Skip to main content

What does login do?

The login command registers a new agent with the Mandate API. It creates an agent identity, generates a runtime key, and saves both to ~/.mandate/credentials.json. You run this once per agent.

Options

Example: register with limits

Output

The runtime key is masked in the output. The full key is stored in ~/.mandate/credentials.json.

What is the claim URL?

The claimUrl links this agent to a human’s dashboard account. Share it with the wallet owner. When they visit the URL and sign in, the agent appears in their dashboard where they can configure policies, approve transactions, and view the audit log.
If you omit --address, the agent registers with a zero address. You must call mandate activate 0xYourAddress before validating any transactions.

What happens to credentials?

The command writes ~/.mandate/credentials.json with 0600 permissions. All subsequent authenticated commands (validate, transfer, whoami, etc.) read this file automatically. To switch agents, delete the file and run login again.

Next Steps

Activate Wallet

Set or change the wallet address after registration.

Validate a Transaction

Run your first policy check from the CLI.

Register Agent Guide

End-to-end walkthrough of the registration flow.