Skip to main content
The CLI resolves credentials from three sources, in priority order: the global --token flag, the VF_TOKEN environment variable, and credentials stored locally by an interactive login.

​
Interactive login

Walks you through configuring credentials interactively. All fields are optional, press Enter to skip any field you don’t need.

​
Check who you are

Shows which credential source is configured (flag, environment variable, keychain, or config file), with the token masked. Also available as the top-level alias vf whoami. whoami runs entirely offline. It does not validate the token against the API, so for a live check run a real command such as vf workspace list.

​
Sign out

Clears all stored credentials.

​
Non-interactive use (CI and coding agents)

The CLI reads the VF_TOKEN environment variable natively, so there is no login step and nothing stored on disk:
Every command also accepts the token directly with the global --token flag:
Store the token as a secret in your CI provider. Never commit it: the token grants the same access as your account. Full flag reference: vf auth.