Install Commands
Commands for deploying agents into workspaces.
Commands
- sekuire install token - Create an install token
- sekuire install bundle - Generate Helm chart for BYOC
- sekuire install agent - Install agent into workspace
token
Create a workspace-scoped install token for an agent. Install tokens are one-time-use credentials that authorize an agent deployment to register with Sekuire.
sekuire install token [OPTIONS]
Options
| Option | Description |
|---|---|
--workspace <ID> | Workspace ID (defaults to saved config) |
--agent <ID> | Agent sekuire_id (required if not in agent directory) |
--backend <URL> | Backend URL (default: https://api.sekuire.ai) |
--ttl-minutes <MIN> | Optional token TTL in minutes (backend-dependent) |
Examples
With explicit workspace and agent
$ sekuire install token --workspace ws_abc123 --agent 7f8a9b3c...
Install token created
Workspace: ws_abc123
Agent ID: 7f8a9b3c...
Token: skt_u2ZQfOpyP01KcEDfdmu0yciIBU6SnLJV
Expires: 2026-01-28T16:46:11.714300605Z
Using saved workspace from login
$ sekuire install token --agent 7f8a9b3c...
Install token created
Workspace: ws_e1077488-be8b-4553-8217-f37be23afe87
Agent ID: 7f8a9b3c...
Token: skt_d4VleqHS7sKTi6-WwpXAptXKyC17w5OU
Expires: 2026-01-28T16:45:26.240025401Z
In an agent directory (uses manifest sekuire_id)
$ cd my-agent
$ sekuire install token
Install token created
Workspace: ws_abc123
Agent ID: 7f8a9b3c... (from sekuire.yml)
Token: skt_xyz789...
Using the Token
Set environment variables before starting your agent:
export SEKUIRE_INSTALL_TOKEN=skt_xxx
export SEKUIRE_AGENT_ID=<agent_sekuire_id>
export SEKUIRE_API_URL=https://api.sekuire.ai
Use Cases
- CI/CD pipelines - Create tokens for automated deployments
- Kubernetes - Pass to bootstrap sidecar
- On-premises - Install into private workspaces
- Development - Test agent registration locally
Token Properties
- One-time use: Invalidated after successful bootstrap
- Time-limited: Expires after configured duration
- Workspace-scoped: Tied to a specific workspace
- Agent-specific: Tied to a specific agent sekuire_id
bundle
Generate a Helm chart for Bring Your Own Cluster (BYOC) deployments.
sekuire install bundle [OPTIONS]
Options
| Option | Description |
|---|---|
--workspace <ID> | Workspace ID (required) |
--agent <ID> | Agent ID (defaults to manifest hash) |
--backend <URL> | Backend URL (default: https://api.sekuire.ai) |
--output <DIR> | Output directory (default: deploy/helm) |
--image <REF> | Container image (defaults to deployment.docker_image) |
--install-token <TOKEN> | Pre-generated install token |
--namespace <NS> | Kubernetes namespace (default: default) |
--service-port <PORT> | Service port (default: 80) |
--container-port <PORT> | Container port (default: 8000) |
Example
Terminal
$ sekuire install bundle --workspace ws_abc123 --image myrepo/agent:v1.0.0
Helm install bundle generated
Chart directory: deploy/helm/my-agent-helm
Agent ID: 7f8a9b3c...
Workspace ID: ws_abc123
Generated Files
deploy/helm/my-agent-helm/
deploy/helm/my-agent-helm/
├── Chart.yaml
├── values.yaml # Edit secrets before deploying
├── README.md
└── templates/
├── _helpers.tpl
├── deployment.yaml
├── service.yaml
├── configmap.yaml
└── secret.yaml
Deploying
Terminal
cd deploy/helm/my-agent-helm
# Review and edit values.yaml
vi values.yaml
# Deploy to Kubernetes
helm install my-agent . -n my-namespace
agent
Register an agent installation in a workspace. This creates the workspace-agent association for visibility and governance.
sekuire install agent [OPTIONS]
Options
| Option | Description |
|---|---|
--workspace <ID> | Workspace ID (required) |
--agent <ID> | Agent ID (required) |
-r, --registry <URL> | Registry URL (default: https://api.sekuire.ai) |
Example
Terminal
$ sekuire install agent --workspace ws_abc123 --agent 7f8a9b3c...
Agent registered to workspace!
Installation ID: inst_xyz789
Status: pending
Deploy the agent to your infrastructure with SEKUIRE_INSTALL_TOKEN to activate.
Note: Sekuire does not host agents. You deploy to your own infrastructure (Docker, Kubernetes, serverless). The agent registers via beacon when it starts.
See Also
- Using Agents - Install tokens and deployment guide
- Beacon SDK - Programmatic beacon control
- sekuire run - Run agents with beacon wrapper