Authentication

This page covers the CLI and the local MCP server. AI tools connected to the hosted MCP server sign in with OAuth instead; see MCP authentication.

Browser Login

The primary way to authenticate:

monito auth login

This opens your browser for OAuth authentication (email/password, GitHub, or Google). After signing in, your token is stored in the local config file.

Browser login stores an interactive session token. Session tokens are for local use and expire after about 7 days.

To authenticate against a custom host:

monito auth login --host https://your-instance.example.com

Environment Variable

For CI/CD and AI agents, set the MONITO_TOKEN environment variable:

export MONITO_TOKEN="your-token"

The env var takes priority over the stored config token.

CI / API Keys

Manage long-lived API keys from Dashboard → Developer settings. Each key is shown once when it is created, so store it in your secret manager before closing the receipt.

You can also create a key from the CLI:

monito auth login
monito auth create-key --name "GitHub Actions"

The key is printed once. Store it in your CI secrets as MONITO_TOKEN:

export MONITO_TOKEN="monito_..."

API keys work with the same CLI commands as browser login:

monito project run <project-id> --wait --json
monito scenario run <scenario-id> --wait --json

List and revoke keys from the dashboard or an authenticated shell:

monito auth keys list
monito auth keys revoke <api-key-id>

You can retrieve your token for scripting:

monito auth token

This prints the raw token to stdout (no newline), making it easy to pipe:

export MONITO_TOKEN=$(monito auth token)

Custom Host

To use a self-hosted Monito instance, set the host via environment variable:

export MONITO_HOST="https://your-instance.example.com"

Or set it in the config:

monito config set host https://your-instance.example.com

Check Status

monito auth status

Shows whether you're authenticated, the user email, and the current host. Supports --json for structured output.

Logout

monito auth logout

Removes the stored token and user info from the local config file.

Config File

The config file is stored at ~/.config/monito/config.json (or $XDG_CONFIG_HOME/monito/config.json). File permissions are set to 0600 (owner read/write only).

To find the config file path:

monito auth config-path