Signing up
Create or join a Libretto Cloud organization, store a local session, and issue API keys for cloud runs.
This page is about authenticating the CLI and API client to Libretto Cloud. For signing your workflows into target websites, see Website authentication.
Before you start
The examples below assume Libretto is installed in your project and runnable with
npx libretto.Create a new user account and organization
Use
auth signup when you are creating a brand new Libretto Cloud organization:1npx libretto cloud auth signup
The CLI opens the signup page in your browser and waits while you create the account. You can sign up with Google or with email and password. If you use email and password, open the verification link in the same browser so the website can finish setup. After the website approves the signup, the CLI stores the Libretto Cloud session in
~/.libretto/auth.json.A Libretto user can only belong to one organization at a time. If your team already has an organization, use an invite instead of creating a second account.
If the organization slug is already taken, choose a different slug in the website signup form.
Log in to an existing account
Use
auth login when the account already exists:1npx libretto cloud auth login
The CLI opens the login page in your browser and waits while you sign in with Google or email and password. After the website approves the login, the CLI stores the Libretto Cloud session in
~/.libretto/auth.json.Reset a forgotten password
Open the Libretto Cloud login page and use the forgot-password action to request a password reset email. After you choose a new password from the reset link, run
auth login again to save a fresh local session.To clear local credentials:
1npx libretto cloud auth logout
Check the active identity
Use
auth whoami to confirm which Libretto Cloud account the CLI is using:1npx libretto cloud auth whoami
If
LIBRETTO_API_KEY is set, the CLI prefers that key over the stored session cookie.Invite a teammate
Use
auth invite from an account that can manage members in the active organization:1npx libretto cloud auth invite teammate@example.com --role member
The command sends an invitation email to the teammate and prints the invite link for manual testing or support.
Accept an invite
Open the invitation link from the email. The website guides you through signing in or creating the invited account, then accepts the invitation. If you create the invited account with email and password, verify email from the same browser; after verification, the website returns to the invite and accepts it.
If you are already signed in, invite acceptance only works when that account is not already a member of another organization.
Issue an API key
Use API keys for project
.env files, CI, or other non-interactive Libretto Cloud runs:1npx libretto cloud auth api-key issue --label laptop-dev
The command prints the raw key once. The CLI does not store that key on disk for you.
Add it to your project
.env file:1LIBRETTO_API_KEY=<issued-key>
To inspect existing keys:
1npx libretto cloud auth api-key list
To revoke a key:
1npx libretto cloud auth api-key revoke <key-id>
Troubleshooting
- If signup fails because the email already exists, log in to that account or delete the existing Libretto Cloud account before retrying.
- If an invite fails for a logged-in user, make sure that user is not already a member of another Libretto organization.