oz0 tenant oidc

Usage and flags for oz0 tenant oidc.

For: Operators and developers looking up a command.

Each tenant has its own OIDC issuer on the edge: outside services and clouds trust its agents by the issuer and the token's subject, and fetch its keys from the issuer's discovery document. The edge mints a token only for a tool call it handed a node, through a connection of kind identity or on_behalf_of.

Usage

oz0 tenant oidc [command]

Subcommands

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

Copyright © 2026