---
title: "Login and context"
description: "Reference for the daytona login, logout, profile, and whoami commands."
---

{/* This file was generated by scripts/generate-cli-docs from the daytona CLI source. Do not edit this file directly; run pnpm generate:cli-docs:v2. */}

## Commands

This page documents the following commands. Global flags that apply to every command are listed under [`daytona`](/docs/v2/cli#daytona).

| Command | Description |
| :------ | :---------- |
| [`daytona login`](#daytona-login) | Sign in with your browser, a device code, or a static credential |
| [`daytona logout`](#daytona-logout) | Remove the saved session from this machine |
| [`daytona profile`](#daytona-profile) | Manage named connections (API URL + credential + org/project context) |
| [`daytona whoami`](#daytona-whoami) | Show who you are, which credential is in use, and the selected org/project |

## daytona login

Sign in with your browser, a device code, or a static credential

Signs in to the Daytona API (https://api.daytona.com) and saves the session in
the active profile. For a test environment, point the CLI at another API with
DAYTONA_V2_API_URL (or DAYTONA_API_URL, or --api-url); the profile remembers it.

Default at a terminal: opens your browser (authorization code + PKCE on a
loopback redirect) and prints the URL too — nothing to type, approve and you
are done. Without a terminal (agents, CI) or inside an SSH session (where a
browser on your machine cannot reach this host's loopback redirect) the CLI
switches to the device flow automatically; --device forces it — you open a URL
on any device and enter a short code.
--token: stores a static credential (a project API key, an org API key, or any
bearer the server accepts) as-is. The CLI never inspects it; the server decides
what it may do.

After a browser or device login the CLI selects your personal organization
and its default project the first time, and remembers your last selection
afterwards. Sandbox commands then mint a short-lived project API key on your
behalf (it expires with your session).

```shell
daytona login [flags]
```

__Examples__

```shell
daytona login
daytona login --device
daytona login --token dtn_…
```

__Flags__

| Long | Short | Type | Default | Description |
| :--- | :---- | :--- | :------ | :---------- |
| `--browser` |  | `bool` |  | force the browser (loopback) flow even inside an SSH session — for when you forward the callback port with `ssh -L` |
| `--client-id` |  | `string` |  | OIDC client id override (default: the API's oidc.cli_client_id, or DAYTONA_OIDC_CLIENT_ID) |
| `--device` |  | `bool` |  | device-code login for hosts without a browser |
| `--token` |  | `string` |  | store this static credential instead of signing in |

## daytona logout

Remove the saved session from this machine

Deletes the active profile's saved tokens and cached workload keys from this
machine. Like other CLIs, this is local only: the server-side session and any
keys already copied elsewhere remain valid until they expire. Revoke a key
explicitly with 'daytona key revoke' if you need it dead now.

```shell
daytona logout
```

## daytona profile

Manage named connections (API URL + credential + org/project context)

__Commands__

| Command | Description |
| :------ | :---------- |
| [`daytona profile delete`](#daytona-profile-delete) | Delete a profile and its saved credentials |
| [`daytona profile list`](#daytona-profile-list) | List profiles |
| [`daytona profile use`](#daytona-profile-use) | Make a profile the active one |

### daytona profile delete

Delete a profile and its saved credentials

```shell
daytona profile delete <name>
```

### daytona profile list

List profiles

```shell
daytona profile list
```

### daytona profile use

Make a profile the active one

```shell
daytona profile use <name>
```

## daytona whoami

Show who you are, which credential is in use, and the selected org/project

```shell
daytona whoami
```