---
title: argusctl agent
description: Remote-support agents: list, telemetry, fleet, revoke.
---

# argusctl agent



{/* AUTO-GENERATED by scripts/generate-cli-reference.mjs from `argusctl introspect --json`.
    Do not edit by hand. Regenerate with: pnpm generate:cli */}

> Generated from argusctl v0.1.0 on 2026-06-09. Run `argusctl introspect --json` for the machine-readable tree.

## `argusctl agent`

Remote-support agents: list, telemetry, fleet, revoke.

```bash
argusctl agent <subcommand>
```

### `argusctl agent ls`

List enrolled agents for a tenant (status, instance, last-seen, online).

```bash
argusctl agent ls [options]
```

| Option            | Description                       |
| ----------------- | --------------------------------- |
| `--tenant <id>`   | tenant id                         |
| `--api <url>`     | API base URL                      |
| `--token <pat>`   | PAT to use                        |
| `--json`          | JSON output                       |
| `--fields <list>` | comma-separated fields to include |

### `argusctl agent telemetry`

Latest agent telemetry (AGENT VERSION, host, network, cameras) for a tenant or one agent.

```bash
argusctl agent telemetry [options]
```

| Option            | Description                                       |
| ----------------- | ------------------------------------------------- |
| `--tenant <id>`   | tenant id                                         |
| `--agent <id>`    | single agent id (else every agent for the tenant) |
| `--api <url>`     | API base URL                                      |
| `--token <pat>`   | PAT to use                                        |
| `--json`          | JSON output                                       |
| `--fields <list>` | comma-separated fields to include                 |

### `argusctl agent fleet`

Cross-tenant fleet roll-up: every agent across all tenants, online/offline.

```bash
argusctl agent fleet [options]
```

| Option            | Description                       |
| ----------------- | --------------------------------- |
| `--api <url>`     | API base URL                      |
| `--token <pat>`   | PAT to use                        |
| `--json`          | JSON output                       |
| `--fields <list>` | comma-separated fields to include |

### `argusctl agent activate`

Open a consent-gated remote-support session to an enrolled agent. Returns a show-once session token. Operator 3-factor gate (ops token + allowlisted network).

```bash
argusctl agent activate <agent> [options]
```

| Argument | Required |
| -------- | -------- |
| `agent`  | yes      |

| Option              | Description                                          |
| ------------------- | ---------------------------------------------------- |
| `--tenant <id>`     | tenant id the agent belongs to                       |
| `--reason <text>`   | why (audited, >=10 chars)                            |
| `--duration <min>`  | session minutes (1-120)                              |
| `--ops-token <tok>` | X-Argus-Ops-Token (else $ARGUS\_OPS\_TOKEN)          |
| `--dry-run`         | print the planned call (redacted) without sending it |
| `--api <url>`       | API base URL                                         |
| `--token <pat>`     | PAT to use                                           |
| `--json`            | JSON output                                          |
| `--fields <list>`   | comma-separated fields to include                    |

### `argusctl agent view-camera`

Capture one camera frame from an online agent and save it to --out (never prints the image). Sugar over `command view_camera`; needs an active session token from `agent activate`.

```bash
argusctl agent view-camera <agent> [options]
```

| Argument | Required |
| -------- | -------- |
| `agent`  | yes      |

| Option              | Description                                          |
| ------------------- | ---------------------------------------------------- |
| `--tenant <id>`     | tenant id the agent belongs to                       |
| `--session <token>` | session token from `agent activate`                  |
| `--camera <id>`     | camera id                                            |
| `--out <path>`      | file path to write the JPEG to                       |
| `--ops-token <tok>` | X-Argus-Ops-Token (else $ARGUS\_OPS\_TOKEN)          |
| `--dry-run`         | print the planned call (redacted) without sending it |
| `--api <url>`       | API base URL                                         |
| `--token <pat>`     | PAT to use                                           |
| `--json`            | JSON output                                          |

### `argusctl agent revoke`

DESTRUCTIVE: terminally revoke an agent (refuses its next dial + severs any live socket). Requires --yes. Operator-gated: needs --ops-token + an allowlisted network.

```bash
argusctl agent revoke <agent> [options]
```

| Argument | Required |
| -------- | -------- |
| `agent`  | yes      |

| Option              | Description                                          |
| ------------------- | ---------------------------------------------------- |
| `--tenant <id>`     | tenant id the agent belongs to                       |
| `--reason <text>`   | why (audited)                                        |
| `--ops-token <tok>` | X-Argus-Ops-Token (else $ARGUS\_OPS\_TOKEN)          |
| `--yes`             | confirm this destructive action (required)           |
| `--dry-run`         | print the planned call (redacted) without sending it |
| `--api <url>`       | API base URL                                         |
| `--token <pat>`     | PAT to use                                           |
| `--json`            | JSON output                                          |
| `--fields <list>`   | comma-separated fields to include                    |

## Examples

```bash
argusctl agent ls --tenant <tenant>
argusctl agent telemetry --tenant <tenant>
argusctl agent activate <agentId> --tenant <tenant> --reason "investigate alert"
argusctl agent view-camera <agentId> --tenant <tenant> --session <tok> --camera <camId> --out frame.jpg
argusctl agent revoke <agentId> --tenant <tenant> --reason "stale enrollment" --yes
```


---

For a semantic overview of all documentation, see [/sitemap.md](/sitemap.md)

For an index of all available documentation, see [/llms.txt](/llms.txt)

For agent-facing discovery, including API and MCP surfaces, see [/agents.md](/agents.md)