Agent CLI reference

The ados command runs on every node. It opens the terminal dashboard, reports status, pairs and unpairs the node, updates and uninstalls the agent, and inspects or tunes hardware, logs, networking, extensions, the profile, the radio link and recordings. Most flight-operations settings (MAVLink, video, network, remote access, ground-station role) live in the browser dashboard and in Mission Control. The CLI is for status, recovery and scripting. This page covers the ados command on the node. Building and signing extensions uses the same ados plugin group; the authoring commands and exit codes are on Plugin CLI reference.

All commands

Command	Arguments	Options	Description
`ados config`	n/a	n/a	Inspect and migrate the on-disk agent config.
`ados config migrate`	n/a	`--check`, `--json`	Bring /etc/ados/config.yaml to the current shape, under the lock.
`ados config status`	n/a	`--json`	Show pending config migrations without writing anything.
`ados diag`	n/a	n/a	Reliable per-hop pipeline diagnosis (video, link).
`ados diag link`	n/a	`--json`	WFB link diagnosis (deaf / mis_keyed / jammed / healthy).
`ados diag storage`	n/a	`--json`	Storage-wear verdict (write rate, throttle history, store footprint).
`ados diag video`	n/a	`--json`	Per-hop verdict on the video pipeline.
`ados hardware`	n/a	n/a	Inspect and bust the hardware-check cache.
`ados hardware bust-cache`	n/a	`--quiet`	Invalidate the persisted hardware snapshot so the next API call re-probes. Used by udev rules on USB add/remove.
`ados hardware show`	n/a	`--json`	Print the persisted hardware snapshot.
`ados help`	n/a	n/a	Show the ADOS command overview.
`ados logs`	n/a	n/a	Query the durable local logging and telemetry store.
`ados logs aggregate`	n/a	`--metric`, `--since`, `--from`, `--to`, `--session`, `--bucket`, `--agg`, `--json`, `--key`, `--host`	Downsampled metric series for charts.
`ados logs export`	n/a	`--since`, `--from`, `--to`, `--kind`, `--source`, `--metric`, `--session`, `--format`, `--output` / `-o`, `--host`, `--key`	Stream a window of the store as jsonl or jsonl.zst to a file or stdout.
`ados logs push`	n/a	`--session`, `--since`, `--kinds`, `--no-wait`, `--json`	Export a window of the store to the paired cloud account. This is a thin front door: it records the request and lets the cloud service do the export, upload, and mark. The cloud service refuses the push when the agent is in local mode, is not cloud-paired, or has cloud log push disabled, which is the correct state for an agent that has nothing to sync. By default the command waits a few seconds for the result and prints what was pushed; `--no-wait` returns as soon as the request is recorded. The request file lives under the root-owned runtime dir: root records it directly, while a non-root operator hands the write to the running agent on loopback and only falls back to the direct seam if the agent is unreachable.
`ados logs query`	n/a	`--since`, `--from`, `--to`, `--kind`, `--source`, `--metric`, `--event-kind`, `--level`, `--text`, `--session`, `--limit`, `--cursor`, `--json`, `--key`, `--host`	Keyset-paginated rows across the logs, events, metrics, or hardware tables.
`ados logs sessions`	n/a	`--since`, `--from`, `--to`, `--kind`, `--open`, `--limit`, `--json`, `--key`, `--host`	List boot, flight, and manual sessions with per-session counts.
`ados logs status`	n/a	`--openapi`, `--json`, `--key`, `--host`	Store health, ingest and drop rates, and the sync watermark.
`ados logs tail`	n/a	`--replay`, `--kind`, `--source`, `--metric`, `--event-kind`, `--level`, `--text`, `--json`, `--key`, `--host`	Follow the live stream of new rows until interrupted.
`ados mcp`	n/a	n/a	Manage AI-control (MCP) access tokens.
`ados mcp disable`	n/a	`--no-restart`	Stop honoring scoped MCP tokens at the LAN auth edge (needs sudo).
`ados mcp enable`	n/a	`--no-restart`	Accept scoped MCP tokens at the LAN auth edge (needs sudo).
`ados mcp mint`	n/a	`--label`, `--scope`, `--ttl-days`, `--node`	Mint a scoped MCP token (shown once).
`ados mcp revoke`	`token_id` (optional)	`--all`	Revoke one token by id, or —all.
`ados mcp status`	n/a	`--json`	Show the MCP token acceptance posture and minted tokens.
`ados network`	n/a	n/a	Inspect and manage network adapter settings.
`ados network ap-passphrase`	n/a	n/a	Print this unit’s WiFi access point passphrase.
`ados network mac`	n/a	n/a	Stable-MAC pinning for no-efuse adapters.
`ados network mac pin`	`iface`	`--mac`, `--apply-now`	Pin a stable MAC on an adapter.
`ados network mac status`	n/a	`--json`	Show per-adapter stable-MAC verdicts.
`ados network mac unpin`	`iface`	n/a	Remove an adapter’s pin / override.
`ados network mac verify`	`iface`	n/a	Show which .link wins for an interface (no reboot).
`ados network regulatory`	n/a	n/a	Operating-region posture for the radio (unrestricted by default).
`ados network regulatory region`	`code`	n/a	Pin an operating region (ISO 3166-1 alpha-2 country code, e.g. US, DE).
`ados network regulatory status`	n/a	`--json`	Show the current operating-region posture.
`ados network regulatory unrestricted`	n/a	n/a	Clear any pinned region; radiate on the configured channel out of the box.
`ados pair`	n/a	`--role`, `--yes` / `-y`	Connect this agent to Mission Control, or bind the WFB radio (—role).
`ados plugin`	n/a	n/a	Install, enable, and inspect plugins.
`ados plugin auto-update`	`plugin_id`, `state`	`--json`	Toggle auto-update on or off for a plugin.
`ados plugin disable`	`plugin_id`	`--json`	Disable a plugin (keeps it installed).
`ados plugin enable`	`plugin_id`	`--json`	Enable an installed plugin.
`ados plugin info`	`plugin_id`	`--json`	Print manifest summary and runtime state.
`ados plugin install`	`source`	`--yes`, `--json`	Install a .adosplug archive, a built-in plugin by id, an archive URL, or a first-party catalog plugin by id.
`ados plugin keygen`	`signer_id`	`--output-dir`, `--force`, `--json`	Generate a fresh Ed25519 keypair for plugin signing. Developer aid: do NOT use this to mint production publisher keys without an offline workflow for the private half.
`ados plugin lint`	`archive_path`	`--json`	Run static analysis on a .adosplug archive before submission.
`ados plugin list`	n/a	`--json`, `--all`	List installed plugins.
`ados plugin logs`	`plugin_id`	`--lines`, `--follow`, `--service`, `--json`	Tail a plugin’s stdout/stderr log file.
`ados plugin perms`	`plugin_id`	`--grant`, `--revoke`, `--yes` / `-y`, `--json`	Show, grant, or revoke permissions on an installed plugin.
`ados plugin pin`	`plugin_id`, `version`	`--json`	Pin a plugin to a version; auto-update will skip it.
`ados plugin remove`	`plugin_id`	`--keep-data`, `--json`	Stop, uninstall, and forget a plugin.
`ados plugin sign`	`plugin_dir`	`--key`, `--signer-id`, `--output`, `--json`	Pack a plugin directory into a signed .adosplug archive. Signs the canonical payload hash with an Ed25519 private key (PEM-encoded) and writes the SIGNATURE file inside the archive.
`ados plugin test`	`plugin_dir`	`--tests-dir`, `-k`, `--json`	Run a plugin’s pytest suite under the SDK test harness.
`ados plugin unpin`	`plugin_id`	`--json`	Clear the pinned version on a plugin so auto-update can run.
`ados profile`	n/a	n/a	Show or override the agent profile.
`ados profile set`	`value`	`--role`, `--no-restart`, `--json`	Persist a profile choice for this node.
`ados profile show`	n/a	`--json`	Print the resolved agent profile.
`ados radio`	n/a	n/a	Inspect and tune the WFB-ng radio link.
`ados radio adapters`	n/a	`--json`	List detected WiFi adapters and their WFB injection verdict.
`ados radio hop`	`channel`	n/a	Coordinated hop to a WFB channel (the GS follows via the announce).
`ados radio install-driver`	n/a	`--force`	Build and install the RTL8812EU (WFB) kernel driver if it is missing.
`ados radio pair`	n/a	n/a	Inspect and control WFB radio pairing.
`ados radio pair auto`	n/a	n/a	Toggle auto-pair on first boot.
`ados radio pair auto off`	n/a	n/a	Disable auto-pair.
`ados radio pair auto on`	n/a	n/a	Re-arm auto-pair (only when unpaired).
`ados radio pair failover-status`	n/a	`--json`	Show local-bind to cloud-relay failover state.
`ados radio pair local`	n/a	`--role`, `--peer-device-id`	Open a local-radio bind window. Drives the upstream wfb-ng bind protocol via the agent’s REST. Returns the terminal session state when the protocol completes (≤60s).
`ados radio pair status`	n/a	`--json`	Print pair state for this rig.
`ados radio pair unpair`	n/a	`--yes`	Wipe pair keys and clear pair state.
`ados radio set-tx-power`	`dbm`	n/a	Set the WFB-ng TX power in dBm. Refused above the configured ceiling.
`ados radio status`	n/a	`--json`	Show the current WFB-ng link status.
`ados radio test`	n/a	n/a	Bench bring-up sweep: walk through 1, 5, 10 dBm and report effect.
`ados record`	n/a	n/a	Start, stop, list and clip ground-station recordings.
`ados record clip`	n/a	`--path`, `--start`, `--duration`, `--output` / `-o`	Cut an fMP4 clip out of the recorded segments.
`ados record list`	n/a	`--path`, `--json`	List on-disk captures, or a stream’s playback segments with —path.
`ados record start`	n/a	`--hint`, `--json`	Begin a capture on the ground station.
`ados record stop`	n/a	`--json`	End the in-flight capture.
`ados status`	n/a	`--json`	Show agent setup, link, video, and service status.
`ados support-bundle`	n/a	`--output` / `-o`	Collect one redacted archive for a support request. Nothing is sent anywhere. The archive is written locally and the operator decides who sees it.
`ados uninstall`	n/a	`--purge`, `--yes` / `-y`	Uninstall ADOS Drone Agent from this system.
`ados unpair`	n/a	`--radio`, `--all`, `--yes` / `-y`	Release this agent from Mission Control (and optionally the WFB radio).
`ados update`	n/a	`--check-only`, `--yes` / `-y`, `--json`, `--profile`, `--force-armed`	Update the agent to the latest and restart it.
`ados version`	n/a	n/a	Print the installed agent version (works when the service is down).

Behaviour the table does not show:

ados --version prints the same value as ados version.
ados pair without options shows this node’s Mission Control pairing information. ados pair --role <drone|gs> binds the WFB radio in that role instead. See Pairing and WFB-ng pairing.
ados unpair --radio also wipes the WFB bind; --all releases both.
ados support-bundle writes one redacted archive locally and sends nothing anywhere. -o <path> chooses where it lands.
ados update --profile <drone|ground-station|workstation|compute> re-runs the upgrade against a different node profile. On a drone or ground station the update is refused while the vehicle is armed or its arm state is unknown; --force-armed overrides that refusal here and in the installer. See Updating.
ados install --status and ados install --resume form a hidden, advanced command. --status shows the last install result and which checkpoints are done or missing; --resume re-runs the installer to finish a partial install.

Subgroups

Subgroup	Use it for
`ados config`	Inspect and migrate the on-disk agent config.
`ados diag`	Per-hop verdicts on the video pipeline, the radio link, and storage wear.
`ados hardware`	Inspect the persisted hardware snapshot and clear the hardware-check cache.
`ados logs`	Query, tail, aggregate, export, and push the Black Box store.
`ados mcp`	Manage AI-control (MCP) access tokens.
`ados network`	Stable-MAC pinning, the operating-region posture, and the access point passphrase.
`ados plugin`	Install, enable, disable, remove, inspect and read logs for extensions.
`ados profile`	Show or override the node profile.
`ados radio`	Inspect and tune the WFB-ng radio link, including pairing and the driver build.
`ados record`	Start, stop, list, and clip ground-station recordings.

Every subgroup except ados logs is hidden from ados --help so the first-run surface stays short. All of them are supported, and ados <group> --help works for each one.

`ados`

Run ados on the node or over SSH:

ados

In an interactive terminal it opens the terminal dashboard: Links, Autopilot, Video, Link and Services panels, with quick actions on a (install radio driver, pair, logs, radio status, update, restart radio, unpair, reboot). Press q or Ctrl-C to exit.

ados terminal dashboard showing the verdict line, Links, Autopilot, Video, Link and Services panels — The terminal dashboard on a drone node.

The Logs quick action runs ados logs tail. With the Black Box store off (the default), it prints how to follow journalctl -u ados-supervisor -f instead. Without a TTY, ados prints the same summary as ados status.

`ados status`

A short, support-friendly summary:

ados status

Example output:

▌ ADOS  my-drone · drone   v<version>
  setup         67%    ● code 4F2K9B (enter in Mission Control)

▌ Reach this agent
  ➜  http://my-drone.local:8080
  ➜  http://192.168.1.50:8080

  MAVLink FC    not connected
  Video         running  encoder=v4l2m2m  http://127.0.0.1:8889/main/
  Cloud relay   configured (https://cloud.example.com)
  Cloudflare    disabled

Next: Connect or configure the flight controller

For scripts:

ados status --json

The JSON output is the same setup status the browser dashboard and Mission Control read.

`ados update` and `ados uninstall`

ados update re-runs the installer in upgrade mode. It updates the daemons and the CLI and keeps the device identity and config. --check-only reports the current and latest version without installing, and --json prints current_version, latest_version and update_available. See Updating for platform behaviour and rollback. ados uninstall removes the agent. --purge removes the config as well, and --yes skips the prompt:

ados uninstall --purge --yes

`ados plugin`

ados plugin drives the extension host through the agent’s /api/plugins routes. Each extension runs as its own unit (a systemd unit with cgroup limits on Linux, a LaunchAgent on macOS) with a capability-gated IPC channel.

Command	Arguments	Options	Description
`ados plugin auto-update`	`plugin_id`, `state`	`--json`	Toggle auto-update on or off for a plugin.
`ados plugin disable`	`plugin_id`	`--json`	Disable a plugin (keeps it installed).
`ados plugin enable`	`plugin_id`	`--json`	Enable an installed plugin.
`ados plugin info`	`plugin_id`	`--json`	Print manifest summary and runtime state.
`ados plugin install`	`source`	`--yes`, `--json`	Install a .adosplug archive, a built-in plugin by id, an archive URL, or a first-party catalog plugin by id.
`ados plugin keygen`	`signer_id`	`--output-dir`, `--force`, `--json`	Generate a fresh Ed25519 keypair for plugin signing. Developer aid: do NOT use this to mint production publisher keys without an offline workflow for the private half.
`ados plugin lint`	`archive_path`	`--json`	Run static analysis on a .adosplug archive before submission.
`ados plugin list`	n/a	`--json`, `--all`	List installed plugins.
`ados plugin logs`	`plugin_id`	`--lines`, `--follow`, `--service`, `--json`	Tail a plugin’s stdout/stderr log file.
`ados plugin perms`	`plugin_id`	`--grant`, `--revoke`, `--yes` / `-y`, `--json`	Show, grant, or revoke permissions on an installed plugin.
`ados plugin pin`	`plugin_id`, `version`	`--json`	Pin a plugin to a version; auto-update will skip it.
`ados plugin remove`	`plugin_id`	`--keep-data`, `--json`	Stop, uninstall, and forget a plugin.
`ados plugin sign`	`plugin_dir`	`--key`, `--signer-id`, `--output`, `--json`	Pack a plugin directory into a signed .adosplug archive. Signs the canonical payload hash with an Ed25519 private key (PEM-encoded) and writes the SIGNATURE file inside the archive.
`ados plugin test`	`plugin_dir`	`--tests-dir`, `-k`, `--json`	Run a plugin’s pytest suite under the SDK test harness.
`ados plugin unpin`	`plugin_id`	`--json`	Clear the pinned version on a plugin so auto-update can run.

In more detail:

ados plugin install <source> takes a local .adosplug path, an HTTPS archive URL on the agent’s download allowlist, a built-in plugin id, or a first-party catalog id such as com.altnautica.world-engine. It shows the requested permissions and grants the ones you approve.
enable adds the extension to the supervisor’s restart set and disable removes it; both take effect at runtime. remove purges on-disk state unless --keep-data is passed.
ados plugin perms <id> --grant <perm> grants a declared permission and --revoke <perm> drops one, at runtime.
ados plugin logs <id> prints the last 100 lines of the extension’s stdout and stderr (--lines N, --follow). --service <name> reads a declared service’s log instead of the main runner’s.
pin, unpin and auto-update <id> <on|off> control auto-update per extension.
lint, test, sign and keygen are authoring aids. keygen makes a developer key, not a production publisher key.

install and perms --revoke ask for confirmation. Pass --yes to skip it. install --yes refuses high- or critical-risk permissions; grant those interactively or with ados plugin perms <id> --grant <perm>. enable, disable and remove do not prompt. The operator guide is Plugins. Signing keys are covered on Signing keys.

`ados diag`

Per-hop verdicts on the subsystems that fail most often. Reach for these before journalctl: each one reports what it measured and how.

Command	Arguments	Options	Description
`ados diag link`	n/a	`--json`	WFB link diagnosis (deaf / mis_keyed / jammed / healthy).
`ados diag storage`	n/a	`--json`	Storage-wear verdict (write rate, throttle history, store footprint).
`ados diag video`	n/a	`--json`	Per-hop verdict on the video pipeline.

ados diag link reports the decode verdict and the pairing state separately. A box can be paired and decoding nothing, and the two answers point at different faults. When neither end measured packet loss it says so, rather than reporting zero loss. ados diag storage reads back wear the box records continuously. Check it first on a node that reboots on its own: undervoltage and thermal throttling both show up there. See Drone Agent diagnostics.

`ados hardware`

Command	Arguments	Options	Description
`ados hardware bust-cache`	n/a	`--quiet`	Invalidate the persisted hardware snapshot so the next API call re-probes. Used by udev rules on USB add/remove.
`ados hardware show`	n/a	`--json`	Print the persisted hardware snapshot.

udev runs ados hardware bust-cache on USB add and remove so the next API call re-probes.

`ados logs`

Query the Black Box store: logs, telemetry history, discrete events and hardware samples in a local database that survives reboots.

Command	Arguments	Options	Description
`ados logs aggregate`	n/a	`--metric`, `--since`, `--from`, `--to`, `--session`, `--bucket`, `--agg`, `--json`, `--key`, `--host`	Downsampled metric series for charts.
`ados logs export`	n/a	`--since`, `--from`, `--to`, `--kind`, `--source`, `--metric`, `--session`, `--format`, `--output` / `-o`, `--host`, `--key`	Stream a window of the store as jsonl or jsonl.zst to a file or stdout.
`ados logs push`	n/a	`--session`, `--since`, `--kinds`, `--no-wait`, `--json`	Export a window of the store to the paired cloud account. This is a thin front door: it records the request and lets the cloud service do the export, upload, and mark. The cloud service refuses the push when the agent is in local mode, is not cloud-paired, or has cloud log push disabled, which is the correct state for an agent that has nothing to sync. By default the command waits a few seconds for the result and prints what was pushed; `--no-wait` returns as soon as the request is recorded. The request file lives under the root-owned runtime dir: root records it directly, while a non-root operator hands the write to the running agent on loopback and only falls back to the direct seam if the agent is unreachable.
`ados logs query`	n/a	`--since`, `--from`, `--to`, `--kind`, `--source`, `--metric`, `--event-kind`, `--level`, `--text`, `--session`, `--limit`, `--cursor`, `--json`, `--key`, `--host`	Keyset-paginated rows across the logs, events, metrics, or hardware tables.
`ados logs sessions`	n/a	`--since`, `--from`, `--to`, `--kind`, `--open`, `--limit`, `--json`, `--key`, `--host`	List boot, flight, and manual sessions with per-session counts.
`ados logs status`	n/a	`--openapi`, `--json`, `--key`, `--host`	Store health, ingest and drop rates, and the sync watermark.
`ados logs tail`	n/a	`--replay`, `--kind`, `--source`, `--metric`, `--event-kind`, `--level`, `--text`, `--json`, `--key`, `--host`	Follow the live stream of new rows until interrupted.

The store is off by default. With it off, these commands print how to read the journal instead (journalctl -u ados-supervisor -f, or any ados-* unit), which is the log of record. Turn it on with logging.store.enabled: true; see Black Box. ados logs push uploads to your paired cloud account. For a support case use ados support-bundle, which writes a redacted archive locally and sends nothing. ados logs status --openapi prints the OpenAPI document of the log query API.

`ados network`

Command	Arguments	Options	Description
`ados network ap-passphrase`	n/a	n/a	Print this unit’s WiFi access point passphrase.
`ados network mac`	n/a	n/a	Stable-MAC pinning for no-efuse adapters.
`ados network mac pin`	`iface`	`--mac`, `--apply-now`	Pin a stable MAC on an adapter.
`ados network mac status`	n/a	`--json`	Show per-adapter stable-MAC verdicts.
`ados network mac unpin`	`iface`	n/a	Remove an adapter’s pin / override.
`ados network mac verify`	`iface`	n/a	Show which .link wins for an interface (no reboot).
`ados network regulatory`	n/a	n/a	Operating-region posture for the radio (unrestricted by default).
`ados network regulatory region`	`code`	n/a	Pin an operating region (ISO 3166-1 alpha-2 country code, e.g. US, DE).
`ados network regulatory status`	n/a	`--json`	Show the current operating-region posture.
`ados network regulatory unrestricted`	n/a	n/a	Clear any pinned region; radiate on the configured channel out of the box.

ados network regulatory region <CC> takes an ISO 3166-1 alpha-2 code (for example US, DE) and applies after a restart. ados network regulatory unrestricted clears the pin, which is the default posture. ados network ap-passphrase reads /etc/ados/ap-passphrase and prints the value on its own line, so it works in a script or a pipe without a TTY. It never generates one: asking a unit that has never started its access point is an error. The file is mode 0600, so run it as root. The terminal dashboard shows the same value in its Link panel. See Regulatory for the region posture.

`ados profile`

The installer accepts four profiles (drone, ground_station, workstation, compute). ados profile set persists only the two flight profiles; a workstation or compute node is chosen at install time with --profile. See Node profiles.

Command	Arguments	Options	Description
`ados profile set`	`value`	`--role`, `--no-restart`, `--json`	Persist a profile choice for this node.
`ados profile show`	n/a	`--json`	Print the resolved agent profile.

ados profile set ground_station --role <direct|relay|receiver> sets the ground-station role; --no-restart skips the restart of profile-sensitive units.

`ados radio`

Command	Arguments	Options	Description
`ados radio adapters`	n/a	`--json`	List detected WiFi adapters and their WFB injection verdict.
`ados radio hop`	`channel`	n/a	Coordinated hop to a WFB channel (the GS follows via the announce).
`ados radio install-driver`	n/a	`--force`	Build and install the RTL8812EU (WFB) kernel driver if it is missing.
`ados radio pair`	n/a	n/a	Inspect and control WFB radio pairing.
`ados radio pair auto`	n/a	n/a	Toggle auto-pair on first boot.
`ados radio pair auto off`	n/a	n/a	Disable auto-pair.
`ados radio pair auto on`	n/a	n/a	Re-arm auto-pair (only when unpaired).
`ados radio pair failover-status`	n/a	`--json`	Show local-bind to cloud-relay failover state.
`ados radio pair local`	n/a	`--role`, `--peer-device-id`	Open a local-radio bind window. Drives the upstream wfb-ng bind protocol via the agent’s REST. Returns the terminal session state when the protocol completes (≤60s).
`ados radio pair status`	n/a	`--json`	Print pair state for this rig.
`ados radio pair unpair`	n/a	`--yes`	Wipe pair keys and clear pair state.
`ados radio set-tx-power`	`dbm`	n/a	Set the WFB-ng TX power in dBm. Refused above the configured ceiling.
`ados radio status`	n/a	`--json`	Show the current WFB-ng link status.
`ados radio test`	n/a	n/a	Bench bring-up sweep: walk through 1, 5, 10 dBm and report effect.

ados radio set-tx-power is refused above tx_power_max_dbm. ados radio pair local opens a local over-radio bind window; run it on both nodes within the window. ados radio pair auto on re-arms auto-pair only while unpaired. TX power limits, channels and link automation are on WFB-ng. Binding is on WFB-ng pairing.

`ados config`

Inspect and migrate /etc/ados/config.yaml. A migration runs under the config lock and keeps keys the current schema does not know.

Command	Arguments	Options	Description
`ados config migrate`	n/a	`--check`, `--json`	Bring /etc/ados/config.yaml to the current shape, under the lock.
`ados config status`	n/a	`--json`	Show pending config migrations without writing anything.

ados config migrate --check reports what would change and writes nothing. See Configuration.

`ados mcp`

Token acceptance at the LAN auth edge is off by default. A minted token is honoured only after ados mcp enable.

Command	Arguments	Options	Description
`ados mcp disable`	n/a	`--no-restart`	Stop honoring scoped MCP tokens at the LAN auth edge (needs sudo).
`ados mcp enable`	n/a	`--no-restart`	Accept scoped MCP tokens at the LAN auth edge (needs sudo).
`ados mcp mint`	n/a	`--label`, `--scope`, `--ttl-days`, `--node`	Mint a scoped MCP token (shown once).
`ados mcp revoke`	`token_id` (optional)	`--all`	Revoke one token by id, or —all.
`ados mcp status`	n/a	`--json`	Show the MCP token acceptance posture and minted tokens.

ados mcp enable and disable need sudo; --no-restart writes the config without restarting the control front. ados mcp mint requires --scope (repeatable); --ttl-days defaults to 30 and --node adds an advisory fleet-connector allowlist. ados mcp revoke --all revokes every token by rotating the salt. Scopes are read, safe_write, admin, flight, destructive and secret_read. See MCP server.

`ados record`

Command	Arguments	Options	Description
`ados record clip`	n/a	`--path`, `--start`, `--duration`, `--output` / `-o`	Cut an fMP4 clip out of the recorded segments.
`ados record list`	n/a	`--path`, `--json`	List on-disk captures, or a stream’s playback segments with —path.
`ados record start`	n/a	`--hint`, `--json`	Begin a capture on the ground station.
`ados record stop`	n/a	`--json`	End the in-flight capture.

Recording is continuous and segmented, so clip cuts from segments already on disk rather than starting a new capture. See Video pipeline.

Next steps

Terminal dashboard

The live view ados opens in a terminal.

REST API

The HTTP API the CLI and Mission Control call.

Drone Agent diagnostics

Read ados diag verdicts in depth.

Configuration

The config file and its schema.

Get started

Set up and use

Link, video and flight systems

Reference

Diagnose

All commands

Subgroups

`ados`

`ados status`

`ados update` and `ados uninstall`

`ados plugin`

`ados diag`

`ados hardware`

`ados logs`

`ados network`

`ados profile`

`ados radio`

`ados config`

`ados mcp`

`ados record`

Next steps

Terminal dashboard

REST API

Drone Agent diagnostics

Configuration

​All commands

​Subgroups

​ados

​ados status

​ados update and ados uninstall

​ados plugin

​ados diag

​ados hardware

​ados logs

​ados network

​ados profile

​ados radio

​ados config

​ados mcp

​ados record

​Next steps

Terminal dashboard

REST API

Drone Agent diagnostics

Configuration

All commands

Subgroups

`ados`

`ados status`

`ados update` and `ados uninstall`

`ados plugin`

`ados diag`

`ados hardware`

`ados logs`

`ados network`

`ados profile`

`ados radio`

`ados config`

`ados mcp`

`ados record`

Next steps