Sign-in and access
Claim links, game connections and agent logins, and what each one allows.
The CLI never asks for your password or an API key. Instead, it prints a private link, and you open it, sign in on rosebud.ai and approve.
| Link | Comes from | Lets the CLI | Expires |
|---|---|---|---|
Claim link (claim_url) | rosebud publish, without a login | Nothing. It moves the game into your account. | One hour after upload |
Game connection (approval_url) | rosebud connect | Update one game: its files, title, description and cover. | Link: 30 minutes. Access: 90 days. |
Agent login (approval_url) | rosebud login | Make and download assets with your credits, and publish new games into your account. | Link: 30 minutes. Access: 90 days after its last use. |
Keep all three links private. Anyone who has one can use it.
Game connections
A connection covers a single game. It can't reach your other games, your account or billing, or run AI generation. Revoke it in the game's Project Settings → Manage connected agents (not the Connected agents page), or run rosebud disconnect.
Agent logins
A login can make assets, list and download your assets, and publish new games into your account. It can't change billing or manage your account. Revoke it on your account's Connected agents page, or run rosebud logout.
An expired login isn't renewed: approve a new one with rosebud login. Logging out, or a login that expires, doesn't disconnect the games it published. Each of those has its own game connection, which lasts 90 days.
Where credentials are stored
The CLI keeps credentials in ~/.config/rosebud/credentials with private file permissions, separate from the project. Set ROSEBUD_CREDENTIALS_DIR to use another folder. Game details (not secrets) go in .rosebud/project.json in your project.