Skip to content
Kindgi

kindgi tokens

API keys for you, a person or a service account: create (its secret shown once), list, get, revoke.

kindgi tokens create

Section titled “kindgi tokens create”

Create an API key, for you or (a tenant admin) for someone else. Its secret is printed once, here: store it now, nothing shows it again. A member key takes no admin action on the tenant; a key limited to a project acts only there.

Terminal window
kindgi tokens create [--for=user:<id>|sa:<id>] [--role=member|admin] [--project=<project-id>] [--expires=30d|<iso-date>] [--label=<text>] [--capability=<cap>]…

Flags:

  • --capability <value>: A capability it carries (repeatable); you must hold it. (repeatable)
  • --expires <value>: When it stops working: 30d, 12h, 90m from now, or an ISO date.
  • --for <value>: Whom it acts for: user:<id> or sa:<service-account-id> (default: you).
  • --label <value>: What the key is for, e.g. ci.
  • --project <value>: Limit the key to this project.
  • --role <value>: member (the default) or admin (needs a tenant admin, for one).

kindgi tokens list

Section titled “kindgi tokens list”

List API keys, newest first, revoked ones included; never secrets. A tenant admin sees every key (--for narrows to one principal); anyone else, their own.

Terminal window
kindgi tokens list [--for=user:<id>|sa:<id>] [--limit=<n>] [--cursor=<c>] [--table]

Flags:

  • --cursor <value>: Resume after this cursor, from the previous page's nextCursor.
  • --for <value>: Only this principal's keys (tenant admins).
  • --limit <value>: The most keys to return.

kindgi tokens get

Section titled “kindgi tokens get”

One API key, by id. No secret.

Terminal window
kindgi tokens get <token-id>

kindgi tokens revoke

Section titled “kindgi tokens revoke”

Revoke an API key: from its next request on, it is refused.

Terminal window
kindgi tokens revoke <token-id>

Every command also takes the global flags.