# okibi auth

> Log in, log out, and connect accounts

Generated from okibi 0.2.4. Every command also accepts `--agent`; see [Agent and CI mode](https://okibi.ai/docs/cli/agent-mode.md).

## okibi auth

Log in, log out, and connect accounts

```sh
okibi auth [command]
```

## okibi auth github

Connect your GitHub account (install the Okibi GitHub App)

```sh
okibi auth github [flags]
okibi auth github [command]
```

Flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--api-url` | string | https://okibi.ai | Okibi API base URL |
| `--workspace` | string |  | workspace to refresh (or OKIBI_WORKSPACE; default: this machine's default workspace) |

## okibi auth github manage

Open one account's GitHub App settings to change repository access or uninstall

```sh
okibi auth github manage <account> [flags]
```

Flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--no-browser` | bool |  | print the management URL without opening a browser |

Inherited flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--api-url` | string | https://okibi.ai | Okibi API base URL |

## okibi auth github remove-repo

Remove one repository from a selected-repository GitHub installation

```sh
okibi auth github remove-repo <owner/repository> [flags]
```

Flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--json` | bool |  | emit JSON |
| `--workspace` | string |  | workspace slug (or OKIBI_WORKSPACE) |
| `--yes` | bool |  | confirm repository access removal |

Inherited flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--api-url` | string | https://okibi.ai | Okibi API base URL |

## okibi auth github status

Refresh GitHub installations and show account access and management links

```sh
okibi auth github status [flags]
```

Flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--json` | bool |  | emit JSON |

Inherited flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--api-url` | string | https://okibi.ai | Okibi API base URL |

## okibi auth login

Connects this machine to your Okibi account. By default a browser opens and returns automatically to this terminal after approval; the minted machine key lands in the OS keyring (config-file fallback). SSH/headless sessions use device-code login automatically; --device-code forces that flow, and --api-key stores an existing key for CI. No account yet? okibi auth signup.

```sh
okibi auth login [flags]
```

Flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--api-key` | string |  | store an existing Okibi API key instead of the browser flow |
| `--api-url` | string |  | persist a non-default API URL (e.g. a local dev server) |
| `--device-code` | bool |  | use the device-code flow for remote or headless login |

## okibi auth logout

Remove this machine's stored Okibi key

```sh
okibi auth logout [flags]
```

Flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--api-url` | string |  | ignored — logout only clears local state |

## okibi auth publisher

Connect the publisher app in your browser using the same Okibi account. Follow the browser prompts to connect GitHub. Organization connections require an org owner. Agent mode returns an approval URL without waiting.

```sh
okibi auth publisher [flags]
okibi auth publisher [command]
```

Flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--api-url` | string | https://okibi.ai | Okibi API base URL |
| `--no-browser` | bool |  | print the approval URL without opening a browser |
| `--timeout` | duration | 5m0s | maximum time to wait for browser approval |

## okibi auth publisher status

Check GitHub publisher access and list connected accounts

```sh
okibi auth publisher status [flags]
```

Flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--json` | bool |  | print JSON |

Inherited flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--api-url` | string | https://okibi.ai | Okibi API base URL |

## okibi auth signup

Opens your browser to create an Okibi account with GitHub and returns automatically to this terminal; the minted machine key lands in the OS keyring (config-file fallback). This is the same flow as okibi auth login. Remote and headless sessions switch to device-code login automatically; --device-code forces it. GitHub signs you up if you're new.

```sh
okibi auth signup [flags]
```

Flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--api-url` | string |  | persist a non-default API URL (e.g. a local dev server) |
| `--device-code` | bool |  | use the device-code flow for remote or headless login |

## okibi auth status

Show who you're logged in as

```sh
okibi auth status [flags]
```

Flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--api-url` | string | https://okibi.ai | Okibi API base URL |
