omx auth

Authentication and session management.

Commands

omx auth login

omx auth login --email [email protected] --password yourpassword

omx auth signup

omx auth signup --email [email protected] --password yourpassword --name "Your Name"

omx auth demo

Get a demo session key — no account required.

omx auth demo

omx auth me

Show current user info.

omx auth me

omx auth delegate

Create a scoped, time-bounded session key. Used for agent delegation — agents get narrowed permissions that expire.

omx auth delegate                                    # read+query, 30 min
omx auth delegate --scopes read --ttl 2h             # read only, 2 hours
omx auth delegate --scopes read,query,admin --ttl 1h # full access, 1 hour

Output:

DELEGATED SESSION

  Key:     omx_sk_abc123...
  Scopes:  read, query
  TTL:     30 minutes
  Expires: 2026-04-10T14:30:00Z

  Use: OMX_API_KEY=omx_sk_abc123... omx agent "..."

Cannot escalate: requested scopes must be a subset of the parent key's scopes.

API Key Management

omx keys generate

omx keys generate
omx keys generate --name "CI pipeline" --scopes read,query

omx keys list

omx keys list

omx keys revoke

omx keys revoke <key-id>