bird auth login

Usage

bird auth login [flags]

Description

Authenticate as yourself via the browser. The CLI opens a consent page where you grant permissions; the resulting token acts as you, capped to your workspace and those scopes.

By default login requests a read-only baseline (the everyday surfaces at read). A command that needs more prints the exact re-login to run; that step-up accumulates into your grant, so you never lose access you already had. Pass --scope to request a specific set, or --yolo for the full delegable catalogue.

Headless or SSH sessions (and --device) use the device flow instead: the CLI prints a code and URL to enter on another device.

Both flows block until you approve, then time out after a few minutes. On success the credential is written to the profile --profile or BIRD_PROFILE names, creating it if it is new, or else to the default profile (its path is printed). Logging in again replaces that profile's credential and leaves the others alone.

Examples

  # Browser login (default: read-only baseline)
  bird auth login

  # Everything you're allowed to grant
  bird auth login --yolo

  # Headless / SSH: device flow
  bird auth login --device

  # Request a specific set of scopes
  bird auth login --scope emails:write --scope domains:read

  # Sign a second workspace in alongside the first
  bird auth login --profile staging

Options

Related