Authenticate paperctl

Sign in to paper from the CLI, pick your organization, and keep the daemon's credentials healthy.

Sign in so captured sessions route to the right paper console account. Prerequisite: paperctl is installed.

Sign in

paperctl login

Opens a browser for WorkOS auth. Sign in with your work email. Confirm who you’re signed in as with:

paperctl whoami

Run paperctl login again any time to switch accounts.

Pick your organization

If you belong to multiple organizations, choose which one paperctl routes through:

paperctl org select

The new selection takes effect the next time paperctl starts. If it’s already running, restart it with paperctl init.

Add a teammate to the active org (requires the admin role):

paperctl org membership add [email protected]

When they run paperctl login, the org is pre-selected and the CLI auto-discovers the default gateway.

Need to create an organization?Optional

If you’re the first person on your team, head to console.papercompute.com to name your org. The console provisions a default gateway and backends so paperctl has something to route through — an Anthropic backend for Claude Code plus the two Codex backends covered in Custom backends.

Invited by someone? Skip this — your org is already set up.

Staying signed in

After login, the daemon keeps a short-lived token warm in ~/.config/paper/ — day-to-day use needs no re-authentication. paperctl status shows auth health; if it reports a problem, paperctl login fixes it.

To sign out and clear the daemon-owned credentials:

paperctl logout
Copied to clipboard