oz0 token create

Create a join token; nodes that use it are accepted without approval, into its tenant only.

For: Operators and developers looking up a command.

Create a join token; nodes that use it are accepted without approval, into its tenant only.

A token is bounded: by default it admits one node and lasts 24 hours. --max-uses takes 1 to 1000 and --ttl at most 720h (30 days); 0 is refused, since a token is never unlimited and never lasts forever.

Usage

oz0 token create [flags]

Flags

FlagTypeDefaultDescription
--descriptionstringwhat the token is for
--jsonboolprint JSON instead of a table
--labelstringArraylabel for joining nodes, key=value; repeatable
--max-usesuint321how many nodes may join with it, 1 to 1000; a token is never unlimited
--tenantstringdefaulttenant the nodes join
--ttlduration24h0m0show long the token is valid, at most 720h (30 days); a token never lasts forever

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026