---
title: "oz0 tenant credential"
description: "A credential binding puts one of the tenant's secrets on requests to one host."
canonical_url: "https://docs.oz0.ai/reference/cli/oz0/tenant/credential"
---
# oz0 tenant credential

> A credential binding puts one of the tenant's secrets on requests to one host.

For: Operators and developers looking up a command.

A credential binding puts one of the tenant's secrets on requests to one host. Every plugin process of the tenant that gets the secret then holds a placeholder of it instead, in its environment or secrets file; the node's egress proxy terminates TLS for that host only, checks the request, and puts the value in the header (or Basic authentication, or query parameter) the binding names. A placeholder sent anywhere else is refused.

A binding allows no host by itself: the host must be on the egress allowlist too. A plugin can bind its own secrets in its manifest (requires.inject); `oz0 tenant credential` adds bindings of a tenant admin's.

An argument binding (--function and --argument) lets a model write {{secret:NAME}} in one argument of one function its plugin marks (tools[].secret_arguments); the node fills the value in inside the call and scrubs it from the result, so it is never in the job's history or trace. It belongs to the installed plugin that marks the argument when it is bound, and goes when that plugin is removed.

A {{secret:NAME}} anywhere else is refused with a reason, and the call is not made. A setting is never bound.

A connection's token (--connection) is bound to a host the same way: the edge then seals each call's token to the node that makes the call, the tool gets only a placeholder, and the node's egress proxy puts the token on requests to that host. A sealed token opens only on its node, for its hosts, until it expires.

## Usage

```bash
oz0 tenant credential [command]
```

## Subcommands

- [`bind`](https://docs.oz0.ai/reference/cli/oz0/tenant/credential/bind)
- [`list`](https://docs.oz0.ai/reference/cli/oz0/tenant/credential/list)
- [`unbind`](https://docs.oz0.ai/reference/cli/oz0/tenant/credential/unbind)

## Inherited flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --context
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        $OZ0_CONTEXT or &lt;config dir>/orchestrator-zero/context.json
      </code>
    </td>
    
    <td>
      CLI context file written by server init
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --log-level
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        info
      </code>
    </td>
    
    <td>
      log level: debug, info, warn or error
    </td>
  </tr>
</tbody>
</table>

See [all `oz0` commands](https://docs.oz0.ai/reference/cli/oz0) and the [global flags](https://docs.oz0.ai/reference/cli/oz0#global-flags).


## Sitemap

See the full [sitemap](https://docs.oz0.ai/sitemap.md) for all pages.