B3n Sentinel CLI

CLI and MCP server for B3n Sentinel.

Default API: https://sentinel.b3n.in

Login

Run GateKeeper device authorization:

b3n-sentinel login --url https://sentinel.b3n.in

Approve the displayed code in GateKeeper. The CLI stores refreshable credentials in ~/.b3n-sentinel/credentials.json and sends the GateKeeper access token as Authorization: Bearer.

For rollback or automation, create an admin API token in the Sentinel web UI (System -> Admin API Tokens -> Create token) and run:

b3n-sentinel login --url https://sentinel.b3n.in --admin-token

The old username/password OTP flow has been removed. Revoke CLI tokens from the web UI and revoke GateKeeper sessions from GateKeeper when they are no longer needed.

Common Commands

b3n-sentinel status
b3n-sentinel projects
b3n-sentinel services
b3n-sentinel project create my-app \
  --type fastapi \
  --domain my-app.b3n.in \
  --repo https://github.com/benaiah-ke/my-app \
  --image ghcr.io/benaiah-ke/my-app:latest
b3n-sentinel logs my-app
b3n-sentinel domain list

Set B3N_SENTINEL_URL or pass --url for non-production instances. For automation, use B3N_SENTINEL_TOKEN; generic SENTINEL_* names are left to Payd-era tooling and are intentionally not read by this package.

Repository: https://github.com/benaiah-ke/b3n-sentinel