---
title: argusctl tokens
description: Manage Argus Ops Personal Access Tokens.
---

# argusctl tokens



{/* AUTO-GENERATED by scripts/generate-cli-reference.mjs from `argusctl introspect --json`.
    Do not edit by hand. Regenerate with: pnpm generate:cli */}

> Generated from argusctl v0.1.0 on 2026-06-09. Run `argusctl introspect --json` for the machine-readable tree.

## `argusctl tokens`

Manage Argus Ops Personal Access Tokens.

```bash
argusctl tokens <subcommand>
```

### `argusctl tokens list`

List your tokens. Pass --all to list all operators (admin only).

```bash
argusctl tokens list [options]
```

| Option            | Description                       |
| ----------------- | --------------------------------- |
| `--all`           | list every operator's tokens      |
| `--api <url>`     | API base URL                      |
| `--token <pat>`   | PAT to use                        |
| `--json`          | JSON output                       |
| `--fields <list>` | comma-separated fields to include |

### `argusctl tokens create`

Mint a new PAT. The plaintext is shown ONCE.

```bash
argusctl tokens create [options]
```

| Option                     | Description                                                             |
| -------------------------- | ----------------------------------------------------------------------- |
| `-n, --name <name>`        | human label, e.g. "ayan-laptop"                                         |
| `-s, --scopes <list>`      | comma-separated scopes (overrides --preset)                             |
| `-p, --preset <name>`      | preset: support-readonly \| support-write \| admin-full \| nexus-bridge |
| `-e, --expires <duration>` | e.g. 30d, 4w, 6m (max 12m)                                              |
| `--save`                   | write the new token to \~/.config/argus/token (chmod 600)               |
| `--api <url>`              | API base URL                                                            |
| `--token <pat>`            | PAT to authenticate the create call (admin)                             |
| `--json`                   | JSON output                                                             |

### `argusctl tokens revoke`

Revoke a token. Idempotent.

```bash
argusctl tokens revoke <token_id> [options]
```

| Argument   | Required |
| ---------- | -------- |
| `token_id` | yes      |

| Option                | Description                  |
| --------------------- | ---------------------------- |
| `-r, --reason <text>` | reason recorded on the token |
| `--api <url>`         | API base URL                 |
| `--token <pat>`       | PAT to use                   |
| `--json`              | JSON output                  |

### `argusctl tokens path`

Print the path argusctl reads its token from.

```bash
argusctl tokens path
```

## Examples

```bash
argusctl tokens list
argusctl tokens create --name "ayan-laptop" --preset admin-full --expires 90d --save
argusctl tokens revoke <token_id> --reason "rotating"
```


---

For a semantic overview of all documentation, see [/sitemap.md](/sitemap.md)

For an index of all available documentation, see [/llms.txt](/llms.txt)

For agent-facing discovery, including API and MCP surfaces, see [/agents.md](/agents.md)