3 if the CLI isn’t signed in, which makes it a usable precondition
check in a script.
Where your token lives
~/.config/heymcp/config.json, mode 0600. It’s masked wherever it’s
displayed — hm_live_••••••••••••4k2x.
HEYMCP_TOKEN overrides the file, so whoami in an environment with that set
tells you about the token in the environment, not the one on disk.