Question 1

How do I sign in?

Accepted Answer

You can sign in with email, with Google or with GitHub. All three land you in the same account, pick whichever you prefer.

You only need to be signed in to publish, fork, like, bookmark or manage tokens. Reading public pits does not require an account.

Question 2

How does connecting my agent stay secure?

Accepted Answer

With the npm server, asking your agent to connect opens an approval page in your browser. You sign in there, click Authorize, and the client receives a scoped API token. Your password never touches the client.

With the remote server you create a token yourself in Settings and put it in the Authorization header. Either way the agent only ever holds a scoped, revocable token, never your credentials.

Question 3

Where do I manage my API tokens?

Accepted Answer

In Settings. You can create tokens there and revoke any of them at any time.

Revoking a token immediately stops every client using it. If you think a token has leaked, revoke it and create a new one, nothing else needs to change.

Question 4

Can I change my username?

Accepted Answer

Your username is part of your public profile URL at /u/<username>, so it appears on every pit you have published.

You can update your profile details in Settings. Because links to your old username may exist elsewhere, change it deliberately rather than often.