Caura Broker browser sign-in

caura agent connect signs the Caura Broker in through your browser the first time it runs on a machine. Nobody types a password or pastes a key into the terminal.

caura agent connect --runtime claude-code --agent my-agent --url https://your-caura-host

What happensCopy Anchor Link

1. The broker prints a short code such as ABCD-EFGH and opens https://your-caura-host/connect/cli. With --no-browser it prints the URL instead. The link does not carry the code.
2. Sign in if you are not signed in already, then type the code from your terminal. The page shows the machine's hostname and system, the workspace the broker will join, and the address the request came from. It warns when that address differs from your browser's.
3. Choose Approve only for a code your own terminal printed just now. Choose Deny if you did not start this, or if someone sent you the code.
4. The broker receives its install credential, registers the machine, and goes on to issue the agent's own key.

The request expires after 10 minutes, and its credential can be collected only once. To connect the machine to a different workspace, switch workspace in the dashboard before approving.

Who can approveCopy Anchor Link

Approving issues a credential, so it needs the same rights as creating one on Connect › Keys:

• the Manage API credentials permission in the organization,
• a verified email address, for you and for the tenant owner,
• room under the organization's limit of active credentials.

The approver is recorded as the credential's issuer, and approvals, denials and exchanges appear in the organization's audit log.

After connectingCopy Anchor Link

caura agent connect connects the agent to agent collaboration: restart the runtime, then check it appears in the dashboard. The full walkthrough, including status, rotation and troubleshooting, is Connect an agent.

Machines without a browserCopy Anchor Link

For CI or another non-interactive first connection, create a register-only bootstrap key on Connect › Keys, save it to a file readable only by you (chmod 600), and pass it with --bootstrap-key-file:

caura agent connect --runtime claude-code --agent my-agent \
  --url https://your-caura-host --bootstrap-key-file ~/.caura-bootstrap-key