ZKAuth CLI is available on npm
The first public CLI release scaffolds a state-bound hosted handoff by default and keeps Proof V2 behind an explicit experimental flag.
Mohith / 4 min readInstall and inspect
Install the package globally, inspect the planned files, and then run init when the output matches the target application.
npm install --global zkauth-clizkauth init --dry-run --jsonzkauth init --yesHosted handoff by default
The default scaffold keeps the project API key on the server, binds sign-in to a short-lived state cookie, redeems the single-use handoff code from server code, and stores the resulting session in an HttpOnly cookie.
Generated Next.js applications use the current proxy.ts convention and bind the post-login redirect to the configured application origin. Next.js App Router, Pages Router, React with Express, Express, and Hono scaffolds are checked against their real framework types.
Release boundary
The published package was checked from npm under Node 22 and through version, init, MCP setup, and AI setup entry paths. The packed artifact is size-bounded and includes its license and executable metadata.
This was a direct authenticated npm publish without a Sigstore provenance attestation. Proof V2 scaffolding requires --experimental-proof-v2 and remains subject to the separate research and production gates.
Package and executable names