devices

agenticflow-enterprise devices

Manage device pairing requests and device-scoped tokens.

Commands

agenticflow-enterprise devices list

List pending pairing requests and paired devices.

agenticflow-enterprise devices list
agenticflow-enterprise devices list --json

agenticflow-enterprise devices approve <requestId>

Approve a pending device pairing request.

agenticflow-enterprise devices approve <requestId>

agenticflow-enterprise devices reject <requestId>

Reject a pending device pairing request.

agenticflow-enterprise devices reject <requestId>

agenticflow-enterprise devices rotate --device <id> --role <role> [--scope <scope...>]

Rotate a device token for a specific role (optionally updating scopes).

agenticflow-enterprise devices rotate --device <deviceId> --role operator --scope operator.read --scope operator.write

agenticflow-enterprise devices revoke --device <id> --role <role>

Revoke a device token for a specific role.

agenticflow-enterprise devices revoke --device <deviceId> --role node

Common options

• --url <url>: Gateway WebSocket URL (defaults to gateway.remote.url when configured).
• --token <token>: Gateway token (if required).
• --password <password>: Gateway password (password auth).
• --timeout <ms>: RPC timeout.
• --json: JSON output (recommended for scripting).

Notes

• Token rotation returns a new token (sensitive). Treat it like a secret.
• These commands require operator.pairing (or operator.admin) scope.