Skip to content

suya auth

suya auth manages how the CLI authenticates against the Subaya API. For the conceptual overview of both credential modes, see Authentication & API keys.

Sign in interactively with the OAuth browser flow. The CLI opens a browser using a loopback redirect and stores the resulting token locally.

Terminal window
suya auth login
suya auth login --no-browser
Flag Description
--no-browser Skip launching a browser; use the manual-code fallback for remote or headless shells.

For agents and CI, prefer setting SUBAYA_API_KEY instead of logging in — no browser is involved.

Log out and revoke the locally stored token.

Terminal window
suya auth logout

Show your local auth status. This does not call the server — it reports what credentials the CLI has on disk.

Terminal window
suya auth status

Call the server (/api/auth/cli/whoami) and print the identity your current credential resolves to. Use this to confirm an SUBAYA_API_KEY is wired up correctly.

Terminal window
export SUBAYA_API_KEY="sk_..."
suya auth whoami
  • Quickstart — sign in and run your first simulation.
  • CLI overview — global flags and the full command surface.