Skip to content
OpenRelay is in early access, and the /v1 API is stable. New capabilities ship in the changelog.
PricingDashboard
GuidesAPI ReferenceCLI
API ReferenceAccount and accessAccount

Deny a pending device login (session only)

Marks the code denied; the polling CLI gets access_denied and stops. Irreversible for that code (a fresh `orl auth login` starts a new one).

Required permission

Requires the self.update permission. See Permissions for the roles and API key permissions that include it.

POST
/v1/cli-auth/device/{userCode}/deny

Authorization

apiKey
headerAuthorizationBearer <token>

OpenRelay API key. Send it as Authorization: Bearer or_… (legacy vl_… keys still work).

Path Parameters

userCode*string
Match^[0-9]{6}$

Response Body

Denied

Example Request
curl -X POST 'https://api.openrelay.inc/v1/cli-auth/device/string/deny'
Example Response
Empty

Approve a device login POST

Approves a pending device login, giving the CLI a 30-day session as you in the chosen org with your membership role. Needs a signed-in user session. The session has the same permissions your dashboard session has in that org, including session-only actions an API key can never perform.

List your CLI sessions, every org (session only) GET

Lists every orl auth login session you hold across your orgs, with device name, creation, last use and expiry. Needs a signed-in user session. Sessions that expired or were revoked are listed too. An API key cannot call this: it cannot enumerate the user sessions that out-rank it.