wayglass keys
Mint, list and revoke per-agent keys (admin key only).
An agent key is bound to one name: everything done with it is recorded under that name, whatever X-Wayglass-Agent or WAYGLASS_AGENT say, so an agent cannot act or approve as someone else. The Worker stores only a hash. Only the admin key can manage keys; the admin key keeps working.
wayglass keys <command> [flags]Subcommands
Section titled “Subcommands”wayglass keys create: Mint a key bound to an agent name; the key is shown oncewayglass keys list: List agent keys (never the keys themselves)wayglass keys revoke: Revoke an agent key; it stops working on its next request
Global flags
Section titled “Global flags”| Flag | Default | Description |
|---|---|---|
--json |
print a JSON envelope for agents (no colour, prompts or spinners) |
See also
Section titled “See also”wayglass: Zero Trust for code changes