Chio/Docs
LOGIN · JOIN

CLI Global Options

Select the persistent stores, the trust-control service, and the output format that every chio command accepts.

Reference chio@5f63e6e

On this page

Global flags choose where a command keeps receipts, revocations, authority, budgets, and sessions, which control service it talks to, and how it prints results.

Return to the command families. Each family page lists its own arguments and options.

Synopsis

Command synopsistext
chio [OPTIONS] <COMMAND>

An entry names one command path. The block under it is its usage line: everything outside brackets is required, [OPTIONS] stands for the flags listed beneath it plus the 7 global flags, and a value in angle brackets is the placeholder for that argument. Every command answers --help with its usage, arguments, and options.

Global flags

These flags are declared on the root command. The second column says how far each one reaches: 7 of them are accepted by all 437 command paths, before or after the subcommand name. A command that gives one of them a different meaning lists it in its own entry instead.

FlagAccepted byWhat it does
--json
424 commands
Short alias for --format json.
--format <FORMAT>
chio only
Output format for command results and terminal error reporting. Default human. Values human, json.
--receipt-db <RECEIPT_DB>
435 commands
Optional SQLite database path for durable receipt persistence.
--revocation-db <REVOCATION_DB>
every command
Optional SQLite database path for durable capability revocation persistence.
--authority-seed-file <AUTHORITY_SEED_FILE>
every command
Optional file path for a persistent capability-authority seed.
--authority-db <AUTHORITY_DB>
every command
Optional SQLite database path for shared capability-authority state.
--budget-db <BUDGET_DB>
every command
Optional SQLite database path for durable shared capability budget state.
--session-db <SESSION_DB>
every command
Optional SQLite database path for durable admission, trust authority, and remote MCP session state.
--control-url <CONTROL_URL>
every command
Optional shared trust-control service base URL.
--control-token <CONTROL_TOKEN>
every command
Bearer token used to authenticate to the shared trust-control service. Prefer CHIO_CONTROL_TOKEN env over the argv form so the bearer does not leak via ps / /proc/<pid>/cmdline. Reads CHIO_CONTROL_TOKEN.