> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mossdesk.com/llms.txt
> Use this file to discover all available pages before exploring further.

# auth

> Authenticate the CLI via browser login or API key.

Two ways to authenticate: browser-based SSO (`moss login`) for interactive use, or API key (`moss auth login --key ...`) for scripting and CI/CD.

## moss login

Log in via your browser. This is the recommended method for interactive use — it opens the MossDesk dashboard, you authorize the CLI, and credentials are saved automatically.

```bash theme={null}
moss login
```

```bash theme={null}
moss login --no-browser --timeout 180
```

| Option                | Required | Description                                                                       |
| --------------------- | -------- | --------------------------------------------------------------------------------- |
| `--no-browser`        | No       | Print the URL instead of opening a browser (useful for headless/SSH environments) |
| `--timeout <seconds>` | No       | Timeout in seconds (default: `120`)                                               |

<Tip>
  `moss login` is a top-level command, not under `auth`. It's the fastest way to get started.
</Tip>

## moss auth login

Save an API key for a workspace. Use this for non-interactive environments like CI pipelines or automation scripts.

```bash theme={null}
moss auth login --key moss_k_your_api_key_here
```

| Option             | Required | Description                    |
| ------------------ | -------- | ------------------------------ |
| `--key <key>`      | Yes      | API key (`moss_k_...`)         |
| `--workspace <id>` | No       | Workspace ID to associate with |

The key is stored in `~/.moss/config.json`. If `--workspace` is provided, it becomes the active workspace.

## moss auth logout

Remove saved credentials.

```bash theme={null}
moss auth logout
```

| Option             | Required | Description                                     |
| ------------------ | -------- | ----------------------------------------------- |
| `--workspace <id>` | No       | Workspace to remove (default: active workspace) |

## moss auth whoami

Show the current authentication context — user info and active workspace.

```bash theme={null}
moss auth whoami
```

```bash theme={null}
moss auth whoami --json
```

```json theme={null}
{
  "data": {
    "user_id": "usr_abc123",
    "email": "you@example.com",
    "workspace_id": "ws_abc123",
    "scope": "full"
  }
}
```