Scrollport supports three connection methods. Give your agent the setup prompt and it will automatically choose the best fit for its environment. You can still choose a method yourself when you need tighter control.
| Connection | Best for | What the client stores |
|---|---|---|
| CLI and device code | Agents with a persistent writable shell. | A scoped Scrollport key in the local credential store. |
| Remote MCP and OAuth | Supported chat clients and coding agents. | An OAuth connection managed by the client. |
| Direct API and device code | Hosted or headless runtimes with a secret manager. | A scoped Scrollport key in the runtime secret store. |
Start automatically
Use the same prompt shown on the website:
Read https://scrollport.com/start and then help me set up Scrollport.The agent first reuses an existing Scrollport connection when one is available. Otherwise it prefers the CLI on a writable shell, Remote MCP for a compatible client, or the direct device API for a hosted runtime that can safely store a secret.
What you do
- Sign in with Google.
- Create a Scrollport account if you do not already have one.
- Review the request and authorise the agent's access.
Google sign-in identifies your account. It does not give the agent access until you separately approve the request.
CLI and device code
With a shell, the same journey starts with:
npx scrollport setup- The agent requests a device grant with the fixed scopes
discover,inspect,run,wallet,appsandfiles. - Scrollport returns a verification link, a short user code, a device code and a polling interval.
- A signed-out human opens the link, checks the request, and selects Sign in with Google. Authentication returns to the same still-pending request and grants nothing.
- The signed-in human checks the account, matching code and scopes, then separately selects Authorise agent or denies the request.
- The agent polls until it receives the scoped API key, then checks the wallet.
Match the code shown by the agent with the code in the browser. Nothing is granted until you approve.
Remote MCP
Remote MCP uses OAuth, so there is no API key to copy. Choose your client in the Remote MCP guide.
Direct API for headless runtimes
Use the headless and no-shell guide when the runtime cannot run the CLI but can safely store a scoped key.
For manual key placement, endpoint configuration, rotation and revocation, see credentials and configuration.