---
title: "ezgh iam bots oidc-trust"
description: "OIDC trust: which workloads' ID tokens may get the bot's API keys."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.ezghcloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ezgh iam bots oidc-trust

{/* Generated by ezgh-cli's internal/tools/clidocs from the ezgh command tree. Don't edit: change the command's help in ezgh-cli and regenerate. */}

```sh
ezgh iam bots oidc-trust <command>
```

Which OIDC ID tokens may be exchanged for the bot's API keys (`ezgh auth oidc-exchange`): tokens from one of the organization's OIDC providers whose sub matches an entry's subject and whose claims equal its claims. Removing an entry ends the keys it issued.

Part of [`ezgh iam bots`](/cli/reference/iam-bots).

## Flags

This command also takes the [global flags](/cli/reference#global-flags).

## Subcommands

| Command | Description |
| --- | --- |
| [`ezgh iam bots oidc-trust add`](/cli/reference/iam-bots-oidc-trust-add) | Let workloads whose OIDC tokens match act as a bot |
| [`ezgh iam bots oidc-trust list`](/cli/reference/iam-bots-oidc-trust-list) | List the OIDC tokens a bot trusts |
| [`ezgh iam bots oidc-trust remove`](/cli/reference/iam-bots-oidc-trust-remove) | Remove one of a bot's OIDC trust entries, ending the keys it issued |

Source: https://docs.ezghcloud.com/cli/reference/iam-bots-oidc-trust/index.mdx