Halo Cli Auth

Use when working with Halo CLI login, bearer token or basic auth, profile setup, profile switching, current profile inspection, or fixing missing keyring credentials.

Use this skill for halo auth and halo auth profile.

If authentication is not set up yet, do this first before running post, single-page, plugin, theme, attachment, backup, moment, comment, or notification commands.

Commands

bash

halo auth --help
halo auth login --help
halo auth profile --help

Main workflows:

• halo auth login
• halo auth current
• halo auth profile list
• halo auth profile current
• halo auth profile get <name>
• halo auth profile use <name>
• halo auth profile delete <name>
• halo auth profile doctor

Common Flows

Login with bearer token:

bash

halo auth login \
  --profile local \
  --url http://127.0.0.1:8090 \
  --auth-type bearer \
  --token <token>

Login with basic auth:

bash

halo auth login \
  --profile local \
  --url http://127.0.0.1:8090 \
  --auth-type basic \
  --username admin \
  --password <password>

Inspect and switch profiles:

bash

halo auth current
halo auth profile list
halo auth profile use production
halo auth profile get production --json

Diagnose broken credentials:

bash

halo auth profile doctor
halo auth profile delete production --force
halo auth login --profile production --url https://halo.example.com --auth-type bearer --token <token>

Rules

• In non-interactive mode, halo auth login requires --profile, --url, and --auth-type.
• basic auth requires --username and --password.
• bearer auth requires --token.
• Use --json when another tool needs structured output.
• profile delete is destructive; use --force in non-interactive mode.
• Profile metadata lives in config, but secrets live in the system keyring.

Routing

• Use halo-cli-content for posts and single pages.
• Use halo-cli-search for public site search.
• Use halo-cli-operations for themes, plugins, attachments, backups, and moments.
• Use halo-cli-moderation-notifications for comments, replies, and notifications.