Agentic Data Plane

rpk ai oauth-client cimd update

Replace complete CIMD settings (omitted fields reset).

This command was introduced in ai version 0.2.94.

Usage

rpk ai oauth-client cimd update [flags]

Flags

Value Type Description

--cimd-settings.enabled

bool

Accept https URL client IDs that resolve to a hosted client metadata document (CIMD). When off, the discovery document does not advertise support. (true when set; pass --cimd-settings.enabled=false to disable).

--cimd-settings.trust-policy

string

Which domains may host a client metadata document. Any domain is the spec-default posture; restricting to an allowlist keeps CIMD’s zero-setup flow for known vendors only. (one of: all-domains, allowed-domains).

--cimd-settings.allowed-domains

strings

Domains allowed to host a client metadata document. A parent domain also admits its subdomains. (repeatable; replaces the full list on update).

--cimd-settings.allowed-resources

strings

Resources every CIMD-resolved client is permitted to request tokens for. Use "*" for any MCP on this gateway. (repeatable; replaces the full list on update).

-f, --filename

string

request as YAML or JSON, or - for stdin; flags override file values.

--dry-run

bool

print the request that would be sent (with the computed update mask) and exit without calling the server.

Global flags

Value Type Description

--config

string

Redpanda or rpk config file; default search paths are ~/.config/rpk/rpk.yaml, $PWD/redpanda.yaml, and /etc/redpanda/redpanda.yaml.

-X, --config-opt

stringArray

Override rpk configuration settings; -X help for detail or -X list for terser detail.

--ignore-profile

bool

Ignore rpk.yaml and redpanda.yaml; use default settings.

--profile

string

rpk profile to use.

-v, --verbose

bool

Enable verbose logging.