---
title: "oz0 setting"
description: "Settings are what plugins declare under requires.settings: addresses, backends' names, switches."
canonical_url: "https://docs.oz0.ai/reference/cli/oz0/setting"
---
# oz0 setting

> Settings are what plugins declare under requires.settings: addresses, backends' names, switches.

For: Operators and developers looking up a command.

Settings are what plugins declare under requires.settings: addresses, backends' names, switches. They are stored
and shown as they are and are never scanned for as secrets, so a key, a token or a password is refused: keep
those as secrets (oz0 secret set). Admins set and delete settings; operators and admins list them.

A setting that loosens a safety control is a governance setting: GUARDRAILS_CLASSIFIED_LOCAL, the classified
markings the guardrails let into agents whose data stays on the node, and GUARDRAILS_CONFIG, the guardrails'
checks (turning one off, such as the command guard, loosens). Setting or deleting one takes --reason (or
$OZ0_REASON) and the governance.write permission, and a loosening waits for a second admin where the
tenant has four eyes on.

## Usage

```bash
oz0 setting [command]
```

## Subcommands

- [`delete`](https://docs.oz0.ai/reference/cli/oz0/setting/delete)
- [`list`](https://docs.oz0.ai/reference/cli/oz0/setting/list)
- [`set`](https://docs.oz0.ai/reference/cli/oz0/setting/set)

## Flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --tenant
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        default
      </code>
    </td>
    
    <td>
      tenant
    </td>
  </tr>
</tbody>
</table>

## Inherited flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --context
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        $OZ0_CONTEXT or &lt;config dir>/orchestrator-zero/context.json
      </code>
    </td>
    
    <td>
      CLI context file written by server init
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --log-level
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        info
      </code>
    </td>
    
    <td>
      log level: debug, info, warn or error
    </td>
  </tr>
</tbody>
</table>

See [all `oz0` commands](https://docs.oz0.ai/reference/cli/oz0) and the [global flags](https://docs.oz0.ai/reference/cli/oz0#global-flags).


## Sitemap

See the full [sitemap](https://docs.oz0.ai/sitemap.md) for all pages.