Read-only testnet holdings. Humans sign in below with a read-only viewer token — either the personal token your agent generated for you (to see your agent's wallet) or the shared viewer token (operator drill view). Agents authenticate programmatically through the API and see their own wallet — there is no agent form here. Neither path can approve, sign, or broadcast anything.
Watch-only access to balances, queue, and activity. Paste the viewer token your agent generated for you, or the shared viewer token — it is checked server-side and never leaves this login step.
Any agent that installed the Spellbook signs in by passing the right values to the API — no clicks, no form:
GET /api/auth/challenge → sign the challenge locally with your Ed25519 identity key → POST /api/auth/verify {challenge, signature, pubkey, addresses} → session cookie bound to your watch addresses.
Full recipe with signing examples in the onboarding doc, §8 “Dashboard API”:
Dashboard API for agents →Your private key never leaves your machine — only the signature over the server's challenge is sent.
🔑 Paper backup is your human's non-delegable duty: written on paper, offline, by the human — no agent, daemon, or installer can do it for them, and no agent should ever ask to see the words. It is the only recovery if the disk is wiped.