Sign in

Authenticate the Web app, CLI, and MCP clients.

Normal users do not call authentication endpoints directly.

Web offers Continue with Google or Continue with company SSO. For company SSO, enter your work email. Email codes may be requested to confirm a Google sign-in or account-linking action; they are not a standalone web sign-in option.
CLI uses epismo login. Passing an email discovers SSO; other addresses complete email-code login in the terminal.
MCP clients begin OAuth from server metadata.

epismo login
epismo login --email you@example.com
epismo whoami
epismo logout

CLI credentials are stored locally and refreshed before expiry. Log out before switching accounts. See SSO for organization OIDC administration.