Tools

CLI tools available under orca tools. This list is auto-discovered from the command tree.

Commands

agent-log agentsim argosync backfill compliance-report drdep extract impact-review keycloak mock-compliant-release model nodeshell secret vllm-bench

keycloak

Manage Keycloak resources

Manage Keycloak resources via the admin REST API.

Authentication is performed against the master realm using the orca-cli client
via an OAuth 2.0 PKCE flow. A local HTTP server receives the authorization
redirect (port 8000, or 18000 as fallback) and your default browser is opened
to the Keycloak login page. If no local port can be bound (e.g. SSH, CI), the
device code grant flow is used as a fallback.

Subcommands

clients Manage Keycloak clients

List, audit, and delete Keycloak clients across realms via the admin API.

All subcommands operate on the Keycloak server specified by --server-url.
Authentication uses the same PKCE flow as the rest of the keycloak tool.

realm-attributes Manage Keycloak realm attributes

Get and set per-realm attributes via the Keycloak admin API.

Realm attributes are arbitrary key/value pairs stored on a realm (for example
migration markers). Values are stored as strings and are often JSON-encoded.

users Manage Keycloak users

Look up, find, and update Keycloak users across realms via the admin API.

All subcommands operate on the Keycloak server specified by --server-url.
Authentication uses the same PKCE flow as the rest of the keycloak tool.