Register cnspec Using a Credentials File
cnspec must be registered with Mondoo Platform in order to download policies and report results. Typically you register cnspec using a temporary token. However, to ease automation, you can use a client credentials file instead. A common example is when you're integrating cnspec into CI/CD pipelines.
caution
The credentials file includes a private key. Keep this credential safe!
-
Log into the Mondoo Console.
-
Navigate to the region, organization, and space where you want to see the new asset's scan results.
-
In the left navigation, under Integrations, select Add New Integration.
-
Under Supply Chain, select Generate Long-Lived Credentials.
-
Select the GENERATE NEW CREDENTIALS button.
-
Copy the JSON string and save it in a .json file.
Validate registration
The cnspec status command validates cnspec registration and ensures that communication with Mondoo Platform is successful.
Unregistered cnspec
cnspec status
→ loaded configuration from /Users/stella/.config/mondoo/mondoo.yml using source default
→ Platform: macos
→ Version: 26.1
→ Hostname: stella.home
→ IP: 172.16.1.94
→ Time: 2025-11-25T17:55:43-08:00
→ Version: 12.11.0 (API Version: 12)
→ Latest Version: 12.11.0
→ Providers URL: https://releases.mondoo.com/providers
→ Installed Providers: core | os | mock
→ API ConnectionConfig: https://us.api.mondoo.com
→ API Status: SERVING
→ API Time: 2025-11-26T01:55:43Z
→ API Version: 12
x client is not registered
Correctly registered client
cnspec status
→ loaded configuration from /Users/mwezi/.config/mondoo/mondoo.yml using source default
→ Platform: macos
→ Version: 26.1
→ Hostname: mwezi.home
→ IP: 192.168.254.21
→ Time: 2025-11-25T17:58:10-08:00
→ Version: 12.11.0 (API Version: 12)
→ Latest Version: 12.11.0
→ Providers URL: https://releases.mondoo.com/providers
→ Installed Providers: core | os | mock
→ API ConnectionConfig: https://us.api.mondoo.com
→ API Status: SERVING
→ API Time: 2025-11-26T01:58:10Z
→ API Version: 12
→ Owner: //captain.api.mondoo.app/spaces/lunalectric-team-workstations
→ Client: //agents.api.mondoo.app/spaces/lunalectric-team-workstations/agents/2SARlZgQnFLAzj7jfiS1Fx2HBz8
→ Service Account: //agents.api.mondoo.app/spaces/lunalectric-team-workstations/serviceaccounts/2bMtksUk9EjrI5MC3tTf6UmhNC2
→ client is registered
→ client authenticated successfully
Invalid cnspec registration
cnspec status
→ loaded configuration from /Users/cosmo/.config/mondoo/mondoo.yml using source default
→ Platform: macos
→ Version: 26.1
→ Hostname: cosmo.home
→ IP: 192.168.254.21
→ Time: 2025-11-25T17:58:10-08:00
→ Version: 12.11.0 (API Version: 12)
→ Latest Version: 12.11.0
→ Providers URL: https://releases.mondoo.com/providers
→ Installed Providers: core | mock | os
→ API ConnectionConfig: https://api.edge.mondoo.com
→ API Status: SERVING
→ API Time: 2025-11-26T01:58:10Z
→ API Version: 12
→ Owner: //captain.api.mondoo.app/spaces/lunalectric-team-workstations
→ Client: //agents.api.mondoo.app/spaces/lunalectric-team-workstations/agents/2SARlZgQnFLAzj7jfiS1Fx2HBz8
→ Service Account: //agents.api.mondoo.app/spaces/lunalectric-team-workstations/serviceaccounts/2bMtksUk9EjrI5MC3tTf6UmhNC2
→ client is registered
x could not connect to mondoo platform error="rpc error: code = Unauthenticated desc = request permission unauthenticated"permission unauthenticated"
No current system time (clock skew detected)
cnspec status
→ loaded configuration from /Users/cosmo/.config/mondoo/mondoo.yml using source default
→ Platform: macos
→ Version: 26.1
→ Hostname: tsuki.home
→ IP: 192.168.254.21
→ Time: 2025-11-23T12:07:41-08:00
→ Version: 12.11.0 (API Version: 12)
→ Latest Version: 12.11.0
→ Providers URL: https://releases.mondoo.com/providers
→ Installed Providers: core | mock | os
→ API ConnectionConfig: https://api.edge.mondoo.com
→ API Status: SERVING
→ API Time: 2025-11-23T20:07:42Z
→ API Version: 12
→ Owner: //captain.api.mondoo.app/spaces/lunalectric-team-workstations
→ Client: //agents.api.mondoo.app/spaces/lunalectric-team-workstations/agents/2SARlZgQnFLAzj7jfiS1Fx2HBz8
→ Service Account: //agents.api.mondoo.app/spaces/lunalectric-team-workstations/serviceaccounts/2bMtksUk9EjrI5MC3tTf6UmhNC2
→ client is registered
→ client authenticated successfully
! possible clock skew detected: 72h0m6.277868s