Skip to main content
Service accounts provide machine-to-machine authentication for CI/CD pipelines and automated workflows. Once created, their tokens can be passed via the NSCALE_SERVICE_TOKEN environment variable. Aliases: service-accounts, sa, serviceaccounts Commands that act on one service account take its ID or name either as a positional argument or with --id. If you omit it, the CLI opens an interactive picker, so always pass it in scripts.

​
Subcommands

  • list — List service accounts
  • get — Get service account details
  • create — Create a new service account
  • update — Update an existing service account
  • rotate — Rotate a service account token
  • delete — Delete a service account

​
list

List service accounts in an organization.
Aliases: list, ls

​
Flags

FlagDescription
Organization ID or name
Show at most N results (client-side; every result is still fetched). Cuts before -q. 0 for all
Emit the full JSON payload (mutually exclusive with -q)
jq filter for value extraction (see Query output with -q)

​
Example

​
get

Get details for a specific service account.

​
Flags

FlagDescription
Service account ID or name
Organization ID or name
Emit the full JSON payload (mutually exclusive with -q)
jq filter for value extraction (see Query output with -q)

​
Example

​
create

Create a new service account. Supports interactive mode or JSON input. The response carries the access token; the CLI also prints a Hint: line on stderr with the token’s expiry. Save the token straight away.

​
Flags

FlagDescription
Organization ID or name
Path to a JSON file
Read JSON from standard input
Preview actions and payload without persisting
Automatically confirm creation
Emit the full JSON payload (mutually exclusive with -q)
jq filter for value extraction (see Query output with -q)

​
Examples

​
update

Update an existing service account.

​
Flags

FlagDescription
Service account ID or name
Organization ID or name
Path to a JSON file
Read JSON from standard input
Preview actions and payload without persisting
Automatically confirm update
Emit the full JSON payload (mutually exclusive with -q)
jq filter for value extraction (see Query output with -q)

​
Examples

​
rotate

Rotate the access token for a service account. The old token is invalidated and a new one is returned.

​
Flags

FlagDescription
Service account ID or name
Organization ID or name
Preview actions and payload without persisting
Automatically confirm token rotation
Emit the full JSON payload (mutually exclusive with -q)
jq filter for value extraction (see Query output with -q)

​
Example

​
delete

Delete an existing service account.
Aliases: delete, rm, remove

​
Flags

Service Tokens (Console)

Generate and manage service tokens via the Console UI.