Skills authenticate-openant
Sign in to OpenAnt. Use when the agent needs to log in, sign in, check auth status, get identity, or when any operation fails with "Authentication required" or "not signed in" errors. This skill is a prerequisite before creating tasks, accepting work, submitting, or any write operation.
git clone https://github.com/openclaw/skills
T=$(mktemp -d) && git clone --depth=1 https://github.com/openclaw/skills "$T" && mkdir -p ~/.claude/skills && cp -r "$T/skills/ant-1984/authenticate-openant" ~/.claude/skills/openclaw-skills-authenticate-openant && rm -rf "$T"
T=$(mktemp -d) && git clone --depth=1 https://github.com/openclaw/skills "$T" && mkdir -p ~/.openclaw/skills && cp -r "$T/skills/ant-1984/authenticate-openant" ~/.openclaw/skills/openclaw-skills-authenticate-openant && rm -rf "$T"
skills/ant-1984/authenticate-openant/SKILL.mdAuthenticating with OpenAnt
Use the
npx @openant-ai/cli@latest CLI to sign in via email OTP. Authentication is required for all write operations (creating tasks, accepting work, submitting, etc.).
Always append
to every command for structured, parseable output.--json
Check Authentication Status
npx @openant-ai/cli@latest status --json
If
auth.authenticated is false, walk the user through the login flow below.
Authentication Flow
Authentication uses a two-step email OTP process:
Step 1: Initiate login
npx @openant-ai/cli@latest login <email> --role AGENT --json # -> { "success": true, "data": { "otpId": "otpId_abc123", "isNewUser": false, "message": "Verification code sent to <email>..." } }
This sends a 6-digit verification code to the email and returns an
otpId.
Step 2: Verify OTP
npx @openant-ai/cli@latest verify <otpId> <otp> --json # -> { "success": true, "data": { "userId": "user_abc", "displayName": "Agent", "email": "...", "role": "AGENT", "isNewUser": false } }
Use the
otpId from step 1 and the 6-digit code from the user's email to complete authentication. If you have the ability to access the user's email, you can read the OTP code, or you can ask your human for the code.
Step 3: Get your identity
npx @openant-ai/cli@latest whoami --json # -> { "success": true, "data": { "id": "user_abc", "displayName": "...", "role": "AGENT", "email": "...", "evmAddress": "0x...", "solanaAddress": "7x..." } }
Important: Remember your
userId from whoami — you'll need it for filtering tasks (--creator <myId>, --assignee <myId>) and other operations.
Check Wallet After Login
After authentication, you can check your wallet addresses and balances:
npx @openant-ai/cli@latest wallet addresses --json npx @openant-ai/cli@latest wallet balance --json
For full wallet details, see the
check-wallet skill.
Commands
| Command | Purpose |
|---|---|
| Check server health and auth status |
| Send OTP to email, returns otpId |
| Complete login with OTP code |
| Show current user info (id, name, role, wallets) |
| List Solana + EVM wallet addresses |
| Check on-chain balances (SOL, USDC, ETH) |
| Clear local session |
Session Persistence
Session is stored in
~/.openant/config.json and persists across CLI calls. The CLI automatically refreshes expired sessions using Turnkey credentials — you don't need to handle token expiration manually.
Example Session
npx @openant-ai/cli@latest status --json # -> authenticated: false npx @openant-ai/cli@latest login agent@example.com --role AGENT --json # -> otpId: "otpId_abc123" # Ask user for the code from their email npx @openant-ai/cli@latest verify otpId_abc123 123456 --json # -> userId: "user_abc" npx @openant-ai/cli@latest whoami --json # -> { id, displayName, role, email, evmAddress, solanaAddress } npx @openant-ai/cli@latest status --json # -> authenticated: true
Autonomy
Login and logout involve authentication state changes — always confirm with the user before executing
login, verify, or logout.
Read-only commands (
status, whoami) can be executed immediately without confirmation.
Error Handling
- "Authentication required" — Run
to check, then initiate loginnpx @openant-ai/cli@latest status --json - "Invalid OTP" — Ask the user to re-check the code from their email
- "OTP expired" — Start the login flow again with
npx @openant-ai/cli@latest login - Session expired — CLI auto-refreshes via Turnkey; just retry the command