Agentic Data Plane

rpk ai oauth-client dcr iat

Manage Initial Access Tokens (IATs): one-shot bearer credentials a caller presents to the public registration endpoint when the tenant’s admission mode is initial-access-token. The plaintext is printed exactly once on mint; only a hash is stored.

Usage

rpk ai oauth-client dcr iat [flags]

Subcommands

Command Description

rpk ai oauth-client dcr iat list

List Initial Access Tokens (plaintext is never shown).

rpk ai oauth-client dcr iat mint

Mint a one-shot Initial Access Token for use at the OAuth client registration endpoint. The token plaintext is printed once and only a hash is stored.

rpk ai oauth-client dcr iat revoke

Revoke an unconsumed Initial Access Token so it can no longer be exchanged at the registration endpoint. Idempotent: revoking an already-revoked or consumed token returns 0.

Global flags

Value Type Description

--config

string

Redpanda or rpk config file; default search paths are ~/.config/rpk/rpk.yaml, $PWD/redpanda.yaml, and /etc/redpanda/redpanda.yaml.

-X, --config-opt

stringArray

Override rpk configuration settings; -X help for detail or -X list for terser detail.

--ignore-profile

bool

Ignore rpk.yaml and redpanda.yaml; use default settings.

--profile

string

rpk profile to use.

-v, --verbose

bool

Enable verbose logging.