diff --git a/cmd/cloud/rbac_cli_verify_test.go b/cmd/cloud/rbac_cli_verify_test.go
new file mode 100644
index 000000000..fbb910d90
--- /dev/null
+++ b/cmd/cloud/rbac_cli_verify_test.go
@@ -0,0 +1,17 @@
+package main
+
+import (
+	"testing"
+)
+
+func TestVerifyOptsKey(t *testing.T) {
+	// Direct test: set opts.APIKey and call createClient
+	opts.APIKey = "test-key"
+	opts.APIURL = "http://localhost:8080"
+
+	client := createClient(opts)
+	if client == nil {
+		t.Fatal("createClient returned nil")
+	}
+	t.Log("createClient returned valid client")
+}