Authentication¶

Manifest Platform authentication depends on where your code runs:

On the platform (Code Blocks, Hosted Services, Agents, Workflows): Authentication is automatic. FlowSDK reads platform-injected environment variables (AUTH_TOKEN, PLATFORM_API_URL, ORG_ID, WORKSPACE_ID) — no configuration required.
CLI and local tools: Coming soon. Will use ~/.flow/config.json for stored credentials.

FlowSDK (Platform Runtimes)¶

FlowSDK is for code running inside Code Blocks, Hosted Services, Agents, and Workflows. In production runtime it is auto-configured:

from flow_sdk import FlowSDK

flow = FlowSDK()

No API keys, no config files, no environment setup. The platform handles everything.

CLI and Local Developer Tools¶

Coming Soon

The flow-sdk CLI, CLIClient, and local authentication tools are not yet publicly available. They will be released in an upcoming release. The documentation below is provided as a preview of upcoming capabilities.

CLI authentication (coming soon)

Authenticate once, then reuse stored credentials:

flow-sdk login --api-key YOUR_API_KEY --url https://api.flow.marut.cloud

This writes ~/.flow/config.json:

{
  "access_token": "eyJhbGciOi...",
  "platform_url": "https://api.flow.marut.cloud",
  "org_id": "550e8400-e29b-41d4-a716-446655440000",
  "workspace_id": "6ba7b810-9dad-11d1-80b4-00c04fd430c8"
}

CLIClient (scripts/notebooks/automation)¶

from flow_sdk.config import load_config
from flow_sdk.cli_client import CLIClient

config = load_config()
client = CLIClient(config)

me = client.get_current_user()
print(me["email"])

Verify Credentials¶

flow-sdk whoami

Or in Python:

from flow_sdk.config import load_config
from flow_sdk.cli_client import CLIClient

client = CLIClient(load_config())
client.verify_credentials()

Security Notes¶

Treat API keys and tokens as secrets.
Do not commit ~/.flow/config.json.
Rotate API keys regularly.

Next Steps¶

Continue to the Quickstart to create and deploy your first component.