Skip to main content
Version: Next

reduct-cli token

Manage access tokens

Options

  • -i, --ignore-ssl: Ignore SSL certificate verification
  • --ca-cert <PATH>: Path to a custom CA certificate bundle/file
  • -T, --timeout <SECONDS>: Timeout for requests
  • -p, --parallel <COUNT>: Number of parallel requests
  • -h, --help: Print help

Help Output

Manage access tokens

Usage: reduct-cli token [OPTIONS] [COMMAND]

Commands:
create Create an access token
ls List access tokens
rotate Rotate an access token value
show Show token details
rm Remove an access token
help Print this message or the help of the given subcommand(s)

Options:
-i, --ignore-ssl Ignore SSL certificate verification
--ca-cert <PATH> Path to a custom CA certificate bundle/file
-T, --timeout <SECONDS> Timeout for requests
-p, --parallel <COUNT> Number of parallel requests
-h, --help Print help

Subcommands

create

Create an access token

Arguments

Options

  • -A, --full-access: Give full access to the token
  • -i, --ignore-ssl: Ignore SSL certificate verification
  • --ca-cert <PATH>: Path to a custom CA certificate bundle/file
  • -r, --read-bucket <TEST>...: Bucket to give read access to. Can be used multiple times
  • -T, --timeout <SECONDS>: Timeout for requests
  • -w, --write-bucket <TEST>...: Bucket to give write access to. Can be used multiple times
  • -p, --parallel <COUNT>: Number of parallel requests
  • --ttl <DURATION>: Inactivity TTL duration (e.g. 1h, 2d, 30m)
  • --expires-at <RFC3339>: Expiration date in RFC3339 format (e.g. 2026-04-05T12:00:00Z)
  • --expires-in <DURATION>: Relative expiry duration (e.g. 1h, 2d, 30m)
  • --ip-allow <IP_OR_CIDR>...: Allowed source IP or CIDR. Can be used multiple times
  • -h, --help: Print help

Help Output

Create an access token

Usage: reduct-cli token create [OPTIONS] <TOKEN_PATH>

Arguments:
<TOKEN_PATH> Path to a resource to use (e.g. SERVER_ALIAS/<RESOURCE_NAME> or http://token@localhost:8383/RESOURCE_NAME)

Options:
-A, --full-access Give full access to the token
-i, --ignore-ssl Ignore SSL certificate verification
--ca-cert <PATH> Path to a custom CA certificate bundle/file
-r, --read-bucket <TEST>... Bucket to give read access to. Can be used multiple times
-T, --timeout <SECONDS> Timeout for requests
-w, --write-bucket <TEST>... Bucket to give write access to. Can be used multiple times
-p, --parallel <COUNT> Number of parallel requests
--ttl <DURATION> Inactivity TTL duration (e.g. 1h, 2d, 30m)
--expires-at <RFC3339> Expiration date in RFC3339 format (e.g. 2026-04-05T12:00:00Z)
--expires-in <DURATION> Relative expiry duration (e.g. 1h, 2d, 30m)
--ip-allow <IP_OR_CIDR>... Allowed source IP or CIDR. Can be used multiple times
-h, --help Print help

ls

List access tokens

Arguments

Options

  • -f, --full: Show detailed token information
  • -i, --ignore-ssl: Ignore SSL certificate verification
  • --ca-cert <PATH>: Path to a custom CA certificate bundle/file
  • -T, --timeout <SECONDS>: Timeout for requests
  • -p, --parallel <COUNT>: Number of parallel requests
  • -h, --help: Print help

Help Output

List access tokens

Usage: reduct-cli token ls [OPTIONS] <ALIAS_OR_URL>

Arguments:
<ALIAS_OR_URL> Alias or URL (e.g. http://token@localhost:8383) of the ReductStore instance to use

Options:
-f, --full Show detailed token information
-i, --ignore-ssl Ignore SSL certificate verification
--ca-cert <PATH> Path to a custom CA certificate bundle/file
-T, --timeout <SECONDS> Timeout for requests
-p, --parallel <COUNT> Number of parallel requests
-h, --help Print help

rotate

Rotate an access token value

Arguments

Options

  • -i, --ignore-ssl: Ignore SSL certificate verification
  • --ca-cert <PATH>: Path to a custom CA certificate bundle/file
  • -T, --timeout <SECONDS>: Timeout for requests
  • -p, --parallel <COUNT>: Number of parallel requests
  • -h, --help: Print help

Help Output

Rotate an access token value

Usage: reduct-cli token rotate [OPTIONS] <TOKEN_PATH>

Arguments:
<TOKEN_PATH> Path to a resource to use (e.g. SERVER_ALIAS/<RESOURCE_NAME> or http://token@localhost:8383/RESOURCE_NAME)

Options:
-i, --ignore-ssl Ignore SSL certificate verification
--ca-cert <PATH> Path to a custom CA certificate bundle/file
-T, --timeout <SECONDS> Timeout for requests
-p, --parallel <COUNT> Number of parallel requests
-h, --help Print help

show

Show token details

Arguments

Options

  • -i, --ignore-ssl: Ignore SSL certificate verification
  • --ca-cert <PATH>: Path to a custom CA certificate bundle/file
  • -T, --timeout <SECONDS>: Timeout for requests
  • -p, --parallel <COUNT>: Number of parallel requests
  • -h, --help: Print help

Help Output

Show token details

Usage: reduct-cli token show [OPTIONS] <TOKEN_PATH>

Arguments:
<TOKEN_PATH> Path to a resource to use (e.g. SERVER_ALIAS/<RESOURCE_NAME> or http://token@localhost:8383/RESOURCE_NAME)

Options:
-i, --ignore-ssl Ignore SSL certificate verification
--ca-cert <PATH> Path to a custom CA certificate bundle/file
-T, --timeout <SECONDS> Timeout for requests
-p, --parallel <COUNT> Number of parallel requests
-h, --help Print help

rm

Remove an access token

Arguments

Options

  • -i, --ignore-ssl: Ignore SSL certificate verification
  • -y, --yes: Do not ask for confirmation
  • --ca-cert <PATH>: Path to a custom CA certificate bundle/file
  • -T, --timeout <SECONDS>: Timeout for requests
  • -p, --parallel <COUNT>: Number of parallel requests
  • -h, --help: Print help

Help Output

Remove an access token

Usage: reduct-cli token rm [OPTIONS] <TOKEN_PATH>

Arguments:
<TOKEN_PATH> Path to a resource to use (e.g. SERVER_ALIAS/<RESOURCE_NAME> or http://token@localhost:8383/RESOURCE_NAME)

Options:
-i, --ignore-ssl Ignore SSL certificate verification
-y, --yes Do not ask for confirmation
--ca-cert <PATH> Path to a custom CA certificate bundle/file
-T, --timeout <SECONDS> Timeout for requests
-p, --parallel <COUNT> Number of parallel requests
-h, --help Print help