tenderly logout command terminates your current Tenderly CLI session by removing stored authentication credentials from your local configuration.
Usage
Prerequisites
You must be logged in to use this command. If you’re not authenticated, the CLI will inform you that you need to log in first.
Basic Usage
What Gets Removed
The logout command clears the following credentials from your global configuration (~/.tenderly/config.yaml):
- Access Key - Your authentication token
- Access Key ID - Token identifier (for email-based logins)
- Token - Legacy authentication token
- Email - Your account email address
- Organization Name - Organization account name
- Username - Your Tenderly username
- Account ID - Your unique account identifier
Behavior
Revoke Token (Email Login Only)
If you logged in using email/password (not access key), the CLI:
- Makes an API call to revoke the session token
- Ensures the token cannot be used for future requests
If you logged in with
--access-key, the key is NOT revoked on the server. You must manually revoke it in the Tenderly dashboard if needed.Examples
Standard Logout
Logout and Re-login
Switch between different accounts:Verify Logout
Confirm you’re logged out:Use Cases
Switch Accounts
When working with multiple Tenderly accounts:Security Best Practice
Before leaving a shared workstation:CI/CD Cleanup
In automated pipelines, clean up credentials after tasks:Troubleshooting Authentication
If experiencing authentication issues:Authentication Method Differences
Email/Password Login
When logged in via email:- Token is revoked on the server
- Session cannot be restored
- Must re-enter credentials to log back in
Access Key Login
When logged in via access key:- Access key is NOT revoked on the server
- Only removed from local configuration
- The same access key can be used to log back in
- Must manually revoke in dashboard for full invalidation
Configuration Changes
Before logout, your~/.tenderly/config.yaml might look like:
Before Logout
After Logout
Error Scenarios
Not Logged In
Token Revocation Failure
If the server-side token revocation fails (network issues, etc.):- The error is logged silently (debug level)
- Local credentials are still cleared
- Logout still succeeds from a local perspective
Even if server-side revocation fails, your local session is terminated. The token may remain valid on the server until it expires.
Security Considerations
Local Credential Storage
Credentials are stored in:- The file itself remains
- File permissions are unchanged
- Other Tenderly configuration remains
Access Key Management
Shared Environments
On shared systems:Related Commands
tenderly login- Authenticate with Tenderlytenderly whoami- Check current authentication statustenderly login --force- Switch to a different account
Next Steps
After logging out:- Log back in: Use
tenderly loginto authenticate again - Switch accounts: Use
tenderly login --forceto log in with different credentials - Manage access keys: Visit the Tenderly dashboard to manage access keys