Sign-in support in browsers
Apps that run pi-ai in the browser sign in with pi-connect. This is what works there, and why the rest does not. Outside browsers every method works.
Providers
Auth documents revision 2026-10-30.1, also served from /api/auth/providers.
| Provider | Sign-in method | In a browser |
|---|---|---|
| Radius | Radius API key | Works. |
| Sign in with a device code | Works. | |
| Sign in with the browser | Not in browsers. Radius redirects this sign-in only to a local server and offers no paste fallback. Use the device code. | |
| Anthropic | Anthropic API key | Works. |
| Sign in with Claude (copy a code) | Works; sign-in and refreshes go through pi.dev. Anthropic's token endpoint does not accept browser requests, so the sign-in and every token refresh go through pi.dev's relay. | |
| Sign in with Claude (paste the address) | Works by pasting an address; apps must enable it. Anthropic redirects this sign-in only to localhost: after signing in, paste the address of the page that fails to load. Its token endpoint does not accept browser requests, so the sign-in and every token refresh go through pi.dev's relay. | |
| OpenAI | OpenAI API key | Works. |
| Sign in with ChatGPT | Works by pasting an address; apps must enable it. OpenAI redirects this sign-in only to 127.0.0.1: after signing in, paste the address of the page that fails to load. | |
| OpenAI Codex (legacy) | All | Not in browsers. chatgpt.com accepts browser requests only from pages on http://localhost. |
| GitHub Copilot | GitHub Copilot token | Works. |
| Sign in with GitHub | Works; sign-in and refreshes go through pi.dev. GitHub's sign-in endpoints do not accept browser requests and the Copilot token endpoint rejects the headers Copilot needs, so the sign-in and every token refresh go through pi.dev's relay. GitHub Enterprise is not supported. | |
| xAI | xAI API key | Works. |
| Sign in with SuperGrok or X Premium | Works; sign-in and refreshes go through pi.dev. auth.x.ai does not accept browser requests, so the sign-in and every token refresh go through pi.dev's relay. | |
| Meta | Meta Model API key | Works. |
| Sign in with Meta | Works; sign-in and refreshes go through pi.dev. auth.meta.com and Meta's key endpoint do not accept browser requests, so the sign-in and the daily key renewal go through pi.dev's relay. | |
| Kimi For Coding | All | Not in browsers. api.kimi.com does not accept browser requests. |
| OpenRouter | All | Not in browsers. pi talks to OpenRouter's Anthropic-compatible API, and openrouter.ai refuses the anthropic-* headers those requests carry from browsers. |
| Gemini API key | Works. | |
| Mistral | Mistral API key | Works. |
| Groq | Groq API key | Works. |
| DeepSeek | DeepSeek API key | Works. |
| Cerebras | Cerebras API key | Works. |
| Together | Together API key | Works. |
| Hugging Face | Hugging Face token | Works. |
| Fireworks | All | Not in browsers. api.fireworks.ai does not accept browser requests. |
| Moonshot AI | All | Not in browsers. api.moonshot.ai does not accept browser requests. |