Skip to main content
Version: v5.6.1

opschain admin agent-token list

packs:agents

opschain admin agent-token list [--server <url>] [--auth-token <token>]

Lists agent registration tokens (GET /api/registration_tokens?kind=agent): each token's project/code scope, group, uses, expiry, and a derived STATUS — expired, exhausted or active — so "why won't this token register" reads at a glance (registration itself answers only an opaque credential-invalid).

The server never returns a token's value: rows are named by the non-redeemable fingerprint.

FINGERPRINT PROJECT CODE GROUP USES EXPIRES STATUS
a1b2c3d4… /demo - default 0/1 2026-10-15T04:12:09Z active

USES reads <uses>/<max>, with ∞ for a token minted without a redemption cap. -o json or -o yaml prints the raw rows.

Flags​

FlagMeaning
--server <url>Server base URL. Default: the active context, then OPSCHAIN_SERVER.
--auth-token <token>Admin bearer token override. Default: your opschain login session, then $OPSCHAIN_ADMIN_TOKEN, then the token stored by opschain admin login for that server.
--filter <column>[!]=<value>Keep only rows matching the term (repeatable; terms AND). Columns are the printed table headers lowercased (spaces/dashes fold to _); * wildcards match the whole cell case-insensitively, != negates, commas mean any-of. Applied client-side. Grammar: opschain docs cli.

Exit codes​

CodeMeaning
0The inventory was printed (no tokens prints just the header).
1The server refused or failed the request (including a rejected admin token).
2Usage — unexpected arguments, or no server / admin token resolvable.

Named errors​

  • a server is required — pass --server <url>, set OPSCHAIN_SERVER, or 'opschain context use <name>' — exit 2.
  • this command needs a login or an admin token — run 'opschain login', pass --auth-token, set OPSCHAIN_ADMIN_TOKEN, or store one with 'opschain admin login' — exit 2.
  • the server rejected the credential — run 'opschain login' again, or check the admin token — exit 1.

See also​

  • opschain docs cli/admin-agent-token-create — mint a token.
  • opschain docs cli/admin-agents-list — the agents the tokens enrolled.