authentik-cli

A lightweight command-line interface (CLI) tool written in Go to interact with the Authentik identity provider in a way that allows multi-tenancy and automation.

---

✨ Features

• Creates a tenant abstraction with RBAC controls over resources
• Manage users, groups, and applications
• Create, list, update, and delete Authentik resources
• Designed for scripting & automation (JSON/YAML output)

---

🔧 Configuration

authentik-cli reads its target instance and credentials from a config file.

Generate config

authentik-cli config

Config File example (~/.authentik-cli)

url: https://authentik.example.com
token: your_api_token

---

🛠 Usage

Uses the syntax CMD [VERB] [NOUN] similar to tools like kubectl.

Help

authentik-cli --help

Basic Commands

authentik-cli create tenant example-tenant

authentik-cli create user example-user \
  --name John \
  --surname Doe \
  --email john.doe@example.com \
  --tenant-admin example-tenant

authentik-cli create app example-app \                                     
  --provider-type=oidc \ 
  --oidc-client-type=confidential \
  --oidc-redirect-uri-strict=http://localhost:8000 \
  --oidc-redirect-uri-regex='http://*.local:9000'

---

📚 Command Overview

Command	Subcommands	Description
config		Set config
create	tenant, user, group, app	Create resources
get	tenant, user, group, app	Get details for resources
delete	tenant, user, group, app	Delete resources

Run authentik-cli [command] --help to see all flags and options.

---

🔄 Output Formats

All resource-fetching commands support output in multiple formats:

authentik-cli get user example --output json
authentik-cli get app example-app --output yaml

Supported formats: json(default), yaml

---

👷 Development

See DEVELOPMENT.md

---

📝 License

Licensed under the Apache-2.0 license.

---

📫 Support

• Issues: GitHub Issues
• Authentik Docs: https://goauthentik.io/docs