Auth0 Token Vault CLI

Use the auth0-tv command-line tool to access third-party services on behalf of
authenticated users via Auth0 Token Vault.

Current status

• - Auth status: !INLINECODE1

When to use this skill

• - The user asks to read, search, send, reply, forward, archive, or delete emails
• The user wants to manage email drafts or labels
• The user wants to connect or disconnect a third-party service (Gmail, etc.)
• The user asks about their authentication or connection status

Key patterns

Always use --json mode

All commands must use --json for structured output:

CODEBLOCK0

Alternatively, set AUTH0_TV_OUTPUT=json in the environment to avoid passing --json on every call.

Destructive actions require --confirm

Commands that modify data (send, delete, archive, forward, reply, draft send, draft delete) require --confirm:

CODEBLOCK1

Exit codes and recovery

Code	Meaning	Recovery action
0	Success	Parse JSON output
1

General error | Report error to user | | 2 | Invalid input | Check command syntax and required flags | | 3 | Auth required | Tell the user to run auth0-tv login | | 4 | Connection required | Tell the user to run auth0-tv connect <service> | | 5 | Service error | Retry or report upstream API failure | | 6 | Network error | Check connectivity, retry |

Important: Exit codes 3 and 4 require human intervention — login and connect open a browser for OAuth. Do not attempt to run these commands autonomously; instead, tell the user what to run.

Body input for email composition

For send, reply, and draft create, the message body can be provided via:

• - --body "inline text" — short messages
• INLINECODE14 — longer messages from a file
• stdin: INLINECODE15

Prefer --body-file or stdin for messages containing special characters.

Available commands

Authentication & setup

• - auth0-tv login — authenticate via browser (human-in-the-loop)
• INLINECODE18 — clear stored credentials
• INLINECODE19 — show current user and connected services
• INLINECODE20 — connect a service via browser (human-in-the-loop)
• INLINECODE21 — disconnect a service
• INLINECODE22 — list connected services

Gmail

• - auth0-tv gmail search <query> — search messages (supports Gmail search syntax)
• INLINECODE24 — read a message
• INLINECODE25 — send a new message (destructive)
• INLINECODE26 — reply to a message (destructive)
• INLINECODE27 — forward a message (destructive)
• INLINECODE28 — archive a message (destructive)
• INLINECODE29 — move to trash (destructive)
• INLINECODE30 — list labels
• INLINECODE31 — add/remove labels
• INLINECODE32 — create a draft
• INLINECODE33 — list drafts
• INLINECODE34 — send a draft (destructive)
• INLINECODE35 — delete a draft (destructive)

See references/commands.md for full command reference with flags and JSON output examples.