---
title: Configuration
description: Where the CLI stores credentials and settings, and every environment variable it honours.
canonical_url: https://wiblo.app/docs/developers/cli/configuration
last_updated: 2026-07-28T17:12:38+02:00
md_url: https://wiblo.app/docs/developers/cli/configuration.md
---

# Configuration

## Stored files

| File | Purpose | Location |
| --- | --- | --- |
| `auth.json` | The stored session (`token`, `userId`, `apiBaseUrl`). Written by `wiblo login`, deleted by `wiblo logout`. File mode `0600`. | Linux/macOS: `~/.local/share/com.wiblo.cli/` (respects `XDG_DATA_HOME`). Windows: `%LOCALAPPDATA%\com.wiblo.cli\` |
| `config.json` | Non-secret settings — the active workspace and telemetry preference. Survives logout. | Same directory as `auth.json` |

## Credential precedence

1. `--token` flag (highest)
2. `WIBLO_TOKEN` environment variable
3. The stored session in `auth.json`
4. Nothing — auth-required commands start the device flow

Ambient credentials (flag or env) are never written to disk, and `wiblo logout` refuses to revoke them — unset the variable instead.

## Environment variables

| Variable | Effect |
| --- | --- |
| `WIBLO_TOKEN` | Token for this run (see precedence above). |
| `WIBLO_API_BASE_URL` | Point the CLI at a different API host. |
| `WIBLO_WORKSPACE` | Active workspace (slug or id) for user-scoped commands. |
| `WIBLO_WORKSPACE_ID` | Workspace uuid for the `repos` commands. |
| `WIBLO_RUN_ID` | Agent run id for the `repos` commands (falls back to `WIBLO_GATEWAY_RUN_ID`). |
| `WIBLO_NON_INTERACTIVE` | `1` forces non-interactive mode. |
| `WIBLO_TELEMETRY_DISABLED` | Disables telemetry. |
| `CI` | Suppresses opening a browser during login. |

Inside a Wiblo agent sandbox, `WIBLO_TOKEN`, `WIBLO_WORKSPACE_ID`, and `WIBLO_RUN_ID` are pre-set, so `wiblo` commands work with no setup.

## Workspace resolution

User-scoped commands (`whoami`, `members`, `workspaces use`) resolve the workspace as: `--workspace` flag → `WIBLO_WORKSPACE` → the `config.json` active workspace → an interactive picker (or `workspace_required` when non-interactive).