Kernel Auth Skill

Setup and manage Kernel managed authentication connections for any website with safety checks and reauthentication support.

Quick Start

kernel-auth setup gmail

Then visit the URL printed to complete login.

Works for any website — See Using Custom Domains for any other site.

Usage

kernel-auth setup <service> [--profile-name <name>]

Built-in Services

• gmail → gmail.com
• github → github.com
• outlook → outlook.com

Using Custom Domains

For any other website, use the --domain flag:

kernel-auth setup --domain amazon.com --profile-name amazon-main
kernel-auth setup --domain linkedin.com
kernel-auth setup --domain example.com --profile-name custom-site

Examples

kernel-auth setup gmail
kernel-auth setup github --profile-name github-work
kernel-auth setup outlook

Authentication Flow

1. Create auth connection — Sets up a managed auth profile (domain + profile name)
2. Initiate login session — Generates a hosted login URL
3. You visit URL — Complete the login flow on your device/browser
4. Login state stored in profile — Kernel saves your authenticated session
5. Use authenticated browser — Create browser sessions with that profile, automatically logged in

Key Concepts

Auth Connections

• Each connection ties a service domain to a profile name
• Connections can be reused for multiple browser sessions
• Status: AUTHENTICATED (user completed login, state stored) or NEEDS_AUTH (never logged in or login session expired)

Login Sessions

• Login sessions (the hosted URL) expire after a generous timeframe as cleanup
• If you don't complete login within that window, the session is deleted
• The connection itself stays — just initiate a new login session

Check connection status:

kernel auth connections list  # Check status
kernel auth connections get <id>  # Get connection details

If a conn...