Agentic Data Plane
Preview

rpk ai oauth-client dcr update

Update the tenant’s DCR settings. Only the flags you pass change; everything else keeps its current value (the CLI reads the current settings and writes back the merged result).

Enable open self-registration:

rpk ai oauth-client dcr update --enabled --admission-mode open

Require admin-minted Initial Access Tokens instead:

rpk ai oauth-client dcr update --admission-mode initial-access-token

Turn the endpoint off again:

rpk ai oauth-client dcr update --enabled=false

Usage

rpk ai oauth-client dcr update [flags]

Flags

Value Type Description

--admission-mode

string

how callers are admitted: open, initial-access-token.

--allowed-resource

strings

MCP URL every DCR-issued client may request tokens for; "*" = any. repeatable.

--client-cap

int32

max concurrent DCR-issued clients (0 = runtime default).

--enabled

bool

whether the public registration endpoint accepts requests.

--inactive-ttl-days

int32

days of inactivity before a DCR client is removed (0 = never).

--rate-per-hour

int32

max registrations per hour (0 = runtime default).

Global flags

Value Type Description

--config

string

Redpanda or rpk config file; default search paths are ~/.config/rpk/rpk.yaml, $PWD/redpanda.yaml, and /etc/redpanda/redpanda.yaml.

-X, --config-opt

stringArray

Override rpk configuration settings; -X help for detail or -X list for terser detail.

--ignore-profile

bool

Ignore rpk.yaml and redpanda.yaml; use default settings.

--profile

string

rpk profile to use.

-v, --verbose

bool

Enable verbose logging.