CLI reference / credentials / token

stado credentials token

Invocation

stado credentials token <COMMAND>

Purpose

Credential token operations on the host that owns the vault

Required inputs and options

This command has no command-specific inputs or options.

Output and state effect

This command group selects one of the subcommands listed below; use its exact child invocation to perform an operation.

Refusals

• Before dispatch, Stado refuses a missing required token shown in the invocation, an unknown option, or a value outside a listed value set; argument-usage failures exit with code 2.

Subcommands

• mint — Mint a Skarbiec bearer, or register an existing vault field
• sync — Deliver an existing bearer between matching declared vault copies, without changing grants
• register — Vault-owner primitive used by `mint --token-item`: register ITEM#FIELD with `skarbiec grant issue` and keep it at STADO_TOKEN_DESTINATION
• custody — Host primitive used by `sync`: export, install or check one bearer against the declared consumer grant, reading an export on stdin