kf login

Save GraphQL endpoint and credentials to the active profile.

Stores endpoint, tenant, environment, and a redacted API key preview in the active profile. With --oauth, runs the device authorization flow and writes credentials.json (mode 0600).

kf login

Save GraphQL endpoint, tenant, environment, and a redacted API key preview to the active profile.

Use --api-key-stdin to avoid placing the API key on the argv. Use --oauth to run the device authorization flow instead of API-key transport.

FlagRequiredDescription
--endpoint <url>yesGraphQL endpoint URL.
--api-key <key>noAPI key argument (prefer --api-key-stdin).
--api-key-stdinnoRead the API key from stdin.
--tenant <id>noDefault tenant for this profile.
--environment <id>noDefault environment for this profile.
--oauthnoUse device-authorization OAuth instead of API-key transport.

Example

kf login --endpoint https://api.karmanflow.test/graphql --tenant tnt_demo --api-key-stdin
Privacy choices

This controls app-managed marketing analytics: cookie-free Plausible, optional Cloudflare Web Analytics, and first-party event logs with session-only UTM attribution. The site works without it.

Read the privacy notice