---
descriptions:
  cli_auth_connect:
    device_code: >-
      A unique identifier for the authorization request used when polling the
      token endpoint.
    user_code: 'A short, user-friendly code that users enter to authorize the device.'
    verification_uri: The URL where users can enter the user code to authorize the device.
    verification_uri_complete: A URL with the user code pre-filled for one-click authorization.
originalPath: >-
  .tmp-workos-clone/packages/docs/content/reference/workos-connect/cli-auth/index.mdx
---

# CLI Auth

CLI Auth for WorkOS Connect enables third-party applications to build command-line tools that integrate with your app's credentials using the [OAuth 2.0 Device Authorization Flow](https://datatracker.ietf.org/doc/html/rfc8628).

The CLI Auth flow for Connect involves two main endpoints:

1. The **device authorization URL** initiates the flow by obtaining device codes, user codes, and verification URIs.
2. The **device access token URL** is where the device exchanges the device code for access and refresh tokens after the user authenticates.

Read more about [CLI Auth here](/authkit/cli-auth/connect).