sysand auth status#

Show the credentials sysand will authenticate with.

Usage#

sysand auth status [OPTIONS]

Description#

Shows one unified view of everything sysand will authenticate with: stored index credentials (tagged Stored) and SYSAND_CRED_* environment credentials (tagged Env). Secrets are never shown. The command is local: it reads the keyring and the environment, and sends no requests.

Each stored entry shows:

  • the index key, in the exact form sysand auth logout <key> accepts, followed by its validation claim (validated (read), validated (api), validated (read, api), or not validated, which is the same outcome sysand auth login reports as stored, not validated; see Login validation);

  • covers: the URL patterns the credential covers;

  • subject: and token prefix: the identity behind the token, when a validating login learned it from the index API;

  • expires: the token expiry when known, with an (expires in N days) or (expired) qualifier;

  • shadowed by: any SYSAND_CRED_* variable whose pattern also matches this index, meaning the environment credential wins over this credential.

Each Env entry shows the variable name and its URL pattern.

Entries that apply to the default index (which is what bare commands use) are marked (default index). If the default-index chain yields more than one distinct index, a note is printed and nothing is marked; unlike login and logout, this command never errors over an ambiguous default index.

When the host has no usable keyring backend, a note says so and only environment credentials are listed. When neither source has anything, the command prints a single line:

No credentials configured (no stored credentials, no `SYSAND_CRED_*` variables).

Global options#

  • -v, --verbose: Use verbose output

  • -q, --quiet: Do not output log messages

  • --no-config: Disable discovery of configuration files [env: SYSAND_NO_CONFIG]

  • --config-file <CONFIG_FILE>: Give path to sysand.toml to use for configuration [env: SYSAND_CONFIG_FILE]

  • -h, --help: Print help

Examples#

One stored credential for the default index, shadowed by an environment credential from the same shell:

$ sysand auth status
      Stored https://sysand.com/  validated (api)  (default index)
             covers: https://sysand.com/**
             subject: user alice
             token prefix: sysand_u_1a2b3c4d
             expires: 2026-10-01 00:00:00 UTC (expires in 73 days)
             shadowed by: SYSAND_CRED_INDEX
         Env SYSAND_CRED_INDEX  https://sysand.com/**  (default index)

See also#