Documentation
Sign in
Authenticate the CLI with a device sign-in, an API key, or an identity token.
Authenticate once with verentis login. The CLI stores your credential and API URL and reuses them
for every subsequent command.
Device sign-in (default)
With no credential flags, login starts a device sign-in — it prints a URL and a code; open the
URL in any browser (it works over SSH), confirm the code, and you're in.
verentis login --api-url https://api.verentis.dev
Non-interactive sign-in
For CI and scripts, provide a credential directly:
# API key (create one with `verentis apikey create`)
verentis login --api-url https://api.verentis.dev --api-key vrt_xxx
# Pre-issued identity token (exchanged per request for scoped access tokens)
verentis login --api-url https://api.verentis.dev --token <identity token>
Environment variables
VERENTIS_API_URL, VERENTIS_API_KEY and VERENTIS_TOKEN are honoured too, so a CI job can export
them instead of calling login.
login options
--api-url <url>Verentis API gateway URL for the target environment. Saved for later commands.
--api-key <key>A Verentis API key (vrt_…). Best for CI and automation.
--token <token>A Verentis identity token, exchanged per request for scoped access tokens.
--sealing-key <key>The platform's base64 X25519 sealing public key, used by pack --encrypt.
Who am I?
verentis whoami # identity, account, and publisher
verentis logout # clear the stored credential
Next
Set a default workspace and account so you can stop repeating flags — Context & defaults.