oz0 secret usage

Usage and flags for oz0 secret usage.

For: Operators and developers looking up a command.

The tenant's credentials view: every secret (who set it and when, the plugins that declare it, the model providers that read it, the credential bindings that inject it and where), every connection (its tools, its secrets, who connected it, what it signs in as, when a call last got its token, and the plugins whose granted uses call its tools), credential changes that wait for a decision, and the refusals of the last 24 hours (secrets refused in calls, injections refused, egress denials of credentialed hosts).

It never shows a value. Tenant admins may.

Usage

oz0 secret usage [flags]

Flags

FlagTypeDefaultDescription
--jsonboolprint JSON instead of a table
--tenantstringdefaulttenant

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026