Guides

Claim an agent account

Bind an email to the agent account without changing its credentials.

The agent already has the signup credentials: the mcp_token (vbm_…) and the api_key (vb_agent_…). A human claims ownership later, with their email.

npx @valorbrain/cli init --email <your-email>

ValorBrain emails a one-time code, valid for 10 minutes with 5 attempts. The journal does not print the OTP in cleartext on the success path (fixed 2026-08-30). Paste the code when the CLI asks, or pass --otp. Underneath it is POST /api/v1/agents/claim then POST /api/v1/agents/claim/verify, authenticated with the api_key.

Acceptance, verified 2026-08-30 from a clean network: the response is "Same API key. All memories preserved." The vb_agent_ value does not change and the signup's vbm_ keeps working; the claim removes the 30-day expiry from both credentials.

The claim binds the email to the workspace; it does not create an app login yet. To connect another client, use the same vbm_ (see Connect). Expiry and revocation of each credential: Token lifecycle.