Signing in

Veyyon authenticates to whichever provider you point it at and calls provider APIs directly with keys you supply. Optional OpenTelemetry export runs only when OTEL_EXPORTER_OTLP_* is configured. Logins are provider-scoped: authenticating anthropic does not authenticate openai, and each provider tracks its own credentials. Those credentials are shared across profiles by default (see Credentials are shared across profiles).

Sign in from the TUI

Use the interactive slash commands inside a session:

• /login: opens the OAuth/key selector.
• /login <provider>: jumps straight to one provider, e.g. /login anthropic, /login github-copilot.
• /login <redirect-url>: completes an OAuth flow that needs a pasted callback URL.
• /logout: opens the provider selector to remove stored credentials.

On first run, the first-run setup (veyyon setup, or /setup later) walks the same flow.

Using several accounts for one provider

You can sign in to the same provider more than once. Run /login anthropic twice with two different logins and Veyyon stores both, each with its own quota. To see them, open the account manager:

/providers

The sidebar lists your providers and the body lists that provider’s accounts, one row each, with the email, the plan, how the credential was supplied, and how much of its quota is spent. A row marked this session is the one serving your current session.

From that card you press enter to use the selected account, n to name it, r to re-check its health, u to open its usage, x twice to log it out, and a to add another account for the same provider. /account manager opens the same card.

The last row of the list is + add another … account. It is a position in the list like any other: arrow down past your last account to land on it, and press enter there to start a login. The mouse works on the card as well. Click an account to select it, click that last row to start the login, and click any key chip in the footer to run what it names.

The provider list filters. Press ctrl+s, type part of a provider’s name or id, and the sidebar keeps the providers that match; the arrows move within them and enter still switches to the selected account. Press esc to leave the filter and get the full list back, and esc again to close the card.

Switching is per provider. Choosing another Anthropic account changes Anthropic and nothing else, because several providers serve one session at the same time: your main model, your subagent roles, and web search can each be a different provider. Moving between providers is a model choice, so it lives in /models.

Naming an account

An email is not always the thing you recognise, especially when two subscriptions share one login. Give an account a name and every surface uses it:

/account name work

The name belongs to the account, not to the stored token, so it survives a token refresh and a later re-login to the same account. An account you never named shows its email instead, and Veyyon tells you how to set one.

Which account am I using?

/account

This reports one line per provider your session has actually routed to, with the account it is using and that account’s remaining quota. A provider you hold credentials for but have not used this session is not listed.

If your chosen account hits its rate limit, Veyyon moves to another one so your work continues, and reports it:

Anthropic          personal                    main model  (opus-5)
                   pinned to work, rotated off it (usage limit)
                   /account switch anthropic to re-pin work · 2h 14m until it unblocks

Your choice is kept, not discarded. Once the limit resets, traffic returns to the account you picked with no further action.

When a login is signed out for you

A stored login can stop working without you doing anything: the provider revokes the grant, or a token refresh fails and the credential is set aside. Veyyon does not hide that. The account manager marks the provider and prints the provider’s own reason, so you can tell a revoked grant from a temporary outage:

Kimi Code · 1 account
  a previous login was signed out: oauth refresh failed:
  invalid_grant: The provided authorization grant is invalid
  press a to sign in again

If that provider had only one login, it now has none, and the card states that rather than showing the provider as one you never signed into. /account shows it too, so you do not have to open the card to find out:

1 provider has a signed-out login (Kimi Code) · /providers to sign in again

A logout you performed yourself is not reported this way. You already know about it.

Headless and remote hosts

For CI, servers, or a shared team credential store, use the auth broker from the shell:

$ veyyon auth-broker login <provider>
$ veyyon auth-broker status
$ veyyon auth-broker list
$ veyyon auth-broker logout

import and migrate are also available. See Providers and docs/handbook/src/architecture/secrets.md for the broker model.

Using an environment variable instead

Every API-key provider reads one or more environment variables, so a key already exported in your shell (or in a .env file) is used without an interactive sign-in. OAuth-only providers (for example google-antigravity, google-gemini-cli, kimi-code) take no key variable: sign in with /login.

The full provider → variable map lives in Providers. .env files are loaded from <cwd>/.env, ~/.veyyon/profiles/default/agent/.env, ~/.veyyon/.env, and ~/.env, with earlier sources winning.

How keys are resolved

When a provider needs a key, Veyyon resolves it in order (first match wins):

1. A runtime --api-key for the current process (never persisted).
2. A models.yml apiKey on a custom provider.
3. A stored OAuth credential (refreshed as needed).
4. A stored API key in the auth store (persisted by /login).
5. The provider’s environment variable (including .env).
6. Any other stored API-key credential, then a custom-provider resolver fallback.

Stored credentials live in a machine-wide auth store at ~/.veyyon/shared-auth/agent.db (or the configured auth-broker snapshot in broker mode). VEYYON_CODING_AGENT_DIR relocates the agent base for a profile’s own files, but the shared auth store stays at the global config root so every profile reads the same logins.

Credentials are shared across profiles

By default every profile reads one machine-wide set of provider logins, so signing in once works everywhere. The first time a profile opens the shared store, any login already saved in that profile is promoted into it, so turning sharing on never signs you out.

To give a profile its own private credentials instead, turn sharing off in the global config ~/.veyyon/config.yml:

profileSharing: false

or toggle Share Credentials Across Profiles on the Global tab of /settings. With sharing off, each profile keeps its logins in its own ~/.veyyon/profiles/<name>/agent/agent.db and never reads another profile’s credentials. The auth broker (above) is a separate cross-host mechanism and is unaffected by this setting.

Provider data is data-driven

Provider identity (display name, env var, OAuth parameters) and endpoints (base URL, API kind) come from the bundled model catalog plus your ~/.veyyon/profiles/default/agent/models.yml. A new BYOK provider becomes selectable by adding a providers: entry, not by changing code. See Configuring providers and docs/handbook/src/reference/providers.md.

See also: Models and providers and the CLI reference.