CLI reference

Authentication

tenvyr login [--tenant TENANT_UUID]
tenvyr logout

login starts the browser/device authorization flow and associates the CLI with the selected tenant. logout removes the local CLI session.

SSH keys

Enroll a hardware-backed key:

tenvyr key enroll --hardware

Enroll an existing public key:

tenvyr key enroll --public-key PATH

Only provide the public key. Never upload or paste a private key.

Access

tenvyr access request [options]
tenvyr access status

An access request is evaluated against Tenvyr policies and may require approval. access status shows the current request or grant state.

SSH

tenvyr ssh HOST [ssh options]

The command obtains eligible short-lived access and invokes the system OpenSSH client for a direct connection. Tenvyr does not proxy the SSH session.

Diagnostics

tenvyr doctor
tenvyr version

Run doctor when login, credential, policy, DNS, or OpenSSH configuration may be blocking a connection. Include non-secret diagnostic output and the CLI version when opening a support case.