Start a CLI sign-in and return the AuthKit authorization URL.
Begins the PKCE sign-in flow for a command-line client. Supply the loopback redirect_uri your CLI is listening on, an opaque state value, and the S256 code_challenge whose verifier you keep locally; the response returns the hosted authorization URL to open in a browser, echoing back the redirect_uri and state to compare on the callback. Only loopback redirect URIs are accepted, so an authorization code can never be delivered off the machine that asked for it.
Authorizations
A Rafflesia API key, sent as Authorization: Bearer <key>.
Query Parameters
Loopback URL the CLI listens on.
Opaque value echoed back to the CLI.
PKCE code challenge.
PKCE challenge method. Defaults to S256.
AuthKit provider. Defaults to authkit.
Restrict sign-in to one WorkOS connection.
Restrict sign-in to one organization.
Email to prefill. Ignored when it is not a valid address.
Domain to prefill.