grafos account

Tenura-hosted account creation, verification, login, and admin (mint codes, list tenants).

grafos account

Tenura account onboarding: request + verify an access-code gated account

Usage: grafos account [OPTIONS] <COMMAND>

Commands:
  request  Request an account. Prompts for name/email interactively unless all of `--name`, `--email`, `--accept-store` are set
  verify   Consume the verification code emailed to you (or the link in the email). Stores the developer token + local signing key on success
  admin    Operator commands against the account API's admin surface. Requires `GRAFOS_ACCOUNT_ADMIN_BEARER` or `--admin-bearer`
  help     Print this message or the help of the given subcommand(s)

Options:
      --fabric <FABRIC>  Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
      --json             Output in JSON format for scripting
      --wide             Show additional columns in table output
      --no-color         Disable color output
      --pool <POOL>      Pool name (default: "default") [default: default]
  -h, --help             Print help
  -V, --version          Print version

grafos account request

Request an account. Prompts for name/email interactively unless all of `--name`, `--email`, `--accept-store` are set

Usage: grafos account request [OPTIONS]

Options:
      --fabric <FABRIC>
          Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
      --name <NAME>
          Display name. Prompted when absent and stdin is a TTY [env: GRAFOS_ACCOUNT_NAME=]
      --email <EMAIL>
          Email address. Prompted when absent and stdin is a TTY [env: GRAFOS_ACCOUNT_EMAIL=]
      --json
          Output in JSON format for scripting
      --turnstile-token <TURNSTILE_TOKEN>
          Turnstile token. The public-facing signup form produces this. For CLI testing with a staging account-api running under TEST_MODE, pass `test-ok` [env: GRAFOS_ACCOUNT_TURNSTILE_TOKEN=]
      --wide
          Show additional columns in table output
      --accept-store
          Accept storing credentials locally without the interactive prompt. Required for non-interactive invocations
      --no-color
          Disable color output
      --access-code <ACCESS_CODE>
          Account access code. When the Tenura account API has `ACCESS_CODE_REQUIRED=1`, every account request MUST carry a code. Format: `TNRA-xxxx-xxxx-xxxx-xxxx` [env: GRAFOS_ACCESS_CODE=]
      --pool <POOL>
          Pool name (default: "default") [default: default]
      --api-url <API_URL>
          Override the account API base URL. Defaults to `https://api.tenura.systems` [env: TENURA_API_URL=]
  -h, --help
          Print help
  -V, --version
          Print version

grafos account verify

Consume the verification code emailed to you (or the link in the email). Stores the developer token + local signing key on success

Usage: grafos account verify [OPTIONS]

Options:
      --code <CODE>            Verification code from the email. Mutually exclusive with --url
      --fabric <FABRIC>        Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
      --json                   Output in JSON format for scripting
      --url <URL>              Full verification URL from the email. The CLI parses the `code` query param. Mutually exclusive with --code
      --tenant-id <TENANT_ID>  Account tenant id the code belongs to. Optional — the server enforces the binding based on the code itself
      --wide                   Show additional columns in table output
      --api-url <API_URL>      Override the account API base URL. Defaults to `https://api.tenura.systems` [env: TENURA_API_URL=]
      --no-color               Disable color output
      --pool <POOL>            Pool name (default: "default") [default: default]
  -h, --help                   Print help
  -V, --version                Print version

grafos account admin

Operator commands against the account API's admin surface. Requires `GRAFOS_ACCOUNT_ADMIN_BEARER` or `--admin-bearer`

Usage: grafos account admin [OPTIONS] <COMMAND>

Commands:
  mint-access-codes  Mint one or more access codes. The plaintext codes are printed ONCE; the server only stores hashes
  list-access-codes  List all known access codes (hash, note, status)
  list-tenants       List all Tenura accounts with token counts and quota
  list-tokens        List all currently-live or currently-revoked account tokens
  help               Print this message or the help of the given subcommand(s)

Options:
      --fabric <FABRIC>  Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
      --json             Output in JSON format for scripting
      --wide             Show additional columns in table output
      --no-color         Disable color output
      --pool <POOL>      Pool name (default: "default") [default: default]
  -h, --help             Print help
  -V, --version          Print version

grafos account admin mint-access-codes

Mint one or more access codes. The plaintext codes are printed ONCE; the server only stores hashes

Usage: grafos account admin mint-access-codes [OPTIONS]

Options:
      --api-url <API_URL>
          Account API base URL. Defaults to `https://api.tenura.systems` [env: TENURA_API_URL=]
      --fabric <FABRIC>
          Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
      --admin-bearer <ADMIN_BEARER>
          Admin bearer. Prefer the env var `GRAFOS_ACCOUNT_ADMIN_BEARER` over passing this flag on the command line [env: GRAFOS_ACCOUNT_ADMIN_BEARER=]
      --json
          Emit the raw JSON body instead of a human-readable table
      --wide
          Show additional columns in table output
      --no-color
          Disable color output
      --note <NOTE>
          Free-form note stored alongside each access code (e.g. the batch name or the operator's initials). Defaults to "unattributed"
      --count <COUNT>
          How many codes to mint in this call. Capped server-side at 100 [default: 1]
      --pool <POOL>
          Pool name (default: "default") [default: default]
      --max-uses <MAX_USES>
          How many account requests this code can create [default: 1]
      --expires-in-secs <EXPIRES_IN_SECS>
          Expiry, in seconds from now. Unbounded if omitted
  -h, --help
          Print help
  -V, --version
          Print version

grafos account admin list-access-codes

List all known access codes (hash, note, status)

Usage: grafos account admin list-access-codes [OPTIONS]

Options:
      --api-url <API_URL>            Account API base URL. Defaults to `https://api.tenura.systems` [env: TENURA_API_URL=]
      --fabric <FABRIC>              Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
      --admin-bearer <ADMIN_BEARER>  Admin bearer. Prefer the env var `GRAFOS_ACCOUNT_ADMIN_BEARER` over passing this flag on the command line [env: GRAFOS_ACCOUNT_ADMIN_BEARER=]
      --json                         Emit the raw JSON body instead of a human-readable table
      --wide                         Show additional columns in table output
      --no-color                     Disable color output
      --pool <POOL>                  Pool name (default: "default") [default: default]
  -h, --help                         Print help
  -V, --version                      Print version

grafos account admin list-tenants

List all Tenura accounts with token counts and quota

Usage: grafos account admin list-tenants [OPTIONS]

Options:
      --api-url <API_URL>            Account API base URL. Defaults to `https://api.tenura.systems` [env: TENURA_API_URL=]
      --fabric <FABRIC>              Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
      --admin-bearer <ADMIN_BEARER>  Admin bearer. Prefer the env var `GRAFOS_ACCOUNT_ADMIN_BEARER` over passing this flag on the command line [env: GRAFOS_ACCOUNT_ADMIN_BEARER=]
      --json                         Emit the raw JSON body instead of a human-readable table
      --wide                         Show additional columns in table output
      --no-color                     Disable color output
      --pool <POOL>                  Pool name (default: "default") [default: default]
  -h, --help                         Print help
  -V, --version                      Print version

grafos account admin list-tokens

List all currently-live or currently-revoked account tokens

Usage: grafos account admin list-tokens [OPTIONS]

Options:
      --api-url <API_URL>            Account API base URL. Defaults to `https://api.tenura.systems` [env: TENURA_API_URL=]
      --fabric <FABRIC>              Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
      --admin-bearer <ADMIN_BEARER>  Admin bearer. Prefer the env var `GRAFOS_ACCOUNT_ADMIN_BEARER` over passing this flag on the command line [env: GRAFOS_ACCOUNT_ADMIN_BEARER=]
      --json                         Emit the raw JSON body instead of a human-readable table
      --wide                         Show additional columns in table output
      --no-color                     Disable color output
      --revoked                      Show revoked tokens instead of currently-live ones
      --pool <POOL>                  Pool name (default: "default") [default: default]
      --tenant-id <TENANT_ID>        Filter to a specific tenant_id
  -h, --help                         Print help
  -V, --version                      Print version