Skip to Content
CLI Referencenkapp auth

nkapp auth

Manage cloud provider authentication. Credentials are stored locally in .nanokit/auth.json.

nkapp auth <subcommand> [options]

Subcommands

auth aws

Authenticate with Amazon Web Services.

nkapp auth aws --key <access_key> --secret <secret_key> [--region <region>]
FlagTypeDefaultDescription
--key <key>stringAWS Access Key ID
--secret <secret>stringAWS Secret Access Key
--region <region>stringus-east-1Default AWS Region

auth do (alias: digitalocean)

Authenticate with DigitalOcean.

nkapp auth do --token <token>
FlagTypeDefaultDescription
--token <token>stringDigitalOcean Personal Access Token

auth status

Show current authentication status for all configured providers.

nkapp auth status
Authentication Status: AWS: Authenticated (Updated: 2026-04-15T12:00:00Z) DIGITALOCEAN: Authenticated (Updated: 2026-04-14T09:30:00Z)

Credential Storage

Credentials are stored in .nanokit/auth.json within your project directory. This file should be in your .gitignore.

[!IMPORTANT] These credentials are used exclusively for infrastructure provisioning operations (e.g., EC2 instance creation, Droplet management). They are not used for service-level secrets — use nkapp secrets for that.