Fleet, Auth & Self-Hosting Commands

# Authenticate interactively with agent-harbor.com (or a configured hub profile)
ah login [--server <profile-or-url>]
 
# Revoke local session credentials
ah logout

# Mint a single-use enrolment token for a headless host
ah executors mint-token --name <hostname> [--labels key=val,...] [--ttl 15m]
 
# Enroll a host and install the systemd / launchd / Windows system service
sudo ah enroll install --token <token> [--server <url>]
 
# List, inspect, drain, or remove enlisted executors
ah executors list
ah executors status <name>
ah executors drain <name>
ah executors undrain <name>
ah executors remove <name>

# Start a self-hosted Agent Harbor Central Hub
ah server start --listen 0.0.0.0:8443 --domain harbor.example.com --data-dir /var/lib/agent-harbor
 
# Manage client connections to multiple hubs
ah servers add <profile-name> <https://hub.example.com>
ah servers list
ah servers use <profile-name>
ah servers remove <profile-name>

# Store a secret in the encrypted vault scoped to authorised destination domains
ah credentials set <NAME> --allow-domain <api.example.com>
ah credentials list
ah credentials delete <NAME>
 
# Run a full diagnostic check of sandboxing, CoW drivers, discovered agents, and hub connectivity
ah health