​

Authentication Commands

​

tank login

tank login

​

How It Works

1. Initiates OAuth flow with the registry
2. Opens your browser to GitHub for authentication
3. Polls the registry until authorization completes
4. Stores API token in ~/.tank/config.json

​

Options

• --timeout <ms> - Authentication timeout in milliseconds (default: 300000 = 5 minutes)
• --poll-interval <ms> - Polling interval in milliseconds (default: 2000)

​

Environment Variables

• TANK_DEBUG=1 - Enable debug logging for authentication flow

​

Example Output

$ tank login
Starting login...
Opened browser for authentication.
Waiting for authorization...
✓ Logged in as [email protected]

​

Manual Browser Flow

$ tank login
Starting login...
Could not open browser automatically.
Open this URL in your browser:
  https://tank.dev/auth/cli/abc123...
Waiting for authorization...

​

Errors

• Login timed out - Authorization not completed within 5 minutes. Run tank login again.
• Failed to start auth session - Network error connecting to registry. Check your internet connection.

​

tank logout

tank logout

​

Behavior

• Removes token and user from ~/.tank/config.json
• If not logged in, prints warning and exits
• Does not revoke the token on the server (token may still be valid until expiration)

​

Example Output

$ tank logout
✓ Logged out

$ tank logout
⚠ Not logged in. Run: tank login

​

tank whoami

tank whoami

​

Behavior

• Verifies token with registry /api/v1/auth/whoami endpoint
• Displays cached user info from config
• Checks token validity and warns if expired

​

Example Output

$ tank whoami
Logged in as: Alice Developer
Email: [email protected]

$ tank whoami
Logged in as: Alice Developer (offline)
Email: [email protected]
⚠ Could not reach server to verify token. Run: tank login

$ tank whoami
✗ Token is invalid or expired. Run: tank login

$ tank whoami
⚠ Not logged in. Run: tank login

​

Use Cases

• Verify authentication before publishing
• Check which account is active in CI/CD
• Troubleshoot authentication issues

​

Configuration File

{
  "registry": "https://tank.dev",
  "token": "tank_abc123...",
  "user": {
    "name": "Alice Developer",
    "email": "[email protected]"
  }
}

​

Token Format

• skills:read - Read public and private skills you have access to
• skills:write - Publish skills to your account or organizations
• skills:admin - Manage skill versions and settings (if admin)

​

Security Best Practices

• Never commit ~/.tank/config.json to version control
• Use tank logout on shared machines
• Rotate tokens regularly (re-login)
• Use service accounts for CI/CD instead of personal accounts
• Enable debug logging only when troubleshooting (TANK_DEBUG=1)

​

CI/CD Authentication

# GitHub Actions
- name: Authenticate with Tank
  run: |
    mkdir -p ~/.tank
    echo '{"registry":"https://tank.dev","token":"'${{ secrets.TANK_TOKEN }}'"}' > ~/.tank/config.json