rpk ai oauth-client

Manage OAuth clients registered with the AI gateway’s in-dataplane OAuth Authorization Server.

An OAuthClient is the external tool (Claude.ai, ChatGPT, Cursor, …) that requests access tokens for an MCP. Create one per tool you want to allow in; the client_secret is returned exactly once on create and cannot be retrieved afterward. Rotate via delete + re-create until Phase 2 lands a dedicated rotation RPC.

Aliases: oauth-clients, oc.

Usage

rpk ai oauth-client [command]

Aliases

oauth-client, oauth-clients, oc

Flags

Value Type Description

Value	Type	Description
`-h, --help`	-	help for oauth-client.
`-o, --format`	string	output format: table\|wide\|json\|yaml\|markdown (env: RPAI_FORMAT) (default "table").
`--no-color`	-	disable colored output (env: NO_COLOR).
`-c, --rpai-config`	string	path to rpai config (env: RPAI_CONFIG) (default "/var/lib/redpanda/.rpai/config").
`-s, --rpai-endpoint`	string	override the selected environment’s AI Gateway URL for this invocation.
`-p, --rpai-profile`	string	rpai profile name (env: RPAI_PROFILE).
`-v, --rpai-verbose`	-	verbose debug logging to stderr (env: RPAI_VERBOSE).
`--token`	string	static bearer token override (ambient RPAI_TOKEN is ignored under rpk ai) Use "rpk ai oauth-client [command] --help" for more information about a command.

-h, --help

help for oauth-client.

-o, --format

string

output format: table|wide|json|yaml|markdown (env: RPAI_FORMAT) (default "table").

--no-color

disable colored output (env: NO_COLOR).

-c, --rpai-config

string

path to rpai config (env: RPAI_CONFIG) (default "/var/lib/redpanda/.rpai/config").

-s, --rpai-endpoint

string

override the selected environment’s AI Gateway URL for this invocation.

-p, --rpai-profile

string

rpai profile name (env: RPAI_PROFILE).

-v, --rpai-verbose

verbose debug logging to stderr (env: RPAI_VERBOSE).

--token

string

static bearer token override (ambient RPAI_TOKEN is ignored under rpk ai) Use "rpk ai oauth-client [command] --help" for more information about a command.