Skip to content
Authometry Dashboard

Start

Getting startedApplications

OAuth and OIDC

Authorization Code with PKCERedirect URI matchingToken endpointDevice Authorization

Operate

MCP serverConfiguration as codeAccount provisioningWebhook verificationErrors and traces

Start

Getting started

Provision an Authometry Cloud OAuth client from your application with the CLI.

Install the CLI

Authometry Cloud is the default server and production is the default environment. Run the current CLI without adding it to your application's runtime dependencies.

npx authometry@latest --help

Authorize the CLI

Create a token under Settings → API tokens and expose it only to the current shell or agent process. Application provisioning needs applications:read and applications:write.

export AUTHOMETRY_TOKEN=amt_your_token
The management token belongs to the provisioning process. Never put it in application source or runtime environment files.

Provision the application

Run the CLI from the application repository. It creates the SaaS client and writes the issuer, application ID, client ID, and one-time client secret directly to an ignored environment file. Public clients omit the secret.

npx authometry@latest apps create \
  --name "Customer Portal" \
  --type web \
  --redirect-uri http://localhost:3000/auth/callback \
  --post-logout-redirect-uri http://localhost:3000/ \
  --scope openid --scope profile --scope email \
  --output-env .env.local --json

Give the integration to an agent

  • Prompt the agent with: Add Authometry OAuth to my app: https://authometry.ch3n.cc/SKILL.md
  • The agent inspects the repository, runs the provisioning command, implements the OIDC flow, and verifies the result.
  • Pass --server only when intentionally targeting a self-hosted installation.

ON THIS PAGE

Install the CLIAuthorize the CLIProvision the applicationGive the integration to an agent