OS Manuals

/usr/local/bin/teleport

The easiest, and most secure way to access and protect all of your infrastructure.

From teleport-18 18.11.1-r12 (enterprise-packages), captured 2026-11-08 by running teleport --help (exit 0). permalink

Usage: teleport <command> [<args> ...]

Teleport unifies identities — humans, machines, and AI — with strong identity implementation to
speed up engineering, improve resiliency against identity-based attacks, and secure AI in production
infrastructure.

Flags:

Commands:
  help                                            Show help.
  start                                           Starts the Teleport service.
  status                                          Print the status of the current SSH session.
  configure                                       Generate a simple config file to get started.
  version                                         Print the version of your teleport binary.
  join openssh                                    Join an SSH server to a Teleport cluster.
  app start                                       Start application proxy service.
  db start                                        Start database proxy service.
  db configure create                             Creates a sample Database Service configuration.
  db configure bootstrap                          Bootstrap the necessary configuration for the database agent. It reads the provided agent configuration to determine what will be bootstrapped.
  db configure aws print-iam                      Generate and show IAM policies.
  db configure aws create-iam                     Generate, create and attach IAM policies.
  discovery bootstrap                             Bootstrap the necessary configuration for the discovery agent. It reads the provided agent configuration to determine what will be bootstrapped.
  install systemd                                 Creates a systemd unit file configuration.
  node configure                                  Generate a configuration file for an SSH node.
  integration configure deployservice-iam         Create the required IAM Roles for the AWS OIDC Deploy Service.
  integration configure ec2-ssm-iam               Adds required IAM permissions and SSM Document to enable EC2 Auto Discover using SSM.
  integration configure aws-app-access-iam        Adds required IAM permissions to connect to AWS using App Access.
  integration configure eks-iam                   Adds required IAM permissions for enrollment of EKS clusters to Teleport.
  integration configure session-summaries bedrock Adds required IAM permissions for Session Summaries feature using Amazon Bedrock.
  integration configure access-graph aws-iam      Adds required AWS IAM permissions for syncing AWS resources into Access Graph service.
  integration configure access-graph azure        Adds required Azure permissions for syncing Azure resources into Access Graph service.
  integration configure awsoidc-idp               Creates an IAM IdP (OIDC) in your AWS account to allow the AWS OIDC Integration to access AWS APIs.
  integration configure listdatabases-iam         Adds required IAM permissions to List RDS Databases (Instances and Clusters).
  integration configure externalauditstorage      Bootstraps required infrastructure and adds required IAM permissions for External Audit Storage logs.
  integration configure azure-oidc                Configures Azure / Entra ID OIDC integration.
  integration configure samlidp gcp-workforce     Configures GCP Workforce Identity Federation pool and SAML provider.
  integration configure awsra-trust-anchor        Configure AWS IAM Roles Anywhere Integration by creating resources in AWS.
  tpm identify                                    Output identifying information related to the TPM detected on the system.
  debug set-log-level                             Changes the log level.
  debug get-log-level                             Fetches current log level.
  debug profile                                   Export the application profiles (pprof format). Outputs to stdout .tar.gz file contents.
  debug readyz                                    Checks if the instance is ready to serve requests.
  debug metrics                                   Fetches the cluster's Prometheus metrics.
  debug check-session-helper                      Checks if the embedded session helper is working, if available in this build.
  debug require-session-helper                    Checks if the embedded session helper is working, failing if not available in this build.
  backend get                                     Retrieves a single item from the cluster state backend.
  backend rm                                      Removes a single item from the cluster state backend.
  backend ls                                      Lists the keys in the cluster state backend.
  backend edit                                    Modify a single item from the cluster state backend.
  backend clone                                   Clones data from a source to a destination backend.

Try 'teleport help [command]' to get help for a given command.

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.