Skip to main content
Manage credentials for local image pulls. These commands update the local credential store; cloud credentials are managed separately.

msb registry login

Store a registry username and password. Without --password-stdin, the CLI prompts for the password.
Passwords go in the OS credential store. Only metadata is written to the local configuration.

msb registry logout

Remove stored credentials for a registry.

msb registry list

List configured registries without printing passwords. Aliases: msb registry ls, msb registries, and msb regs.

Headless authentication

For CI, configure registries.hosts.<host>.auth.password_env in ~/.microsandbox/config.json. Advanced setups can use secret_name to reference a file under ~/.microsandbox/secrets/registries/. Credentials are resolved in this order: explicit SDK auth, OS credential store, registry auth configuration, Docker configuration, then anonymous access.