Sign in

GitHub authenticates downloads. ATFGraph sign-in connects your company identity to your teams and permissions.

atfg login
atfg whoami
atfg doctor

Complete the browser flow and wait for the terminal to confirm your email. whoami shows your teams and roles; doctor checks your local tools, session and service connection.

Shared with Console

The CLI and desktop Console use the same saved session on the same computer. Sign in first, then open Console. If it was already open without a session, quit and reopen it after login.

On macOS, the session is stored in Keychain when available. It contains an access token and refresh token, not a permanent graph-server API key. Console may ask permission to access the entry. Its current internal name is travellabs.atfgraph, account session. A Keychain password prompt refers to your Mac/Keychain password.

A VM or container has its own session

Signing in inside Linux does not sign in your Mac. Run the new CLI's login command on the Mac before opening Console. If a sandbox forwards port 8020, stop that forwarding during Mac login, then restart it.

For a terminal without a browser:

atfg login --no-browser

Open the printed URL manually. The default callback listens on loopback; a normal Mac install does not need --listen-address 0.0.0.0.

Sign out

atfg logout

This ends the shared session used by the CLI and Console. Sign in again to continue.