{
  "description": "Show an RSA SecurID-compatible tokencode or import a token into ~/.stokenrc. PIN and password prompts stay interactive; export, show and issue are left out.",
  "name": "stoken",
  "subcommands": [
    {
      "name": "tokencode",
      "description": "Print the current or next tokencode of the imported token.",
      "options": [
        {
          "names": [
            "--next"
          ],
          "description": "Generate the next tokencode instead of the current one."
        },
        {
          "names": [
            "--stdin",
            "-s"
          ],
          "description": "Read password or PIN from stdin"
        },
        {
          "names": [
            "--force",
            "-f"
          ],
          "description": "Ignore token expiration",
          "isDangerous": true
        }
      ]
    },
    {
      "name": "import",
      "description": "Decode a token string or sdtid file and write it to ~/.stokenrc. Token strings are secrets; prefer a file.",
      "options": [
        {
          "names": [
            "--file"
          ],
          "description": "Token file (sdtid)",
          "args": {
            "name": "file",
            "isOptional": false,
            "template": "filepaths"
          }
        },
        {
          "names": [
            "--token"
          ],
          "description": "Appears in shell history; prefer a file.",
          "args": {
            "name": "token",
            "description": "Appears in shell history; prefer a file.",
            "isOptional": false
          }
        },
        {
          "names": [
            "--force"
          ],
          "description": "Overwrite existing token",
          "isDangerous": true
        }
      ]
    }
  ]
}