Skip to content

Kurahi devices

Manage device pairing requests and device-scoped tokens.

List pending pairing requests and paired devices.

kurahi devices list
kurahi devices list --json

Approve a pending device pairing request.

kurahi devices approve <requestId>

Reject a pending device pairing request.

kurahi devices reject <requestId>

kurahi devices rotate --device <id> --role <role> [--scope <scope...>]

Section titled “kurahi devices rotate --device <id> --role <role> [--scope <scope...>]”

Rotate a device token for a specific role (optionally updating scopes).

kurahi devices rotate --device <deviceId> --role operator --scope operator.read --scope operator.write

kurahi devices revoke --device <id> --role <role>

Section titled “kurahi devices revoke --device <id> --role <role>”

Revoke a device token for a specific role.

kurahi devices revoke --device <deviceId> --role node
  • --url <url>: Gateway WebSocket URL (defaults to gateway.remote.url when configured).
  • --token <token>: Gateway token (if required).
  • --password <password>: Gateway password (password auth).
  • --timeout <ms>: RPC timeout.
  • --json: JSON output (recommended for scripting).
  • Token rotation returns a new token (sensitive). Treat it like a secret.
  • These commands require operator.pairing (or operator.admin) scope.