Skip to main content

Install Commands

Commands for deploying agents into workspaces.

Commands


token

Create a workspace-scoped install token for an agent. Install tokens are one-time-use credentials that authorize an agent deployment to register with Sekuire.

sekuire install token [OPTIONS]

Options

OptionDescription
--workspace <ID>Workspace ID (defaults to saved config)
--agent <ID>Agent sekuire_id (required if not in agent directory)
--backend <URL>Backend URL (default: https://api.sekuire.ai)
--ttl-minutes <MIN>Optional token TTL in minutes (backend-dependent)

Examples

With explicit workspace and agent
$ sekuire install token --workspace ws_abc123 --agent 7f8a9b3c...
Install token created
Workspace: ws_abc123
Agent ID: 7f8a9b3c...
Token: skt_u2ZQfOpyP01KcEDfdmu0yciIBU6SnLJV
Expires: 2026-01-28T16:46:11.714300605Z
Using saved workspace from login
$ sekuire install token --agent 7f8a9b3c...
Install token created
Workspace: ws_e1077488-be8b-4553-8217-f37be23afe87
Agent ID: 7f8a9b3c...
Token: skt_d4VleqHS7sKTi6-WwpXAptXKyC17w5OU
Expires: 2026-01-28T16:45:26.240025401Z
In an agent directory (uses manifest sekuire_id)
$ cd my-agent
$ sekuire install token
Install token created
Workspace: ws_abc123
Agent ID: 7f8a9b3c... (from sekuire.yml)
Token: skt_xyz789...

Using the Token

Set environment variables before starting your agent:

export SEKUIRE_INSTALL_TOKEN=skt_xxx
export SEKUIRE_AGENT_ID=<agent_sekuire_id>
export SEKUIRE_API_URL=https://api.sekuire.ai

Use Cases

  • CI/CD pipelines - Create tokens for automated deployments
  • Kubernetes - Pass to bootstrap sidecar
  • On-premises - Install into private workspaces
  • Development - Test agent registration locally

Token Properties

  • One-time use: Invalidated after successful bootstrap
  • Time-limited: Expires after configured duration
  • Workspace-scoped: Tied to a specific workspace
  • Agent-specific: Tied to a specific agent sekuire_id

bundle

Generate a Helm chart for Bring Your Own Cluster (BYOC) deployments.

sekuire install bundle [OPTIONS]

Options

OptionDescription
--workspace <ID>Workspace ID (required)
--agent <ID>Agent ID (defaults to manifest hash)
--backend <URL>Backend URL (default: https://api.sekuire.ai)
--output <DIR>Output directory (default: deploy/helm)
--image <REF>Container image (defaults to deployment.docker_image)
--install-token <TOKEN>Pre-generated install token
--namespace <NS>Kubernetes namespace (default: default)
--service-port <PORT>Service port (default: 80)
--container-port <PORT>Container port (default: 8000)

Example

Terminal
$ sekuire install bundle --workspace ws_abc123 --image myrepo/agent:v1.0.0
Helm install bundle generated
Chart directory: deploy/helm/my-agent-helm
Agent ID: 7f8a9b3c...
Workspace ID: ws_abc123

Generated Files

deploy/helm/my-agent-helm/
deploy/helm/my-agent-helm/
├── Chart.yaml
├── values.yaml # Edit secrets before deploying
├── README.md
└── templates/
├── _helpers.tpl
├── deployment.yaml
├── service.yaml
├── configmap.yaml
└── secret.yaml

Deploying

Terminal
cd deploy/helm/my-agent-helm

# Review and edit values.yaml
vi values.yaml

# Deploy to Kubernetes
helm install my-agent . -n my-namespace

agent

Register an agent installation in a workspace. This creates the workspace-agent association for visibility and governance.

sekuire install agent [OPTIONS]

Options

OptionDescription
--workspace <ID>Workspace ID (required)
--agent <ID>Agent ID (required)
-r, --registry <URL>Registry URL (default: https://api.sekuire.ai)

Example

Terminal
$ sekuire install agent --workspace ws_abc123 --agent 7f8a9b3c...
Agent registered to workspace!
Installation ID: inst_xyz789
Status: pending

Deploy the agent to your infrastructure with SEKUIRE_INSTALL_TOKEN to activate.

Note: Sekuire does not host agents. You deploy to your own infrastructure (Docker, Kubernetes, serverless). The agent registers via beacon when it starts.


See Also