OIDC-KEYCHAIN(1)
π OIDC-KEYCHAIN π
okay so bestie, welcome to oidc-keychain (section 1, User Commands, we're fancy like that) β the little script whose whole entire job is letting you re-use oidc-agent across logins. no cap. she's the friend who holds your stuff while you're gone and hands it back exactly how you left it. π«Ά
β¨ SYNOPSIS β¨
oidc-keychain [-?|--help|--usage|-V|--version] [-k|--kill]
oidc-keychain [oidc-agent options] [--accounts ACCOUNT ...]
πΈ DESCRIPTION πΈ
oidc-keychain β Re-use oidc-agent between logins</p>. that's the whole vibe. iconic behaviour, honestly.
anything you pass that's an oidc-agent option gets handed straight over to oidc-agent when she starts up. so you're basically the messenger, and the message is options. π
π«Ά General
-k,--killβ killsoidc-agentif she's currently running. like closing the group chat. bye bestie π--accountsACCOUNT ... β loads the *ACCOUNT*s, but only if they're not already loaded. she's not doing extra work for no reason.
π Help
-?,--helpβ gives you this help list. the whole thing. every crumb. π--usageβ gives you a short usage message. the tl;dr version, for when you're in a rush.-V,--versionβ prints the program version. show some respect for her age. π
π¦ FILES π¦
~/.config/oidc-agent/.keychainor~/.oidc-agent/.keychainβ this is whereoidc-keychainstores the configuration of a runningoidc-agent. one of these two files, whichever she's feeling. it's giving β¨*where did I put my keys*β¨ energy, except she actually knows where they are.
π EXAMPLES π
lowkey the best part. here's how you actually use her:
oidc-keychain
starts oidc-agent if she's not already started, and then prints out the commands you need for setting the required environment variables. note: it prints them β you still gotta do something with them, bestie.
eval `oidc-keychain --accounts myaccount`
starts oidc-agent if she's not already started, loads the myaccount account if it's not already loaded, and sets the required environment variables β only for this shell. just this one. don't get any ideas. π
eval `oidc-keychain -k`
kills a running oidc-agent and unsets the environment variables from this shell. the reverse uno card. β¨
π SEE ALSO π
oidc-agent(1)β her other half. go read it.
Low-traffic mailing list with updates such as critical security incidents and new releases:
https://www.lists.kit.edu/sympa/subscribe/oidc-agent-user
Full documentation can be found at:
https://indigo-dc.github.io/oidc-agent/usage/oidc-keychain/
fr fr go subscribe to the mailing list, it's low-traffic and it tells you about critical security stuff. that's not a vibe, that's a necessity. π₯
okay that's the whole page bestie, you ate that π
this was OIDC-KEYCHAIN(1) from September 2026 β and yes, the original footer also had this little gremlin artifact just vibing in it, so I'm preserving the evidence verbatim: oidc-keychain: line 53: oidc-... π truly the main character of typos. stay hydrated, set your env vars, and unset them when you're done. mwah π«Άπβ¨
π¦ where this page comes from
- epel 10: oidc-agent-cli 5.3.8-1.el10_3 Β· MIT AND ISC AND LGPL-2.1-or-later AND BSD-2-Clause
- fedora 43: oidc-agent-cli 5.3.8-1.fc43 Β· MIT AND ISC AND LGPL-2.1-or-later AND BSD-2-Clause
- fedora 44: oidc-agent-cli 5.3.8-1.fc44 Β· MIT AND ISC AND LGPL-2.1-or-later AND BSD-2-Clause
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms