Sign in happens in your terminal.
whydot has no web login form. Your agent holds the credential, so the credential is issued where your agent runs. There is nothing to type here.
The whole sign-in, done by the agent. You only read out the code from the email.
whydot login · whydot accounts create · whydot-mcp · whydot logout
Sign me in to whydot (https://whydot.com), the agent-native domain registrar. API: https://api.whydot.com/v1 1. If the CLI is missing: curl -fsSL https://whydot.com/install.sh | sh It needs Node.js 20 or newer and links `whydot` and `whydot-mcp` into ~/.local/bin. If it says that directory is not on PATH, add it. 2. Start sign-in: whydot login --email me@acme.com 3. whydot emails me an 8-character code, valid 15 minutes, 5 attempts. Ask me for it and type it in. Do not ask me for a password or an API key - there is no password, and the CLI stores the key itself. Never print the key or put it in a file you show me. 4. If I have no account yet: whydot accounts create --slug acme Signing in holds an enrolment token for 30 minutes, so that command needs nothing else in that window. Run it as its own step, not chained after login. 5. Register the MCP server with your harness. In Claude Code: claude mcp add whydot -- whydot-mcp Done when `whydot domains list` and `whydot keys list` both answer without an auth error. Then say which account you are signed in to.- Install the CLI. curl -fsSL https://whydot.com/install.sh | sh
- Run whydot login. It asks for your email address and nothing else.
- We email an 8-character code, valid for 15 minutes. Five wrong guesses from one place and that place waits up to 15 minutes — the window runs from each guess rather than from the last, so guesses come back one by one as they age out. A code that is not even the right shape is refused without counting against you. Someone else's wrong guesses never kill the code you are holding.
- Type the code in the terminal. The CLI stores the API key for you. It is shown once and never retrievable afterwards.
- Create your account: whydot accounts create --slug acme. Signing in holds an enrolment token for 30 minutes, so this needs nothing else in that window.
No CLI on this machine? The API answers the same two calls directly: POST /v1/auth/login/start, then POST /v1/auth/login/verify. Both are in the docs. whydot logout revokes the key it minted and deletes it locally.