> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getunbound.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Login, logout, and configure tenant URLs for the Unbound CLI

## Login

**Browser (recommended):**

```bash theme={null}
unbound login
```

**API key** — for CI/CD or headless environments:

```bash theme={null}
unbound login --api-key <your-api-key>
```

**Custom domain:**

```bash theme={null}
unbound login --domain custom.example.com
```

Credentials are stored at `~/.unbound/config.json`.

## Logout

```bash theme={null}
unbound logout
```

Removes stored credentials while preserving custom URL settings.

## CLI status

```bash theme={null}
unbound status
```

Shows your email, organization, **role** (Admin/Manager/Member/Analytics Viewer), config file location, login state, API connectivity, and the **connected tools** wired through Unbound on this device (with their mode). Useful for debugging connection issues.

For a deep per-tool health check, run [`unbound doctor`](/cli/doctor).

### Role access

| Role             | Data scope                            | Access                                                                                                                                                                                                                              |
| ---------------- | ------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Admin            | Organization                          | Full access to organization data, policies, users, settings, billing, integrations, and credentials.                                                                                                                                |
| Analytics Viewer | Organization                          | View dashboards, analytics, logs, policies, AI Tools Discovery, users, and cost data. Run analytics queries and CSV exports. Manage saved queries and custom dashboards. Cannot change organization controls or access credentials. |
| Manager          | Self and direct or indirect reportees | View dashboards, analytics, logs, and cost data for their team. Cannot use organization administration controls.                                                                                                                    |
| Member           | Self                                  | Create and access their own applications and related data. Cannot view other users' analytics or logs.                                                                                                                              |

Admin, Analytics Viewer, and Member are assigned roles. Unbound grants Manager access when at least one user reports to that person.

***

<h2 id="tenant-custom-domains">
  Tenant / Custom Domains
</h2>

If your organization runs Unbound on its own hosts — for example `api.acme.com` instead of `api.getunbound.ai` — pass all three URLs at login. They persist to `~/.unbound/config.json`:

```bash theme={null}
unbound login --api-key <YOUR_API_KEY> \
  --gateway-url  https://api.acme.com \
  --frontend-url https://gateway.acme.com \
  --backend-url  https://backend.acme.com
```

Or set them at any time without re-logging in:

```bash theme={null}
# All three at once:
unbound config urls https://api.acme.com https://gateway.acme.com https://backend.acme.com

# One at a time:
unbound config set-gateway-url  https://api.acme.com
unbound config set-frontend-url https://gateway.acme.com
unbound config set-backend-url  https://backend.acme.com
```

View current values:

```bash theme={null}
unbound config show
unbound config show --json
```

### Defaults

| Host                 | Default                         |
| -------------------- | ------------------------------- |
| Gateway (LLM proxy)  | `https://api.getunbound.ai`     |
| Frontend (dashboard) | `https://gateway.getunbound.ai` |
| Backend (CLI API)    | `https://backend.getunbound.ai` |