Benchmark authentication

Benchmark-service credentials are separate from the Vals API key used to authenticate with the hosted tracker.

Store an Authorization credential

valkyrie config auth set <benchmark-name> <credential>

The CLI sends the stored value as the Authorization header on every request to that benchmark. List masked credentials or remove one:

valkyrie config auth list
valkyrie config auth remove <benchmark-name>

Credentials are stored under benchmark_auth in ~/.config/valkyrie/valkyrie.yaml. See the config auth set, config auth list, and config auth remove reference for full syntax.

Use repeatable -H or --header pairs:

valkyrie run start \
  --benchmark my-benchmark \
  --agent sweagent \
  -H X-Custom-Header my-value \
  -H X-Another-Header another-value

Runtime headers merge with the stored credential. An explicit Authorization runtime header overrides the stored value for that run.