ax auth
Sign in and manage CLI credentials.
| Command | Use |
|---|---|
auth signup | Create an account, create a temporary account, or claim one. |
auth login | Sign in with a browser device code or an API key. |
auth status | Show the identity the platform resolves for you. |
auth connect | Redeem a one-time code from Fiveonefour's MCP connector. |
auth logout | Forget the local credentials file. |
auth whoami prints the detailed resolved identity. auth status prints the
short sign-in summary; its --json form uses the detailed identity object.
auth signup
Create an account in the browser and sign the CLI in to it, or create or claim a temporary account.
ax auth signup [--temp-account | --claim-account] [--no-browser] [--host-pattern <PATTERN>]| Argument / flag | What it does |
|---|---|
--temp-account | Create a temporary account without browser sign-up and sign the CLI in to it. Creating one accepts the Terms of Use. |
--claim-account | Print, and open in the browser, a single-use link that makes the temporary account permanent. |
--no-browser | Print the sign-up or claim URL instead of opening a browser. |
--host-pattern <PATTERN> | Save the credential under a wildcard host pattern instead of this host. Browser sign-up only. |
--temp-account is refused while the CLI is signed in, while it holds a
temporary account that has not expired, and after one has expired.
--claim-account is refused without a temporary account. Plain ax auth signup
is refused while the CLI holds a temporary account that has not expired; claim it
instead.
Examples:
# Start without signing up; the account lasts 24 hours
ax auth signup --temp-account
# Make the temporary account permanent from an SSH session
ax auth signup --claim-account --no-browserauth login
Sign in with a browser device code, or pass an API key directly.
ax auth login| Argument / flag | What it does |
|---|---|
--token <api-key> | Use this API key instead of the interactive prompt (for CI and scripts). |
--org <org-id-or-slug> | Select the org when the key belongs to several. |
--no-browser | Print the verification URL instead of opening a browser. |
Examples:
# CI: sign in non-interactively with an API key
ax auth login --token "$AX_API_KEY"
# SSH session: print the verification URL instead of opening a browser
ax auth login --no-browserauth status
Show the identity and org the platform resolves for your saved credentials.
ax auth status [--json]With a temporary account, ax auth whoami also shows account: temporary, the
time remaining, and the claim command. The JSON from ax auth whoami --json or
ax auth status --json adds temporary: true, expires_at, expires_in, and
claim_command.
auth connect
Sign the CLI in by redeeming a one-time code minted by Fiveonefour's MCP connector
(the cli_auth flow an agent starts for you).
ax auth connect --code <CODE>| Argument / flag | What it does |
|---|---|
--code <code> | Required. One-time code returned by the MCP cli_auth_start tool. |
auth logout
Revoke the saved API key on the platform (best effort) and forget the local
credentials file. To revoke any other key, use
ax api-key revoke.
ax auth logout