Quickstart

Create an API key in the ThreatOptic dashboard under Account → API keys. Keys are shown once, start with top_, and inherit your account’s permissions. The CLI cannot create or revoke keys because the /api-keys endpoints require a browser session (JWT), not an API key.

$ threatoptic auth login
ThreatOptic API key:
Logged in as dev@example.com
Credentials saved to /Users/you/.config/threatoptic/config.yaml

$ threatoptic whoami
dev@example.com  (user 0192f3a1-..., roles: member)

$ threatoptic check stripe.com
kind: domain
subject: stripe.com
present: true
mcp: false
generated: 3
...

$ threatoptic whoami --json
{"email":"dev@example.com","id":"0192f3a1-...","roles":["member"]}

auth login verifies the key against GET /auth/me before writing anything, so a bad paste fails immediately rather than on some later command.