Browser Authentication

The axonpush-integrate skill authenticates you in the browser so you don’t have to copy API keys around. The flow lives in a small bash helper (helpers/login.sh) that ships with the skill bundle — every supported AI coding agent runs the same flow.

How It Works

1. The skill picks an unused local port N and starts a tiny HTTP listener on 127.0.0.1:N.
2. It opens https://app.axonpush.xyz/wizard-auth?port=N in your default browser.
3. You sign in (or are already signed in), pick an organization, and click Generate API Key then Send to Wizard.
4. The browser redirects to http://127.0.0.1:N/?api_key=...&tenant_id=....
5. The local listener reads api_key and tenant_id from the redirect, writes them to .env, and shuts down.

The skill prompts your agent once it has both values, then continues with provisioning and SDK wiring.

Manual Fallback

Headless box, SSH session, or no browser? When the skill prompts you, choose Enter API key manually and paste a key from the dashboard. The skill writes the same .env and continues from step 4 above.

Security

• The local listener binds only to 127.0.0.1 — never the network interface.
• It accepts exactly one request, then exits.
• api_key and tenant_id land in your project’s .env. Make sure .env is in .gitignore (the skill checks and adds it if missing).
• The API key is org-scoped and revocable from the dashboard at any time.