Passport CLI Reference

All Passport CLI commands are available under the shift-cli passport namespace. Commands accept either a nanoid(8) ID or a human-readable name wherever an identifier is required.

Global Flags

Flag	Description
--json	Output structured JSON (for agent consumption)
--quiet	Suppress stdout, exit codes only

Providers

List providers

shift-cli passport providers list

JSON output:

shift-cli passport providers list --json

[
  {
    "id": "p1q2r3s4",
    "name": "github",
    "type": "oauth2",
    "clientId": "Iv1.abc123def456",
    "scopes": ["repo", "user", "read:org"],
    "redirectUri": "https://app.example.com/auth/callback",
    "createdAt": "2026-03-05T12:00:00.000Z"
  }
]

Create a provider

shift-cli passport providers create

Interactive prompts will guide you through providing the provider name, type, client ID, scopes, and redirect URI.

Authorizations

Create an authorization

shift-cli passport authorizations create

Interactive prompts will ask for the provider, user ID, scopes, token, and expiration.

JSON output:

shift-cli passport authorizations create --json

{
  "id": "t5u6v7w8",
  "providerId": "p1q2r3s4",
  "userId": "user-abc",
  "scopes": ["repo", "user"],
  "token": "gho_xxxxxxxxxxxx",
  "expiresAt": "2026-06-05T12:00:00.000Z",
  "createdAt": "2026-03-05T12:00:00.000Z"
}

Audit

View audit trail

shift-cli passport audit

Displays all authorization-related actions in chronological order.

JSON output:

shift-cli passport audit --json

[
  {
    "id": "a1b2c3d4",
    "action": "authorization.created",
    "providerId": "p1q2r3s4",
    "userId": "user-abc",
    "timestamp": "2026-03-05T12:00:00.000Z"
  }
]