diff --git a/cmd/zrok/access_private.go b/cmd/zrok/access_private.go
new file mode 100644
index 00000000..9ee1f999
--- /dev/null
+++ b/cmd/zrok/access_private.go
@@ -0,0 +1,21 @@
+package main
+
+import "github.com/spf13/cobra"
+
+type accessPrivateCommand struct {
+	cmd *cobra.Command
+}
+
+func newAccessPrivateCommand() *accessPrivateCommand {
+	cmd := &cobra.Command{
+		Use:   "private <serviceToken>",
+		Short: "Create a private frontend to access a service",
+		Args:  cobra.ExactArgs(1),
+	}
+	command := &accessPrivateCommand{cmd: cmd}
+	cmd.Run = command.run
+	return command
+}
+
+func (cmd *accessPrivateCommand) run(_ *cobra.Command, args []string) {
+}
diff --git a/cmd/zrok/main.go b/cmd/zrok/main.go
index 0be357cf..f092ad71 100644
--- a/cmd/zrok/main.go
+++ b/cmd/zrok/main.go
@@ -32,6 +32,11 @@ var verbose bool
 var panicInstead bool
 var apiEndpoint string
 
+var accessCmd = &cobra.Command{
+	Use:   "access",
+	Short: "Access services",
+}
+
 var httpCmd = &cobra.Command{
 	Use:   "http",
 	Short: "HTTP endpoint operations",