Build, manage and test your Auth0 integrations from the command line.

Highlights

• 🧪 Test your universal login flow: Emulate your end users' login experience by running auth0 test login.
• 🔍 Troubleshoot in real-time: Inspect the events of your Auth0 integration as they happen with the auth0 logs tail command.
• 🔁 Simplify repetitive tasks: Create, update, list and delete your Auth0 resources directly from the terminal.

Table of Contents

• Installation
• Authenticating to Your Tenant
• Available Commands
• Customization
• Agent Integration
• Usage Analytics

Installation

Linux and macOS

Install via Homebrew:

brew install auth0

[!NOTE] The CLI is now available in the official Homebrew core, so a custom tap is no longer needed. If you previously installed via the auth0/auth0-cli tap, migrate with:

brew uninstall auth0 && brew untap auth0/auth0-cli
brew install auth0

Install via cURL:

1. Download the binary. It will be placed in ./auth0:

curl -sSfL https://raw.githubusercontent.com/auth0/auth0-cli/main/install.sh | sh -s -- -b .

2. Optionally, if you want to be able to run the binary from any directory, make sure you move it to a place in your $PATH:

sudo mv ./auth0 /usr/local/bin

[!TIP] On macOS, depending on the state of your current development environment you may have to first create the directory with sudo mkdir -p /usr/local/bin in order for the above command to work. Alternatively, you can move it to a directory of your choice and then add that directory to your $PATH instead.

Windows

Install via Scoop:

scoop install auth0

[!NOTE] The CLI is now available in the official Scoop main bucket (enabled by default), so a custom bucket is no longer needed. If you previously installed from the auth0/scoop-auth0-cli bucket, migrate with:

scoop uninstall auth0 && scoop bucket rm auth0
scoop install auth0

Install via Powershell:

1. Fetch latest release information with the following commands:

$latestRelease = Invoke-RestMethod -Uri "https://api.github.com/repos/auth0/auth0-cli/releases/latest"
$latestVersion = $latestRelease.tag_name
$version = $latestVersion -replace "^v"

2. Download the binary to the current folder:

Invoke-WebRequest -Uri "https://github.com/auth0/auth0-cli/releases/download/${latestVersion}/auth0-cli_${version}_Windows_x86_64.zip" -OutFile ".\auth0.zip"
Expand-Archive ".\auth0.zip" .\

3. To be able to run the binary from any directory, make sure you add it to your $PATH. This can be done through Powershell by entering the following command:

[System.Environment]::SetEnvironmentVariable('PATH', $Env:PATH + ";${pwd}")

Alternatively, follow the instructions in the Manual section below. Learn more about environment variables in Powershell

Go

Install via Go:

# Make sure your $GOPATH/bin is exported on your $PATH
# to be able to run the binary from any directory.
go install github.com/auth0/auth0-cli/cmd/auth0@latest

Manual

1. Download the appropriate binary for your environment from the latest release

2. Extract the archive

   • macOS: $ tar -xf auth0-cli_{version}_Darwin_{architecture}.tar.gz
   • Linux: $ tar -xf auth0-cli_{version}_Linux_{architecture}.tar.gz
   • Windows: Extract auth0-cli_{version}_Windows_{architecture}.zip using your preferred method for working with compressed files.

3. Make sure that the PATH and HOME environment variables include the folder where the binary was extracted.

   • macOS/Linux:

     1. Open your shell configuration file (for example, ~/.bashrc for bash, ~/.zshrc for zsh) and ensure the following variables PATH and HOME are set correctly:

     export PATH=$PATH:/path/to/extracted/auth0/cli/folder
     export HOME=/path/to/home/directory
     

     2. After editing the file, run source ~/.bashrc or source ~/.zshrc (depending on your shell) to apply the changes.

   • Windows:

     1. Open the Start Menu, search for "Environment Variables", and select "Edit the system environment variables".
     2. In the System Properties window, click on the "Environment Variables" button.
     3. Under "User variables", select Path and click "Edit". Add the path to the directory where you extracted the auth0.exe file.
     4. Click 'OK' to close the Edit environment variable dialog and return to the Environment Variables dialog.
     5. Click "New" to add a new HOME variable, and set it to your home directory path.
     6. Click "OK" to apply the changes.
     7. Close any existing Powershell or Command Prompt windows, and re-open your terminal in order to load the new environment variables you've just finished creating.

4. Run auth0

[!TIP] Autocompletion instructions for supported platforms available by running auth0 completion -h

Installing the Beta

brew tap auth0/auth0-cli && brew install auth0-beta

curl -sSfL https://raw.githubusercontent.com/auth0/auth0-cli/beta/install.sh | sh -s -- -b .

sudo mv ./auth0 /usr/local/bin

scoop bucket add auth0 https://github.com/auth0/scoop-auth0-cli.git
scoop install auth0-beta

$latestRelease = (Invoke-RestMethod -Uri "https://api.github.com/repos/auth0/auth0-cli/releases") | Where-Object { $_.prerelease -eq $true } | Select-Object -First 1
$latestVersion = $latestRelease.tag_name
$version = $latestVersion -replace "^v"

Invoke-WebRequest -Uri "https://github.com/auth0/auth0-cli/releases/download/${latestVersion}/auth0-cli_${version}_Windows_x86_64.zip" -OutFile ".\auth0.zip"
Expand-Archive ".\auth0.zip" .\

# Make sure your $GOPATH/bin is exported on your $PATH
# to be able to run the binary from any directory.

# Latest beta code (tip of the beta branch):
go install github.com/auth0/auth0-cli/cmd/auth0@beta

# Or a specific published beta release (reproducible):
# See https://github.com/auth0/auth0-cli/releases for available tags.
go install github.com/auth0/auth0-cli/cmd/auth0@v1.33.0-beta.0

Authenticating to Your Tenant

Authenticating to your Auth0 tenant is required for most functions of the CLI. It can be initiated by running:

auth0 login

There are two ways to authenticate:

• As a user - Recommended when invoking on a personal machine or other interactive environment. Facilitated by device authorization flow and cannot be used for private cloud tenants.
• As a machine - Recommended when running on a server or non-interactive environments (ex: CI, authenticating to a private cloud). Facilitated by client credentials flow. Flags available for bypassing interactive shell.

Warning Authenticating as a user is not supported for private cloud tenants. Instead, those users should authenticate with client credentials. Refer command below:

auth0 login --domain <domain> --client-id <client-id> --client-secret <client-secret>
auth0 login --domain <domain> --client-id <client-id> --client-assertion-private-key <path-to-private-key / private-key> --client-assertion-signing-alg <signing-algorithm>

Re-authentication

When your access token expires, the CLI will prompt you to confirm whether to continue with your default tenant or select a different one:

Continue login with default tenant 'your-tenant.auth0.com'? [y/N]

Select y to proceed with your default tenant, or N to choose a different tenant.

Note: Using the CLI will consume Management API rate limits according to the subscription plan. Ref Rate limit Policy

Available Commands

• auth0 actions - Manage resources for actions
• auth0 api - Makes an authenticated HTTP request to the Auth0 Management API
• auth0 apis - Manage resources for APIs
• auth0 apps - Manage resources for applications
• auth0 client-grants - Manage client grants
• auth0 completion - Setup autocomplete features for this CLI on your terminal
• auth0 domains - Manage custom domains
• auth0 email - Manage email settings
• auth0 flows - Manage Flows
• auth0 forms - Manage Forms
• auth0 login - Authenticate the Auth0 CLI
• auth0 logout - Log out of a tenant's session
• auth0 logs - View tenant logs
• auth0 orgs - Manage resources for organizations
• auth0 protection - Manage resources for attack protection
• auth0 quickstarts - Quickstart support for getting bootstrapped
• auth0 refresh-tokens - Manage resources for refresh tokens
• auth0 roles - Manage resources for roles
• auth0 rules - Manage resources for rules
• auth0 sessions - Manage resources for sessions
• auth0 tenants - Manage configured tenants
• auth0 test - Try your Universal Login box or get a token
• auth0 terraform generate - Generate terraform configuration for your Auth0 Tenant
• auth0 universal-login - Manage the Universal Login experience
• auth0 users - Manage resources for users

Customization

The default text editor is vim on Linux/macOS and notepad on Windows. To change that for editing templates, rules, and actions, set the environment variable EDITOR to your preferred editor. If choosing a non-terminal editor, ensure that the command starts the editor and waits for the files to be closed before returning.

Examples:

Linux / macOS

# Uses vscode with the --wait flag.
export EDITOR="code --wait"

# Uses sublime text with the --wait flag.
export EDITOR="subl --wait"

# Uses nano, a terminal based editor.
export EDITOR="nano"

# Uses vim, a terminal based editor.
export EDITOR="vim"

Windows

# PowerShell (current session):
$env:EDITOR = "code --wait"
$env:EDITOR = 'subl --wait'
$env:EDITOR = 'notepad'
$env:EDITOR = '"C:\Path To\executable++.exe" --wait'
# PowerShell (persistent, across sessions):
[System.Environment]::SetEnvironmentVariable("EDITOR", "code --wait", "User")

REM Command Prompt (current session):
set EDITOR=code --wait
set EDITOR=subl --wait
set EDITOR=notepad
set EDITOR="C:\Path To\executable++.exe" --wait
REM Command Prompt (persistent, across sessions):
setx EDITOR "code --wait"

Agent Integration

CLI guidance for AI agents (Claude Code, Cursor, OpenClaw, etc.) ships as part of the AgentSkills-compatible auth0 skill in the Auth0 Agent Skills repository. The auth0 skill routes across all Auth0 SDKs, features, and tooling — including this CLI.

Install via Auth0 Agent Skills (Recommended)

Claude Code (official plugins marketplace):

/plugin install auth0@claude-plugins-official

From the terminal (no session needed):

claude plugin install auth0@claude-plugins-official

Any agent (Skills CLI):

The Skills CLI works with Claude Code, Cursor, Copilot, Codex, and 40+ other agents:

npx skills add auth0/agent-skills

Target specific agents with --agent:

npx skills add auth0/agent-skills --agent claude-code cursor

Manual installation (Claude Code, OpenClaw):

git clone https://github.com/auth0/agent-skills.git

# Claude Code
cp -r agent-skills/plugins/auth0/skills/auth0 ~/.claude/skills/

# OpenClaw
cp -r agent-skills/plugins/auth0/skills/auth0 ~/.openclaw/skills/

Note: The auth0 binary must be installed and available on your $PATH for agents to use the CLI guidance in this skill.

Agent Mode

For AI agents and automation, agent mode makes output machine-friendly: structured JSON, no interactive prompts, and no color codes.

• Env var: AUTH0_AGENT_MODE=true
• Flag: --agent-mode
• Auto-enabled when a known agent (Claude Code, Cursor, Codex, Gemini, etc.) is detected.

Precedence: --agent-mode flag > AUTH0_AGENT_MODE env var > auto-detection (set --agent-mode=false to opt out). Destructive commands still require --force; without it (and with prompts disabled) they fail with an error rather than proceeding.

Usage Analytics Disclosure

Usage data points are collected during use of this CLI. This includes the CLI version, operating system, timestamp, the command executed, whether it was run by a human, a CI system, or an AI agent, and — when you're authenticated — the domain of the tenant you're operating against. Tenant domain can identify your Auth0 account and is not anonymized.

Auth0 uses this data to understand how the tool is used, to prioritize the features, enhancements and fixes that matter most to our users, and to attribute usage to a tenant for support and product purposes.

To opt-out of this collection, set the AUTH0_CLI_ANALYTICS environment variable to false.

Feedback

Contributing

We appreciate feedback and contribution to this repo! Before you get started, please see the following:

• Auth0's general contribution guidelines
• Auth0's code of conduct guidelines
• This repo's contribution guide

Raise an issue

To provide feedback or report a bug, please raise an issue on our issue tracker.

Vulnerability Reporting

Please do not report security vulnerabilities on the public GitHub issue tracker. The Responsible Disclosure Program details the procedure for disclosing security issues.

Auth0 is an easy to implement, adaptable authentication and authorization platform. To learn more checkout Why Auth0?

This project is licensed under the MIT license. See the LICENSE file for more info.