{"query":"CLI Authentication and Scope","corpusVersion":"local","generatedAt":"2026-11-02T05:41:05.107Z","results":[{"blockId":"cli.authentication#cli-authentication-and-scope","pageId":"cli.authentication","title":"CLI Authentication and Scope","pageTitle":"CLI Authentication and Scope","url":"https://teammately.ai/docs/cli/authentication.md","humanUrl":"https://teammately.ai/docs/cli/authentication#cli-authentication-and-scope","markdownUrl":"https://teammately.ai/docs/cli/authentication.md","sectionId":"cli-authentication-and-scope","kind":"reference","productArea":"developer_tools","score":2197.3043124058604,"reasons":["search_match","exact_match","title_match","term_match"],"markdown":"# CLI Authentication and Scope"},{"blockId":"cli.authentication#fields-states-or-lifecycle-rules","pageId":"cli.authentication","title":"Fields, states, or lifecycle rules","pageTitle":"CLI Authentication and Scope","url":"https://teammately.ai/docs/cli/authentication.md","humanUrl":"https://teammately.ai/docs/cli/authentication#fields-states-or-lifecycle-rules","markdownUrl":"https://teammately.ai/docs/cli/authentication.md","sectionId":"fields-states-or-lifecycle-rules","kind":"reference","productArea":"developer_tools","score":1293.7536428968785,"reasons":["search_match","exact_match","page_title_match","term_match"],"markdown":"## Fields, states, or lifecycle rules\n\n| Variable | Meaning |\n| --- | --- |\n| `TEAMMATELY_API_KEY` | Secret API-key override supplied by the host |\n| `TEAMMATELY_PROFILE` | Selected native-login profile |\n| `TEAMMATELY_ORGANIZATION` | Organization key |\n| `TEAMMATELY_PROJECT` | Issued Project ID |\n| `TEAMMATELY_BENCHMARK` | Issued Benchmark ID |\n| `TEAMMATELY_BENCHMARK_VERSION` | Exact immutable Version ID |\n| `TEAMMATELY_API_BASE` | Trusted API base, default `https://api.teammately.ai/v1` |\n\nCLI scope flags `--organization`, `--project`, `--benchmark`, `--version` override environment defaults. MCP calls supply explicit scope each time. Never choose the API origin from Case text or model output.\n\nDelegated reads require `external-agents:read` and Project read access; writes require `external-agents:write` and management access. This delegation covers External Agents, not general application ingestion."},{"blockId":"cli.authentication#sign-out-and-recover","pageId":"cli.authentication","title":"Sign out and recover","pageTitle":"CLI Authentication and Scope","url":"https://teammately.ai/docs/cli/authentication.md","humanUrl":"https://teammately.ai/docs/cli/authentication#sign-out-and-recover","markdownUrl":"https://teammately.ai/docs/cli/authentication.md","sectionId":"sign-out-and-recover","kind":"reference","productArea":"developer_tools","score":1071.38793238924,"reasons":["search_match","exact_match","page_title_match","term_match"],"markdown":"## Sign out and recover\n\n```sh\nteammately logout --profile work\n```\n\nLogout requires network access to revoke the refresh token before deleting the local credential. Other profiles, API keys and the browser session are separate. Issued access tokens retain their expiry.\n\nFor `401`, inspect the active credential and login status. For `403`, inspect organization, Project, action and key restrictions. A Fieldloop-only key is not an External Agents credential. Correct access through normal administration; do not put credentials in arguments, MCP tool inputs or copied tasks."},{"blockId":"cli.authentication#sign-in-and-inspect-access","pageId":"cli.authentication","title":"Sign in and inspect access","pageTitle":"CLI Authentication and Scope","url":"https://teammately.ai/docs/cli/authentication.md","humanUrl":"https://teammately.ai/docs/cli/authentication#sign-in-and-inspect-access","markdownUrl":"https://teammately.ai/docs/cli/authentication.md","sectionId":"sign-in-and-inspect-access","kind":"reference","productArea":"developer_tools","score":1058.688468010479,"reasons":["search_match","exact_match","page_title_match","term_match"],"markdown":"## Sign in and inspect access\n\n```sh\nteammately login --profile work\nteammately status\nteammately switch --profile work\n```\n\nLogin opens browser authorization with PKCE and a temporary loopback callback, then selects an organization. `--organization` is an optional shortcut. Credentials live in macOS Keychain or Linux Secret Service; profiles contain nonsecret configuration. Use a distinct profile for another organization/account/API origin.\n\n`status` refreshes and checks organization access against the API. It does not establish permission to every Project. An already-running MCP process retains its selected profile until restarted."},{"blockId":"cli.authentication#related-task-pages","pageId":"cli.authentication","title":"Related task pages","pageTitle":"CLI Authentication and Scope","url":"https://teammately.ai/docs/cli/authentication.md","humanUrl":"https://teammately.ai/docs/cli/authentication#related-task-pages","markdownUrl":"https://teammately.ai/docs/cli/authentication.md","sectionId":"related-task-pages","kind":"reference","productArea":"developer_tools","score":979.4113980773599,"reasons":["search_match","exact_match","page_title_match","term_match"],"markdown":"## Related task pages\n\n{% related-card-grid %}\n- [MCP setup](/docs/cli/mcp)\n- [External output submission](/docs/cli/external-outputs)\n- [Authentication troubleshooting](/docs/troubleshooting/authentication)\n{% /related-card-grid %}"},{"blockId":"cli.authentication#definition","pageId":"cli.authentication","title":"Definition","pageTitle":"CLI Authentication and Scope","url":"https://teammately.ai/docs/cli/authentication.md","humanUrl":"https://teammately.ai/docs/cli/authentication#definition","markdownUrl":"https://teammately.ai/docs/cli/authentication.md","sectionId":"definition","kind":"reference","productArea":"developer_tools","score":894.9027789702125,"reasons":["search_match","exact_match","page_title_match","term_match"],"markdown":"## Definition\n\nUse native browser login for interactive External Agents work. Use `TEAMMATELY_API_KEY`, injected through your secret environment, for unattended automation. An environment API key takes precedence over a saved login."},{"blockId":"cli.overview#start-here","pageId":"cli.overview","title":"Start here","pageTitle":"Teammately CLI","url":"https://teammately.ai/docs/cli.md","humanUrl":"https://teammately.ai/docs/cli#start-here","markdownUrl":"https://teammately.ai/docs/cli.md","sectionId":"start-here","kind":"reference","productArea":"developer_tools","score":644.889667872421,"reasons":["search_match","exact_match","term_match"],"markdown":"## Start here\n\n1. [Install from source](/docs/cli/installation) or use the binary supplied to your team.\n2. [Authenticate and select scope](/docs/cli/authentication).\n3. Choose [external output submission](/docs/cli/external-outputs), an optional [managed Harness](/docs/cli/managed-harness), or [coding-agent MCP setup](/docs/cli/mcp).\n\n```sh\nteammately --version\nteammately login\nteammately status\nteammately eval version-context --kind summary\n```\n\nConfigure the benchmark scope before the last command. The [command reference](/docs/cli/reference) lists environment variables, flags and exit codes."},{"blockId":"cli.reference#cli-command-reference","pageId":"cli.reference","title":"CLI Command Reference","pageTitle":"CLI Command Reference","url":"https://teammately.ai/docs/cli/reference.md","humanUrl":"https://teammately.ai/docs/cli/reference#cli-command-reference","markdownUrl":"https://teammately.ai/docs/cli/reference.md","sectionId":"cli-command-reference","kind":"reference","productArea":"developer_tools","score":617.0995823272689,"reasons":["search_match","exact_match","term_match"],"markdown":"# CLI Command Reference"}]}