Sign in happens in your terminal.
whydot has no web login form. Your agent holds the credential, so the credential is issued where your agent runs. There is nothing to type here.
The whole sign-in, done by the agent. You only read out the code from the email.
whydot login · whydot accounts create · whydot-mcp · whydot logout
Sign me in to whydot (https://whydot.com), the agent-native domain registrar. API: https://api.whydot.com/v1 1. If the CLI is missing: curl -fsSL https://whydot.com/install.sh | sh It needs Node.js 20 or newer and links `whydot` and `whydot-mcp` into ~/.local/bin. If it says that directory is not on PATH, add it. 2. Start sign-in: whydot login --email me@acme.com 3. whydot emails me an 8-character code, valid 15 minutes, 5 attempts. Ask me for it and type it in. Do not ask me for a password or an API key - there is no password, and the CLI stores the key itself. Never print the key or put it in a file you show me. 4. If I have no account yet: whydot accounts create --slug acme Signing in holds an enrolment token for 30 minutes, so that command needs nothing else in that window. Run it as its own step, not chained after login. 5. Register the MCP server with your harness. In Claude Code: claude mcp add whydot -- whydot-mcp Done when `whydot domains list` and `whydot keys list` both answer without an auth error. Then say which account you are signed in to.- Install the CLI. curl -fsSL https://whydot.com/install.sh | sh
- Run whydot login. It asks for your email address and nothing else.
- We email an 8-character code, valid for 15 minutes. Five wrong guesses from one place and that place waits — the 15 minutes run from each guess, not from the last one, so guesses come back one by one as they age out. A code that is not even the right shape is refused without counting against you; a typo that turns one character into another valid one still counts as a wrong guess. The code itself stays live, deliberately — a fresh one would be refused in that window too, and letting guesses kill the code would let anyone lock you out of your own address.
- Type the code in the terminal. The CLI stores the API key for you. It is shown once and never retrievable afterwards.
- Create your account: whydot accounts create --slug acme. Signing in holds an enrolment token for 30 minutes, so this needs nothing else in that window.
No CLI on this machine? The API answers the same two calls directly: POST /v1/auth/login/start, then POST /v1/auth/login/verify. Both are in the docs. whydot logout revokes the key it minted and deletes it locally.