SUMMARY
When launching the Griptape Nodes desktop application, users have two distinct authentication pathways:
- Log in with Griptape Cloud (tied to an individual email address/user account)
- Activate with a License (tied to an organization)
This article explains the differences between these two authentication methods and when to use each approach.
FURTHER INFORMATION
LOG IN WITH GRIPTAPE CLOUD
When you initially sign up as a single user on Griptape, you create a Griptape Cloud account and are assigned a default organization. You can then purchase credits on this organization, create a new organization or upgrade the organization to Professional or Enterprise tiers.
When signing into this account you use an individual email address.
How to log in:
- Launch the Griptape Nodes desktop application.
- Select Login with Griptape Cloud
- Select Log in or Sign-Up
- Enter your email address and follow the authentication prompts.
If you have not signed up for an account yet, please click on the Sign up link
In this model:
- Authentication is handled directly by Griptape's public cloud servers.
- Application API requests and updates flow directly between your machine and cloud.griptape.ai.
- No intermediate proxy, private server, or specialized local network configuration is required.
- Users can access and manage their own cloud settings and run workflows using personal credit balances.
ACTIVATE WITH A LICENSE
In Enterprise setups, organizations deploy a dedicated licensing workflow. Rather than requiring individual employees to register and manage personal cloud accounts, the organization provides license tokens tied to specific policies.
If you have not received a key please contact your organization admin who can provide this for you. If you have been provided a license key by your organization please follow these steps to activate this.
How to use a Griptape license:
- Launch the Griptape Nodes desktop application.
- On the login screen, click Activate with a License
- Paste the License Key provided by your organization admin.
- In the Griptape Server Endpoint field:
- Keep https://cloud.griptape.ai if your organization uses cloud-managed licensing directly.
- Or replace it with your internal Admin Server URL (e.g., http://admin.internal.example.com:8080) if using an on-premises enterprise server.
- Click 'Activate License'.
In this model:
- Organization administrators distribute license keys directly to users.
- Activated keys are stored locally. If deactivated or logged out, users can re-activate with a single click from the Saved licenses section without re-entering the key or endpoint.
- You have the option to point to an on premises server, rather than cloud.griptape.ai.
- With Admin Server 0.4.0 or later, administrators can route asset uploads and downloads, library installs, and model downloads through the Admin Server via tunnel.allowed_hosts, preventing individual client machines from requiring open public internet access (To route asset downloads and previews through your internal proxy, navigate to App Settings > License, enable Route HTTPS traffic through this server, and restart the engine.)
Common issues:
If you encounter any issues after entering the license key, please check with your organization admin for the following common issues:
Activation fails immediately
If this happens please do the following:
- Verify that the key is entered completely without trailing spaces.
- Check the network connectivity to your Admin Server by opening http://<admin-server-address>/health in a browser (a healthy server returns {"status":"ok"}). If this fails then please ask your sysadmin to check your network.
Downloads or previews fail:
This can happen if Route HTTPS traffic is disabled through this server. Please ensure this is enabled via these steps:
- Navigate to 'App Settings':
-
Ensure that Route HTTPS traffic through this server is ticked:
From here ensure the engine has been restarted, and your operator has whitelisted the destination host in tunnel.allowed_hosts.
403 "path not permitted"
The Admin Server has restrictive route forwarding rules enabled. Contact your system operator to authorize the requested API path.
COMPARISON OVERVIEW
| Feature | Griptape Account (Email-Tied) | Licensing System |
| Authentication Method | Individual user login via email / Griptape Cloud | Organization-issued License Key / Token |
| Admin Dashboard Access | Available to organization owners | Hidden (licenses are managed entities) |
| Endpoint Target | Direct connection to Griptape Cloud (https://cloud.griptape.ai) | Direct connection to Griptape Cloud or custom internal Admin Server (http://admin.internal.example.com:8080) |
| Network & Traffic Routing | Public internet directly from the client machine | Direct to cloud, or routed through a centralized enterprise Admin Server with HTTPS tunneling |
| Policy & Host Control | Standard cloud limits and public API policies | Granular Cedar policy control, permission templates, Access Groups, and host whitelisting (tunnel.allowed_hosts) |
| Best Suited For | Individual creators and small teams | Enterprise studios requiring firewall isolation, centralized license management, headless rendering, or strict compliance |
FURTHER READING
More information on the Griptape account and licensing system can be found here:
Griptape Nodes Documentation: Admin Dashboard
Griptape Nodes Documentation: Using the Admin Server
Griptape Nodes Documentation: Cedar Policies & Permissions
We're sorry to hear that
Please tell us why