin preview <folder | archive | git-url | oci://… | hub:name | mcp:name[@version]> [flags]

Flags

FlagTypeDefaultDescription
--dependencystringArray<plugin>=<source>: where an install would get a plugin it uses that the tenant lacks; repeatable
--guarded-serversboolpreview with the plugin's servers that hold secrets also serving guarded sessions (needs --harness-extras)
--harness-extrasboolpreview with the plugin's hooks and MCP servers kept in harness sessions
--jsonboolprint JSON instead of a table
--pathstringthe plugin's folder in the repository
--pluginstringthe source is a Claude Code marketplace: preview its plugin of this name
--refstringbranch, tag or full commit SHA, or for mcp: the version
--secretstringtenant secret with a token for a private repository, bound to its host (oz0 secret set NAME --host HOST)
--tenantstringdefaulttenant

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026