CLICommand referencetoken
token
Commands, arguments, and options for openship token.
See the workflow guide for examples. Global flags such as --json go before the command; see global options.
openship token
Manage personal access tokens
openship token [options] [command]| Subcommand | Purpose |
|---|---|
list | List your personal access tokens |
create [options] <name> | Mint a new personal access token (the secret is shown once) |
revoke <id> | Revoke one of your tokens |
mcp | Inspect and revoke MCP clients authorized by your account |
openship token create
Mint a new personal access token (the secret is shown once)
openship token create [options] <name>| Argument | Meaning |
|---|---|
name | Human-readable token name |
| Option | Meaning |
|---|---|
--read-only | Reject mutation methods (POST/PUT/PATCH/DELETE) (default: false) |
--expires <days> | Expire after N days (1–365); omit for non-expiring |
--grant <type:id:perms> | Scope the token to a resource (repeatable), e.g. project:abc123:read,write (default: []) |
--full-access | Mint an UNSCOPED token with your own full access (required when no --grant is given) (default: false) |
openship token list
List your personal access tokens
openship token list [options]openship token mcp
Inspect and revoke MCP clients authorized by your account
openship token mcp [options] [command]| Subcommand | Purpose |
|---|---|
list | List authorized MCP clients and their resource scopes |
get <id> | Inspect this client's permissions |
authorize [options] [file] | Authorize an MCP client with explicit resource grants or full access |
disconnect [options] <id> | Revoke an MCP client's authorization |
openship token mcp authorize
Authorize an MCP client with explicit resource grants or full access
openship token mcp authorize [options] [file]| Argument | Meaning |
|---|---|
file | JSON input file, or - for stdin |
| Option | Meaning |
|---|---|
--schema | Print the accepted JSON schema without making a request |
-y, --yes | Confirm this operation |
openship token mcp disconnect
Revoke an MCP client's authorization
openship token mcp disconnect [options] <id>| Argument | Meaning |
|---|---|
id | MCP client ID |
| Option | Meaning |
|---|---|
-y, --yes | Confirm revocation |
openship token mcp get
Inspect this client's permissions
openship token mcp get [options] <id>| Argument | Meaning |
|---|---|
id | MCP client ID |
openship token mcp list
List authorized MCP clients and their resource scopes
openship token mcp list [options]openship token revoke
Revoke one of your tokens
openship token revoke [options] <id>| Argument | Meaning |
|---|---|
id | Token ID |