Overview
Theoobo auth command manages authentication for remote servers and API keys for AI service providers. API keys enable accurate token counting and cost tracking by fetching usage data directly from provider APIs.
Usage
Subcommands
login
Log in to oobo.dev (or a self-hosted server).API key (prompted interactively if omitted)
logout
Log out and remove stored credentials.status
Show current authentication status and configured remote server.set-remote
Set a custom remote server URL (for self-hosted or enterprise deployments).Server URL (e.g.,
https://oobo.mycompany.com)anthropic
Set your Anthropic Admin API key for accurate Claude token and cost data.Anthropic Admin API key (starts with
sk-ant-admin-)openai
Set your OpenAI API key for accurate GPT token and cost data.OpenAI API key (starts with
sk-)copilot
Set your GitHub Copilot organization Personal Access Token.GitHub PAT with
manage_billing:copilot scopewindsurf
Set your Windsurf/Codeium service key for analytics.Codeium service key with Analytics Read permission
Google AI Studio API key
Examples
Configure Anthropic Admin API key
oobo stats will show accurate token counts and costs for Claude usage.
Check authentication status
Set up self-hosted server
Remove all credentials
API Key Security
API keys are stored in
~/.oobo/config.toml with chmod 0600 (owner-only read/write). They are never transmitted except to the respective service provider APIs.What API keys are used for
- Anthropic Admin API: Fetch accurate token counts and costs for Claude usage
- OpenAI API: Fetch usage data for GPT models
- GitHub Copilot PAT: Query organization billing data for Copilot usage
- Windsurf/Codeium: Access analytics for Windsurf sessions
- Google AI Studio: Query Gemini usage data
Self-Hosted / Enterprise
For self-hosted or enterprise deployments:Troubleshooting
Invalid API key error
Invalid API key error
Verify the key is correct and has the required permissions. For Anthropic, ensure you’re using an Admin API key (starts with
sk-ant-admin-), not a regular API key.Connection refused to remote server
Connection refused to remote server
Check the server URL is correct and reachable. Verify your organization’s firewall allows connections to the remote server.
Token counts still showing as estimated
Token counts still showing as estimated
Run
oobo index --force after adding API keys to re-compute stats with accurate provider data.Permission denied writing config
Permission denied writing config
Ensure
~/.oobo/config.toml is writable. Run chmod 0600 ~/.oobo/config.toml if needed.Related Commands
Setup
Initial configuration wizard
Sources
Check which tools need API keys
Stats
View token and cost analytics
Configuration
Manual config file editing
