Agentic Data Plane

rpk ai oauth-client

Manage OAuth clients registered with the AI gateway’s OAuth Authorization Server. An OAuth client is an external tool (such as Claude AI, ChatGPT, or Cursor) that requests access tokens for an MCP server.

Usage

rpk ai oauth-client [flags]

Subcommands

Command Description

rpk ai oauth-client apply

Reconcile OAuth clients from one or more YAML manifests. For each manifest: create the resource if absent, otherwise update every field that differs from the live resource.

rpk ai oauth-client create

Register an OAuth client with the AI gateway. The generated client secret is printed once and cannot be retrieved afterward.

rpk ai oauth-client dcr

Manage Dynamic Client Registration (DCR) settings for the AI gateway. DCR allows OAuth clients to register themselves programmatically at a public endpoint.

rpk ai oauth-client delete

Delete an OAuth client.

rpk ai oauth-client diff

Dry-run of apply for OAuth clients. Prints, per manifest, whether apply would create, update (and which fields), or leave the resource unchanged.

rpk ai oauth-client get

Get an OAuth client.

rpk ai oauth-client list

List OAuth clients.

rpk ai oauth-client revoke-tokens

Revoke every refresh token the AI gateway has issued for the named OAuth client. Forces all users who connected this client to sign in again.

rpk ai oauth-client update

Update an OAuth client.

Global flags

Value Type Description

--config

string

Redpanda or rpk config file; default search paths are ~/.config/rpk/rpk.yaml, $PWD/redpanda.yaml, and /etc/redpanda/redpanda.yaml.

-X, --config-opt

stringArray

Override rpk configuration settings; -X help for detail or -X list for terser detail.

--ignore-profile

bool

Ignore rpk.yaml and redpanda.yaml; use default settings.

--profile

string

rpk profile to use.

-v, --verbose

bool

Enable verbose logging.