CLI reference
View as Markdowninsecur is experimental and prelaunch. There is no public sign-up yet, and the hosted service is not approved for valuable production secrets. Local Mode runs the development loop with no account.
insecur login
Authenticate with WorkOS AuthKit PKCE and mint a short-lived CLI credential
insecur login [options]
| Option | Description |
|---|---|
--no-open |
print the WorkOS login URL instead of opening a browser |
--callback-port <port> |
localhost callback port for PKCE login |
--callback-timeout <seconds> |
seconds to wait for the loopback PKCE callback (default: 300) |
--no-persist |
keep the session credential in process memory only instead of the sealed local session store |
--shell |
start a managed interactive shell with the session credential in the child environment only |
--device |
use the OAuth device-authorization flow for headless or remote shells that cannot open a loopback browser |
--agent-session |
mint the session agent-marked (only valid with --device) |