auth - floo

The CLI stores its API key in ~/.floo/config.json. Sign in with the device-code flow in your browser.

floo auth login

The CLI shows a one-time code, opens your browser, and waits for you to finish. If the stored key is still valid, login exits early unless you pass --force.

Flags

Flag	Description
`--api-key KEY`	Use an existing API key instead of browser auth (for scripts and agents)
`--force`	Skip existing key validation and force re-authentication

Examples

# Interactive (opens browser)
floo auth login

# Non-interactive (for scripts and CI)
floo auth login --api-key floo_abc123...

# Force re-authenticate even if already logged in
floo auth login --force

JSON output

{
  "success": true,
  "data": {
    "email": "you@example.com"
  }
}

When the stored key is still valid, data also carries "already_authenticated": true.

Errors

Code	Meaning
`DEVICE_CODE_EXPIRED`	The device code expired before authentication completed. Run `floo auth login` again.
`DEVICE_AUTH_DENIED`	Authorization was denied in the browser.
`WAITLISTED`	Your account is on the waitlist. You are notified when access is granted.
`CONFIG_ERROR`	Failed to save credentials. Check `~/.floo/config.json` permissions.

logout

Clear stored credentials from ~/.floo/config.json.

floo auth logout

JSON output

{
  "success": true,
  "data": null
}

whoami

Show the signed-in user: email, masked API key, and display name.

floo auth whoami

✓ Logged in as Pat (pat@example.com, key: floo_abc1...ef23)

JSON output

{
  "success": true,
  "data": {
    "email": "pat@example.com",
    "api_key": "***REDACTED***",
    "name": "Pat"
  },
  "contains_secrets": true
}

--json redacts api_key unless you pass the global --reveal-secrets flag, which prints the masked key. name is present only when a display name is set.

Errors

Code	Meaning
`NOT_AUTHENTICATED`	No stored credentials. Run `floo auth login`.

token

Print the raw API key to stdout, for piping into other tools.

floo auth token

Human mode prints only the key. With --json, the key is redacted unless you pass the global --reveal-secrets flag:

{
  "success": true,
  "data": {
    "api_key": "***REDACTED***"
  },
  "contains_secrets": true
}

Errors

Code	Meaning
`NOT_AUTHENTICATED`	No stored credentials. Run `floo auth login`.

update-profile

Update your display name.

floo auth update-profile --name "Pat"

Flags

Flag	Description
`--name NAME`	New display name

JSON output

{
  "success": true,
  "data": {
    "name": "Pat"
  }
}

​login

​Flags

​Examples

​JSON output

​Errors

​logout

​JSON output

​whoami

​JSON output

​Errors

​token

​Errors

​update-profile

​Flags

​JSON output

login

Flags

Examples

JSON output

Errors

logout

JSON output

whoami

JSON output

Errors

token

Errors

update-profile

Flags

JSON output