auth

Manage the local daemon’s authentication: a single user account (for the Web UI) and any number of API keys (for programmatic access). These commands work offline against ~/.snippbot/auth.db, so they function even when the daemon is not running.

Note

This is separate from the Singularity Marketplace authentication — see snippbot marketplace login for that.

Overview

snippbot auth create-user             # Create/reset the daemon user
snippbot auth change-password         # Change the user password
snippbot auth status                  # Show user + active API keys
snippbot auth create-key              # Generate an API key
snippbot auth list-keys               # List API keys
snippbot auth revoke-key <id>         # Revoke an API key
snippbot auth regenerate-key <id>     # Revoke + recreate with same name

---

snippbot auth create-user

Create the daemon user account. The local daemon follows a single-user model; re-creating requires --force and deletes the prior account along with all its API keys.

snippbot auth create-user
snippbot auth create-user --username admin --force

Option	Description
--username	Username (min 3 chars). Prompted if omitted.
--password	Password (min 8 chars). Prompted hidden + confirmed.
--force	Override an existing account (deletes the old account)

---

snippbot auth change-password

Change the user password. Requires the current password for verification. All active sessions are revoked on success.

snippbot auth change-password

Both --current-password and --new-password are prompted hidden; the new password is confirmed.

---

snippbot auth status

Show the user account (if any) and all active API keys.

snippbot auth status

Sample output:

User: admin
  Created: 2026-04-10T12:34:56
  Last login: 2026-04-15T09:12:03

API Keys: 2 active
┌──────────┬────────────┬──────────────┬─────────────┐
│ Name     │ Prefix     │ Created      │ Last Used   │
├──────────┼────────────┼──────────────┼─────────────┤
│ my-ci    │ sk-snpb-   │ 2026-04-11   │ 2026-04-15  │
│ backup   │ sk-snpb-   │ 2026-04-12   │ never       │
└──────────┴────────────┴──────────────┴─────────────┘

---

snippbot auth create-key

Generate a new API key.

snippbot auth create-key --name "my-script"
snippbot auth create-key                       # Prompts for name

Caution

The raw key is displayed exactly once. Store it securely — there is no way to retrieve it again. If lost, revoke and regenerate.

---

snippbot auth list-keys

List API keys. Revoked keys are hidden unless --all is passed.

snippbot auth list-keys                # Active only
snippbot auth list-keys --all          # Include revoked

---

snippbot auth revoke-key

Revoke a key by ID. The key stops working immediately; its ID stays in the database for audit.

snippbot auth revoke-key abc123
snippbot auth revoke-key abc123 --yes   # Skip confirmation

---

snippbot auth regenerate-key

Atomically revoke the old key and create a new one with the same human-readable name. The old key stops working; the new key is shown once.

snippbot auth regenerate-key abc123 --yes

---

Related

• secrets — encrypted vault for third-party API keys (Anthropic, OpenAI, etc.)
• API Reference — using API keys against the daemon’s REST surface