Authentication commands let you connect Jazz to external services that require OAuth or API authentication.Documentation Index
Fetch the complete documentation index at: https://mintlify.com/lvndry/jazz/llms.txt
Use this file to discover all available pages before exploring further.
jazz auth gmail login
Authenticate with Gmail using OAuth2.- Opens your browser to Google’s OAuth consent screen
- Prompts you to grant Jazz permission to access Gmail
- Stores the OAuth tokens securely in
~/.jazz/credentials/ - Enables email-related tools and workflows
Gmail authentication uses OAuth2 with the minimum required scopes for reading and managing emails.
jazz auth gmail logout
Revoke Gmail authentication and delete stored tokens.- Delete OAuth tokens from local storage
- Disable email-related tools
- Require re-authentication for future email access
Supported services
Currently, Jazz supports authentication for:Gmail
OAuth2 authentication for reading, sending, and managing emailsScopes:
gmail.readonly- Read emailsgmail.modify- Archive, label, delete emailsgmail.send- Send emails
Credential storage
Authentication credentials are stored securely:- Location:
~/.jazz/credentials/ - Format: Encrypted JSON files
- Permissions: Read/write for user only (600)
Examples
Authenticate with Gmail
Check authentication status
After authenticating, check if Gmail tools are available:Revoke authentication
Troubleshooting
Browser doesn't open
Browser doesn't open
If the browser doesn’t open automatically:
- Copy the URL displayed in the terminal
- Paste it into your browser manually
- Complete the OAuth flow
- Jazz will detect the authentication callback
Permission denied error
Permission denied error
If you see a permission denied error:
- Check that
~/.jazz/credentials/exists and has correct permissions - Run:
chmod 700 ~/.jazz/credentials/ - Try authenticating again
OAuth consent screen blocked
OAuth consent screen blocked
If Google blocks the OAuth consent screen:
- Ensure you’re using a Google account (not G Suite with restricted access)
- Check if your organization blocks OAuth apps
- Contact your administrator if you’re using a managed Google Workspace account
Token expired
Token expired
If you see “token expired” errors:
- Run
jazz auth gmail logout - Run
jazz auth gmail loginto re-authenticate - Jazz will obtain fresh tokens
Security considerations
- Never share your
~/.jazz/credentials/directory - Add
credentials/to your.gitignore - Use separate Google accounts for testing
- Revoke access from Google Account settings if compromised
- Regularly audit which services Jazz has access to
Revoking access
You can revoke Jazz’s access from Google’s side:- Visit Google Account Permissions
- Find “Jazz” in the list of apps
- Click Remove Access
- Run
jazz auth gmail logoutto clean up local tokens
Future authentication
Jazz will support authentication for additional services:- Calendar (Google Calendar, Outlook)
- Slack (send messages, read channels)
- GitHub (via OAuth, in addition to MCP)
- Linear (issues, projects)
- Notion (via OAuth, in addition to MCP)
Next steps
Email automation
Learn how to automate email workflows
Workflows
Create workflows that use authenticated services