diff --git a/changelog/unreleased/add-missing-machineauth-ocis-subcommand.md b/changelog/unreleased/add-missing-machineauth-ocis-subcommand.md
new file mode 100644
index 00000000000..4a60a7a7315
--- /dev/null
+++ b/changelog/unreleased/add-missing-machineauth-ocis-subcommand.md
@@ -0,0 +1,5 @@
+Bugfix: add `ocis storage-auth-machine` subcommand
+
+We added the ocis subcommand to start the machine auth provider.
+
+https://github.com/owncloud/ocis/pull/2910
\ No newline at end of file
diff --git a/ocis/pkg/command/storageauthmachine.go b/ocis/pkg/command/storageauthmachine.go
new file mode 100644
index 00000000000..573266ca9d0
--- /dev/null
+++ b/ocis/pkg/command/storageauthmachine.go
@@ -0,0 +1,32 @@
+//go:build !simple
+// +build !simple
+
+package command
+
+import (
+	"github.com/owncloud/ocis/ocis-pkg/config"
+	"github.com/owncloud/ocis/ocis/pkg/register"
+	"github.com/owncloud/ocis/storage/pkg/command"
+	"github.com/urfave/cli/v2"
+)
+
+// StorageAuthMachineCommand is the entrypoint for the reva-auth-machine command.
+func StorageAuthMachineCommand(cfg *config.Config) *cli.Command {
+	return &cli.Command{
+		Name:     "storage-auth-machine",
+		Usage:    "Start storage auth-machine service",
+		Category: "Extensions",
+		//Flags:    flagset.AuthBearerWithConfig(cfg.Storage),
+		Before: func(ctx *cli.Context) error {
+			return ParseStorageCommon(ctx, cfg)
+		},
+		Action: func(c *cli.Context) error {
+			origCmd := command.AuthMachine(cfg.Storage)
+			return handleOriginalAction(c, origCmd)
+		},
+	}
+}
+
+func init() {
+	register.AddCommand(StorageAuthMachineCommand)
+}