CLI reference / credentials / token / remove

stado credentials token remove

Invocation

stado credentials token remove [OPTIONS] --host <HOST> --token-file <TOKEN_FILE> <CONSUMER>

Purpose

Take a bearer file off a host once the vault owner records no grant for its consumer, and take its record out of the registry (`targets[].bearers`). Refused while the grant stands, while the registry records the file as another consumer's, and while the host's configuration reads a bearer from it

Required inputs and options

Input or optionContract
<CONSUMER>Positional input; required or optional as shown in the invocation.
--host <HOST>Command option; required or optional as shown in the invocation.
--token-file <TOKEN_FILE>The bearer file on HOST, in the forms `sync --token-file` takes
--jsonCommand option; required or optional as shown in the invocation.

Output and state effect

It performs the operation described above and emits its operator result on standard output or standard error. Any state change is limited to the resources and records named by the purpose and options on this page.

Refusals

  • Before dispatch, Stado refuses a missing required token shown in the invocation, an unknown option, or a value outside a listed value set; argument-usage failures exit with code 2.