Skip to main content

​
Usage

Sign out using the same credential precedence as other commands. Browser sign-out normally asks the registry to revoke the session before removing the local credential. Saved personal access tokens are removed locally.

​
Examples

​
Flags

​
boolean
Remove the selected browser credential locally, including while offline. Remote revocation remains unverified. Personal access token cleanup is unchanged.

​
Exit codes

​
Output

Browser sign-out reports whether remote revocation was confirmed or only the local credential was removed. If the registry cannot confirm ordinary sign-out, the command fails and retains the local credential. Retry, or choose --local if you accept unverified remote revocation.

​
Details

​
Browser session revocation

Confirmed sign-out revokes the browser session and removes its local credential. It does not promise immediate invalidation of already-issued access tokens. --local leaves the remote session unverified and may leave it active.

​
Revocation happens in the web UI

For personal access tokens, logout removes only the saved credentials file. Revoke the token itself in your account settings at agentfacets.io. Removing a saved personal access token leaves any browser session intact, and that session may be selected by the next command. After clearing the token and environment override, run facet logout again to sign out of that browser session too.

​
FACET_TOKEN survives logout

If FACET_TOKEN is set, it keeps authenticating commands after logout, and the command says so. Logout cannot change your shell environment or revoke this token.

​
See also