Every setting resolves in this order: the flag, then the environment, then the selected profile in the config file.
cli_config.sh

Files

The browser sign-in keeps a dashboard session for the machine (shown on the dashboard’s CLI & agent sessions page as CLI on <hostname>) and trades it for an API token that lasts 15 minutes. Signing out, revoking the session on that page, removal from the organization and role changes reach the API within seconds, also for tokens already issued; after a role change the CLI (and a running MCP server) fetches a new token on its own. The CLI never reads Anona Memory’s settings or keys, and never sends an Anona Memory key to the compute API.