Skip to content
RightNow

Authentication

Release status

RightNow Agent is coming soon for Windows, macOS and Linux. Installation commands and workflows in these guides are reference material until the public release is available.

RightNow connects to model providers with API keys. Add one through the Connect screen, the auth CLI or an environment variable. RightNow account sign-in is retired for the agent: rightnow login, which 1.0.5 still lists, cannot complete, and RightNow Agent needs no RightNow account.

Connect a provider

RunInfra is the default provider. Get its key at runinfra.ai/settings/api-keys (sign-in required), then start RightNow:

text
rightnow

If the selected provider has no usable credential, the Connect screen opens. Choose the provider and paste its key: it is masked while you type, and RightNow validates it with the provider before storing it. /connect reopens the screen in a session.

Stored keys live in auth.json in the effective product home, with owner-only permissions. GROK_AUTH_PATH selects a different credential file.

Environment variables

Set the provider's variable in the shell that launches RightNow, replacing <your key>.

Windows PowerShell

powershell
$env:RIGHTNOW_API_KEY = "<your key>"

macOS and Linux

text
export RIGHTNOW_API_KEY='<your key>'

A nonempty provider environment variable overrides its stored key. For RunInfra, RIGHTNOW_API_KEY takes priority over RUNINFRA_GATEWAY_KEY.

Configuration files

Provider settings live in the user config in the effective product home, which RIGHTNOW_HOME can override. Default paths for a new installation:

PlatformDefault config path
Windows$HOME\.rightnow\config.toml
macOS and Linux~/.rightnow/config.toml

A model's model_provider selects a provider ID, and env_key names the environment variable that supplies its key; in a list, the first nonempty variable wins. Keep the key in the environment or auth store. An api_key field would write it into the config file. See Providers for model entries and provider configuration.

Manage stored credentials

  • rightnow auth loginStart the credential flow from your shell. --provider <id> picks the provider.
  • rightnow auth login --with-api-keyFor scripts: reads the key from standard input. Pipe it in; never put it in a command argument.
  • rightnow auth listInspect configured, environment and stored credential sources.
  • rightnow auth statusCheck the provider, model and credential source in use. --json prints one object.
  • rightnow auth logout runinfraRemove only RunInfra's stored key. A set provider environment variable remains active after logout.

Related