Skip to content

auth: Authenticate with Raziel

The auth command authenticates with MBARI's Raziel service and displays the available M3 service endpoints. It's useful for verifying your credentials and discovering the URLs/secrets other tools (or scripts) need to talk to M3 directly.

Usage

m3-download auth [OPTIONS]

Parameters

  • --config-url: (Optional) Raziel config URL (default: https://m3.shore.mbari.org/config)
  • --json: (Optional) Output raw JSON instead of human-readable text

How It Works

M3 access goes through vars-client.

  1. The command first looks for saved credentials at ~/.vars/raziel.txt (written by vars-client login, or by other VARS apps). They're used if they point at --config-url.
  2. Otherwise you'll be prompted for your username and password (hidden input)
  3. Once authenticated, the command fetches and displays the list of endpoints Raziel knows about, including each endpoint's name, URL, and secret (if any). Names are normalized to underscores (e.g. vampire_squid), matching vars-client.

Saving credentials

To avoid being prompted on every run of auth or generate, log in once with:

uv run vars-client login https://m3.shore.mbari.org

Examples

Authenticate (using stored credentials if available) and view endpoints:

m3-download auth

Authenticate and output endpoint info as JSON:

m3-download auth --json