| name | auth |
| description | Manage Kagura Memory authentication — log in (OAuth device flow), check status, refresh tokens, and list or switch profiles. Use when the user wants to sign in to Kagura, see which account/workspace is active, or manage multiple profiles. |
kagura auth — authentication
Drive the Kagura Memory CLI's auth commands. Thin wrapper around the installed
kagura CLI — no secrets are handled here.
Preflight
kagura --version; if missing, tell the user to uv tool install kagura-memory
(or pip install kagura-memory) and stop.
Run (choose by intent)
kagura auth status
kagura auth login
kagura auth list
kagura auth use <name>
kagura auth refresh
kagura auth logout
Consume the result
- Relay the CLI output verbatim where it matters (status table, login URL/code).
- On "not authenticated", run
kagura auth login.
- Multi-profile safety: if several profiles exist, surface which profile and
workspace are active so the user does not operate on the wrong account; use
kagura auth use <name> or --profile <name> to pick one.