Devices and tokens

One device, one credential

scrutyn login registers a device and stores its token in the OS credential store when available. If no OS store exists, the CLI can use a private local credentials file; it does not silently fall back when an existing store is locked. scrutyn status shows device information without displaying the full token.

Do not commit tokens, put them in project configuration, paste them into logs, or export them into agent sessions. scrutyn logout revokes the device and removes its saved credential; re-run setup after a new login. See CI for non-interactive credentials.