Skip to main content
Create or join a Libretto Cloud organization, store a local session, and issue API keys for cloud runs.
This page is about authenticating the CLI and API client to Libretto Cloud. For signing your workflows into target websites, see Website authentication.

​
Before you start

The examples below assume Libretto is installed in your project and runnable with npx libretto.

​
Create a new user account and organization

Use auth signup when you are creating a brand new Libretto Cloud organization:
The CLI opens the signup page in your browser and waits while you create the account. You can sign up with Google or with email and password. If you use email and password, open the verification link in the same browser so the website can finish setup. After the website approves the signup, the CLI stores the Libretto Cloud session in ~/.libretto/auth.json.
A Libretto user can only belong to one organization at a time. If your team already has an organization, use an invite instead of creating a second account.
If the organization slug is already taken, choose a different slug in the website signup form.

​
Log in to an existing account

Use auth login when the account already exists:
The CLI opens the login page in your browser and waits while you sign in with Google or email and password. After the website approves the login, the CLI stores the Libretto Cloud session in ~/.libretto/auth.json.

​
Reset a forgotten password

Open the Libretto Cloud login page and use the forgot-password action to request a password reset email. After you choose a new password from the reset link, run auth login again to save a fresh local session. To clear local credentials:

​
Check the active identity

Use auth whoami to confirm which Libretto Cloud account the CLI is using:
If LIBRETTO_API_KEY is set, the CLI prefers that key over the stored session cookie.

​
Invite a teammate

Use auth invite from an account that can manage members in the active organization:
The command sends an invitation email to the teammate and prints the invite link for manual testing or support.

​
Accept an invite

Open the invitation link from the email. The website guides you through signing in or creating the invited account, then accepts the invitation. If you create the invited account with email and password, verify email from the same browser; after verification, the website returns to the invite and accepts it. If you are already signed in, invite acceptance only works when that account is not already a member of another organization.

​
Issue an API key

Use API keys for project .env files, CI, or other non-interactive Libretto Cloud runs:
The command prints the raw key once. The CLI does not store that key on disk for you. Add it to your project .env file:
To inspect existing keys:
To revoke a key:

​
Troubleshooting

  • If signup fails because the email already exists, log in to that account or delete the existing Libretto Cloud account before retrying.
  • If an invite fails for a logged-in user, make sure that user is not already a member of another Libretto organization.

Deployments

Deploy workflows to Libretto Cloud and investigate cloud runs.

Billing

Open the plans page and manage your subscription.