Tensor9 offers custom service-level agreements (SLAs). The SLA in your contract supersedes the default service levels and operational terms described in this guide.
T9_API_KEY identifies that account when you acquire adapter artifacts, obtain or renew a license, and use online services such as Explain. Installing the CLI does not grant access to every adapter.
Install the CLI
Install with Homebrew, using the same distribution as Tensor9 BYOC:brew upgrade tensor9 instead of brew install tensor9.
Alternatively, use the install script on a supported macOS or Linux system:
Set your API key and verify your identity
A Tensor9 API key is required. Use the key issued during onboarding, or email [email protected] to request one for your organization. Do not share your account or key with another customer or organization. If your secret manager has already suppliedT9_API_KEY, skip the prompt. Otherwise, enter your key at a hidden prompt in the terminal where you will run tensor9:
- Bash
- Zsh
T9_API_KEY from the CI provider’s secret store into the operator job. Do not put its value in workflow YAML, container images, adapter configuration or command-line arguments.
Understand your adapter access
An entitlement grants a specific direction, such as S3 requests served by Google Cloud Storage. It does not also grant the reverse direction or every backend for S3. An adapter must both exist in your installed release and be allowed by your license. Tensor9 distributes one standard signed binary per release and platform, containing all adapters shipped in that release. A separately signed customer license determines which adapters the binary accepts during configuration, startup and request handling. Customers do not need a custom build when entitlements change. The service catalog, tuning guides, trade-off analyses and service-level terms are public, including detailed compatibility for each documented direction. Online Explain and use of the licensed binary remain authenticated and entitlement-scoped. Read the public profile to assess fit, then use Explain to inspect the direction your account can run. The public service catalog gives you exact origin identifiers and describes backend choices. After authentication, usetensor9 adapt svc list -origin ORIGIN -fmt Human to discover the exact target identifiers your account is entitled to run for that origin, then use one returned target with Explain. The CLI discovery result does not enumerate other origins or grant access to an unlicensed adapter.
Keep credentials separate
Neither the binary nor the license contains your raw API key. Do not send
T9_API_KEY in application requests or use it as a cloud credential. Protect the license as sensitive deployment material. Replicas within the licensed account may use the same license; sharing an account, API key or license with another customer or organization is prohibited.
Plan license renewal
A license has a one-calendar-year term. Begin renewal 30 days before the term ends. It includes another 30 days of signed grace after the term ends, giving your deployment time to receive the replacement license. Schedule an authenticated operator job to renew the license and distribute it to replicas. The adapter checks the replacement before installing it atomically; a failed replacement leaves the existing valid license in place. Monitor renewal status and final expiry, not just process health. Early renewal preserves the annual anniversary. Rotating a key or editing entitlements does not by itself extend the term. A valid cached binary and license can start and serve entitled requests without retainingT9_API_KEY. The adapter does not contact Tensor9 for each request. A Tensor9 outage does not stop that operation while the license remains valid. This does not promise indefinite disconnected operation or a dedicated air-gapped deployment workflow.
At final expiry, the adapter rejects new starts and new requests, including new requests on existing connections. Requests, streams and asynchronous work already admitted may finish normally; expiry does not force them to stop.
A license applies across Cloud Adapter product versions. Upgrading or rolling back does not require a new license solely because the binary version changes. A release containing a new adapter does not grant permission to use it.
Troubleshoot authentication and access
If a key is exposed, contact your account administrator or Tensor9 to revoke and replace it. Revocation prevents future API calls with that key; it does not instantly invalidate an already-issued offline license. Redact keys, licenses and authorization headers from logs and support bundles.