Skip to main content
Log in, log out, and manage Baseten credentials. Each set of credentials is stored as a named profile. Select a profile per command with --profile or the BASETEN_PROFILE environment variable, or set the default with baseten auth switch. Credentials are stored in the system keyring when available, with a plaintext fallback in the config directory.

​
login

Log in to Baseten through your browser (OAuth device flow) or API key, storing a named profile. By default, opens a browser for interactive login. Use --web to skip prompts (suitable for non-TTY environments). Use --with-api-key to provide an API key (reads from stdin, or prompts interactively if TTY). Browser logins name the profile after your email; API key logins require an explicit --profile name. The new profile becomes current unless --no-switch is given.

​
Options

​
BOOL
Store credentials in plain text instead of system keyring
​
TEXT
Filter JSON output with a jq expression; implies —output json (or jsonl for streamed commands)
​
BOOL
Store the profile without making it the current profile
​
TEXT
default:"text"
Output formatOne of: text, json, jsonl, none
​
TEXT
Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile
​
TEXT
Baseten remote URL for this profile (default https://app.baseten.co)
​
BOOL
Use browser login without interactive prompts
​
BOOL
Read API key from stdin
​
BOOL
Enable verbose logging

​
Examples

Browser-based login (OAuth device flow)
Provide an API key on stdin under a named profile

​
Filter output with --jq

Print just the new profile name

​
Output

Text mode (--output text): Prints “Logged in as email (workspace) as profile profile” to stdout on success. JSON mode (--output json): payload type cmd.AuthLoginResult.

​
logout

Remove a stored profile and its credentials. Defaults to the current profile; pass --profile to choose another. For OAuth credentials, also revokes the session.

​
Options

​
TEXT
Filter JSON output with a jq expression; implies —output json (or jsonl for streamed commands)
​
TEXT
default:"text"
Output formatOne of: text, json, jsonl, none
​
TEXT
Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile
​
BOOL
Enable verbose logging

​
Examples

Log out the current profile
Log out a specific profile

​
Filter output with --jq

Print just the logged-out profile name

​
Output

Text mode (--output text): Prints “Logged out profile” to stdout on success. JSON mode (--output json): payload type cmd.AuthLogoutResult.

​
switch

Set the current profile used when no profile is selected with --profile or BASETEN_PROFILE.

​
Options

​
TEXT
Filter JSON output with a jq expression; implies —output json (or jsonl for streamed commands)
​
TEXT
default:"text"
Output formatOne of: text, json, jsonl, none
​
TEXT
Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile
​
BOOL
Enable verbose logging

​
Examples

Switch to a specific profile non-interactively

​
Filter output with --jq

Print just the new current profile

​
Output

Text mode (--output text): Prints “Switched to profile” to stdout on success. JSON mode (--output json): payload type cmd.AuthSwitchResult.

​
status

Show the resolved authentication state, including the profile, remote, and auth type.

​
Options

​
TEXT
Filter JSON output with a jq expression; implies —output json (or jsonl for streamed commands)
​
TEXT
default:"text"
Output formatOne of: text, json, jsonl, none
​
TEXT
Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile
​
BOOL
Enable verbose logging

​
Examples

Show the current auth status

​
Filter output with --jq

Print just the auth type

​
Output

Text mode (--output text): Summary of the resolved profile: profile name, remote URL, and auth type. JSON mode (--output json): payload type cmd.AuthStatusResult.