CLI Reference

Command	Does
testdata generate	Generate a synthetic CMF fixture and answer-key.json
export	Export identities from a source (flatfile, kratos, keycloak) into CMF
map	Scaffold or update the CMF → target field mapping
validate	Dry-run a CMF file against a target’s capabilities (no network calls)
import auth0	Chunk, submit, poll, and import a CMF file into an Auth0 tenant
import kratos	Create Ory Kratos identities from a CMF file via the Admin API
import keycloak	Create Keycloak users from a CMF file via the Admin API
diff auth0	Reconcile a CMF file against a live Auth0 tenant
diff kratos	Reconcile a CMF file against a live Ory Kratos instance
diff keycloak	Reconcile a CMF file against a live Keycloak realm

End-to-end flow

testdata generate ─┐
                    ├─▶ validate ─▶ import auth0/kratos/keycloak ─▶ diff auth0/kratos/keycloak
export ─▶ map ──────┘

testdata generate feeds the same validate → import → diff path as a real export, so it’s a genuine rehearsal rather than a separate toy path.