diff --git a/docker-compose.yml b/docker-compose.yml
index c74016764..b3682ea1f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -119,6 +119,8 @@ services:
       KNOT_SEALED_KEY_FILE: /home/git/keys/sealed.bin
       KNOT_MASTER_KEY_ENV: KNOT_MASTER_KEY
       KNOT_MASTER_KEY: "9MfYcpOFaJYNzYJziRP3rrkM7DJdxQH/Hjey3LuwPF4=" # dev only
+      KNOT_LEGACY_ADMIN_SECRET_ENV: KNOT_LEGACY_ADMIN_SECRET
+      KNOT_LEGACY_ADMIN_SECRET: super-strong-devonly-key
       KNOT_PLC_DIRECTORY: https://plc.tngl.boltless.dev
       KNOT_APPVIEW_ENDPOINT: https://tngl.boltless.dev
       KNOT_EXTRA_CA_FILE: /etc/ssl/certs/tngl.crt
diff --git a/localinfra/scripts/knotadmin/create-invite-code.sh b/localinfra/scripts/knotadmin/create-invite-code.sh
new file mode 100755
index 000000000..2c677ad6e
--- /dev/null
+++ b/localinfra/scripts/knotadmin/create-invite-code.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+set -o errexit
+set -o nounset
+set -o pipefail
+
+KNOT_HOSTNAME=knot2.tngl.boltless.dev
+KNOT_LEGACY_ADMIN_SECRET=super-strong-devonly-key
+
+curl \
+  --fail \
+  --silent \
+  --show-error \
+  --request POST \
+  --user "admin:${KNOT_LEGACY_ADMIN_SECRET}" \
+  --header "Content-Type: application/json" \
+  --data '{"useCount": 1}' \
+  "https://${KNOT_HOSTNAME}/xrpc/org.tangled.temp.server.createInviteCode" | jq --raw-output '.code'