Skip to main content
This is the only way to authenticate. No flag or prompt accepts a typed API key.
1

The CLI starts a pairing session

It prints an approval link and a QR code.
2

Open it on your phone

The link opens in the Zend app, on an approval screen that names this CLI (zend-cli on <hostname>).
3

Approve

Tap Approve and confirm it’s you.
4

The CLI saves its key

The CLI notices the approval, fetches its API key, and saves it to ~/.zend/config.json with 0600 permissions.

​
When it doesn’t finish

​
Log out

Delete ~/.zend/config.json, and revoke the key from another session with zend keys revoke.