Skip to content
oidc-agent for managing OpenID Connect tokens on the command line
C Makefile Shell Other
Branch: master
Clone or download
Latest commit 7e791fe Nov 14, 2019

oidc-agent logo

License Total alerts Language grade Code size Release date Release version


oidc-agent is a set of tools to manage OpenID Connect tokens and make them easily usable from the command line. We followed the ssh-agent design, so users can handle OIDC tokens in a similiar way as they do with ssh keys.

oidc-agent is usually started in the beginning of an X-session or a login session. Through use of environment variables the agent can be located and used to handle OIDC tokens.

The agent initially does not have any account configurations loaded. You can load an account configuration by using oidc-add. Multiple account configurations may be loaded in oidc-agent concurrently. oidc-add is also used to remove a loaded configuration from oidc-agent. oidc-gen is used to initially generate an account configurations file (Help for different providers).

Full documentation can be found at

We have a low-traffic mailing list with updates such as critical security incidents and new releases: Subscribe oidc-agent-user


Current releases are available at GitHub or

Debian Packages

  • sudo apt-key adv --keyserver hkp:// --recv-keys ACDFB08FDC962044D87FF00B512839863D487A87

  • Depending on your distribution, choose one of the following lines:

    sudo add-apt-repository "deb ./"
    sudo add-apt-repository "deb ./"
    sudo add-apt-repository "deb ./"
    sudo add-apt-repository "deb ./"
  • sudo apt-get update

  • sudo apt-get install oidc-agent


brew tap zachmann/x11-ssh-askpass
brew tap indigo-dc/oidc-agent
brew install x11-ssh-askpass
brew install oidc-agent

From Source

Refer to the documentation

You can’t perform that action at this time.