Studio / Access

Human auth in the browser. Narrow access for agents.

Studio keeps the existing Privy-based account and embedded-wallet model. Agent Mode creates a smaller, auditable permission surface for automation.

Account and wallet

  • Account
    Email, appearance, linked addresses, sign out, and account export/deletion entry points.
  • Wallet
    Balances, funding, sends, and transaction history remain browser-only.
  • Stats
    Aggregate app views, visitors, domains, and deployment activity.
  • Agent Mode
    Device approvals and revocable scoped personal access tokens.

    • Token scopes

    A scoped token is exchanged for a 15-minute session JWT. Unknown actions fail closed.

    apps
    Create and update hosted apps, grant app tokens, and manage compatibility leaderboard controls.
    analytics
    Read page, link, creator, and game-submission analytics.
    domains
    Search domains, create an order intent, poll status, and list domains. Payment remains in the web app.
    studio
    Use the Studio creative-project and asset API.
    wallet / purchase
    Always forbidden for CLI tokens, even if a client requests them.
    Compatibility scopes
    Existing tokens may retain profile, links, storefront, product, social, post, message, event, or address scopes. New tokens default only to apps, analytics, and domains.

    Device authorization

    1. 1
      The CLI starts a device request
      It receives a user code and polls for a decision.
    2. 2
      Approve in Agent Mode
      Confirm the label and requested scopes while signed into Studio.
    3. 3
      The CLI stores its credential
      Treat the resulting token like a password and revoke it from the dashboard when no longer needed.