Sign in

Authenticate the Web app, CLI, and MCP clients.

Normal users do not call authentication endpoints directly.

Web supports Google, email code, and configured workspace SSO.
CLI uses epismo login. Passing an email discovers SSO; other addresses complete email-code login in the terminal.
MCP clients begin OAuth from server metadata.

epismo login
epismo login --email you@example.com
epismo whoami
epismo logout

CLI credentials are stored locally and refreshed before expiry. Log out before switching accounts. See SSO for organization OIDC administration.