Authentication

There are two ways to authenticate, depending on who is calling:

User account — interactive, browser-based. Use auth login and pick User Account. Credentials are stored securely in your OS keychain.
Service account — non-interactive, token-based. Either run auth login and pick Service Account to store the uig_… token in the keychain, or set the UIGRAPH_ACCESS_TOKEN environment variable directly (recommended for CI/automation). UIGRAPH_ACCESS_TOKEN is service-account only and is never used for user logins. See Environment variables.

uigraph-mcp auth login

You'll be asked to choose:

Service Account — paste a service-account token (the uig_… token from UIGraph).
User Account — opens a browser; the MCP server brokers sign-in through the UIGraph frontend and hands the token back to a local callback.

If UIGRAPH_ACCESS_TOKEN is set and valid, you do not need to run auth login at all.

Check status

Shows who you're logged in as, the account kind (user or service account), and your organizations (the default is highlighted):

uigraph-mcp auth status

Removes stored credentials from the OS keychain:

uigraph-mcp auth logout