Skip to main content

​
Overview

The ftl auth command saves API credentials and authentication tokens to ~/.ftl/credentials. These credentials are securely loaded and used by FTL agents and services.

​
Usage

​
Parameters

​
string
required
The credential name (e.g., ANTHROPIC_API_KEY, AWS_BEARER_TOKEN_BEDROCK)
​
string
required
The credential value (API key, token, or secret)

​
Examples

​
Save Anthropic API Key

​
Save AWS Bedrock Token

​
Save OpenAI API Key

​
Credential Storage

Credentials are stored in ~/.ftl/credentials as environment variable exports:

​
Security Considerations

  • Credentials are stored in plaintext in ~/.ftl/credentials
  • Ensure this file has appropriate permissions (readable only by your user)
  • Never commit ~/.ftl/credentials to version control
  • Rotate credentials regularly

​
How Credentials Are Used

FTL loads credentials from ~/.ftl/credentials when:
  • Starting the FTL shell
  • Running ftl code tasks
  • Executing agent actions that require API access
  • Generating tests with the configured tester model
Credentials are also read from environment variables, which take precedence over the credentials file.

​
Checking Current Credentials

To see what credentials are configured:

​
Removing Credentials

To remove a credential, manually edit ~/.ftl/credentials and delete the corresponding line.

​
Common Credential Keys

​
Alternative: Environment Variables

You can also set credentials as environment variables instead of using ftl auth:
Environment variables take precedence over ~/.ftl/credentials.

​
See Also

  • ftl setup - Initial setup wizard (includes API key configuration)
  • ftl config - Configure AWS integration