Copy your sandbox credentials
--mode and the CLI asks which credentials you want. Sandbox credentials stop before payment, so build and test with them.
Your company gets sandbox credentials the first time you ask for them, as the dashboard does. When your account belongs to more than one company, the CLI asks which one, or you name it with --company:
Get production credentials
--yes creates them without asking. Creating them needs an active subscription; without one the CLI points you to Billing in the dashboard.
Only owners and admins can see the secret. Anyone else gets the client ID alone and a note to ask an owner or admin.
Print them for a script
Without a terminal, the CLI prints the two lines and copies nothing:--mode is required, and production credentials that do not exist yet need --yes: