Auth Commands

Manage authentication for Treasure AI. Supports both browser-based OAuth and API key authentication.

tdx auth                    # Show authentication status
tdx auth status             # Alias for tdx auth
tdx auth setup              # Setup authentication interactively
tdx auth clear              # Remove credentials from system keychain

Display current authentication status and validate credentials:

tdx auth
tdx auth --profile prod

Shows the active profile, credential type (OAuth or API key), and validates by calling the TD API.

Interactive authentication setup. Choose between browser-based OAuth (recommended) or API key:

tdx auth setup
tdx auth setup --site ap01
tdx auth setup --profile prod
tdx auth setup --account-name td7060   # SSO login for a specific account

1. Select your Treasure AI site
2. Choose "Sign in with browser"
3. Optionally enter an account name for SSO routing
4. Browser opens for authentication
5. After login, tokens are saved to system keychain

OAuth tokens are stored securely in the system keychain and used automatically for subsequent commands.

1. Select your Treasure AI site
2. Choose "Use an API key"
3. Enter your API key (found at Console > API Keys)
4. Key is validated and saved to system keychain

Remove all credentials (API key and OAuth tokens) from the system keychain:

tdx auth clear
tdx auth clear --profile prod