CLI Reference

Command	Does
testdata generate	Generate a synthetic CMF fixture and answer-key.json
prepare	Rewrite a CSV or JSON file with any column names into the columns the flat-file export reads
export	Export identities from a source (flatfile, kratos, keycloak, firebase, auth0) into CMF
map	Scaffold or update the CMF → target field mapping
validate	Dry-run a CMF file against a target’s capabilities (no network calls)
set-passwords	Give users a unique random password in a CMF file, when their real passwords aren’t known
import auth0	Chunk, submit, poll, and import a CMF file into an Auth0 tenant
import kratos	Create Ory Kratos identities from a CMF file via the Admin API
import keycloak	Create Keycloak users from a CMF file via the Admin API
import firebase	Create Firebase Authentication users from a CMF file via the Identity Toolkit API
diff auth0	Reconcile a CMF file against a live Auth0 tenant
diff kratos	Reconcile a CMF file against a live Ory Kratos instance
diff keycloak	Reconcile a CMF file against a live Keycloak realm
diff firebase	Reconcile a CMF file against a live Firebase project

End-to-end flow

testdata generate ─┐
                    ├─▶ validate ─▶ import auth0/kratos/keycloak/firebase ─▶ diff auth0/kratos/keycloak/firebase
export ─▶ map ──────┘

testdata generate feeds the same validate → import → diff path as a real export, so it’s a genuine rehearsal rather than a separate toy path.