with your User (interactive)
Connect to the ZenML server using the ZenML CLI and the web based login.
You can authenticate your clients with the ZenML Server using the ZenML CLI and the web‑based login (device flow). This method is ideal for humans working locally and applies to OSS servers and ZenML Pro workspaces.
zenml login https://...
This command starts a browser flow to validate the device you are connecting from. You can choose whether to mark the device as trusted. If you don’t trust the device, a 24‑hour token is issued; if you do, a 30‑day token is issued.
Managing authorized devices for ZenML Pro workspaces is not yet supported in the dashboard. CLI device management is available.
To see all devices you've permitted, use the following command:
zenml authorized-device list
Additionally, the following command allows you to more precisely inspect one of these devices:
zenml authorized-device describe <DEVICE_ID>
For increased security, you can invalidate a token using the zenml authorized-device lock
command followed by the device ID.
zenml authorized-device lock <DEVICE_ID>
To keep things simple, we can summarize the steps:
Use the
zenml login <URL>
command to start a device flow and connect to a zenml server.Choose whether to trust the device when prompted.
Check permitted devices with
zenml authorized-device list
.Invalidate a token with
zenml authorized-device lock ...
.
Important notice
Using the ZenML CLI is a secure and comfortable way to interact with your ZenML servers. It's important to always ensure that only trusted devices are used to maintain security and privacy.
Don't forget to manage your device trust levels regularly for optimal security. Should you feel a device trust needs to be revoked, lock the device immediately. Every token issued is a potential gateway to access your data, secrets and infrastructure.

Last updated
Was this helpful?