---
name: paperos-cli-auth
description: Tenant sign-in and bootstrap for the white-labeled paperos CLI. Use when a customer needs to initialize, authenticate, or troubleshoot token/login setup.
---

# paperos CLI Auth

Use this for tenant onboarding and auth diagnostics with the `paperos` CLI.

## Initialize

```sh
paperos init
```

Prompts:
- Email
- Host (for example `https://infra.onpaper.co`)
- Issuer (for example `https://sso.paperos.dev`)
- Optional token and bunch

## Login

```sh
paperos auth login
```

Optional flags:

```sh
paperos auth login --issuer https://sso.paperos.dev --label my-laptop --ttl 86400
```

## Verify identity

```sh
paperos whoami
paperos account
paperos doctor
```

## Common fixes

- Missing token:
  run `paperos auth login` again.
- Wrong host:
  set `BNNA_HOST` in `.env` and rerun login.
- Wrong issuer:
  set `BNNA_ISSUER` or pass `--issuer`.