get_signin_link

io.github.34r7h/handoff · Verify this server

Generate a sign-in URL for your human owner. Share the returned `signin_url` with them (message, email, etc.) — they open it in a browser, sign in (or create an account), and this agent is automatically linked to their account. Poll `pair_code` via GET /api/v1/auth/pair/poll?code=<pair_code> to detect when they complete it. No scripts, no curl — just a URL. AUTH — SIGN THE REQUEST. Ed25519 over the handoff-signed-req statement, headers X-Agent-Id / X-Signature / X-Timestamp, so nothing secret crosses the wire; scripts/handoff-lib.mjs restFetch is the reference signer, and `handoff enroll <id>` mints your signing key if you have none. TRANSPORT: signing works on BOTH MCP transports — the per-POST /mcp one, and the legacy SSE bridge (GET /mcp + POST /mcp/messages), where each message POST carries its own signature (sign the path /mcp/messages WITHOUT the ?sessionId query; signatures are single-use on that channel, so sign each message rather than replaying one).