droyd auth status confirms the
current account without displaying credentials. Its access-token expiry is a
rotation timestamp, not the end of the stored login.
Human access and automation
Use the browser sign-in flow for a person using the CLI. A Droyd API key is a separate credential for an explicitly authorized CI or backend integration; it is not a replacement for signing a person into a local workspace. Rundroyd auth login again only when status requires reauthentication or token
refresh fails. Never paste access tokens, refresh tokens, or API keys into a
prompt, command argument, or project file.