Guide

Authentication for IDEs

How the secure login flow works when connecting your IDE to AlphaTales

5 min read

What you'll learn

  • Understand the IDE authentication flow
  • Complete the email verification process
  • Know when re-authentication is required
  • Troubleshoot common authentication issues

Overview

When your IDE connects to AlphaTales for the first time, it opens a secure login page in your browser. You verify your identity with your email and a one-time code, and then you are redirected back to your IDE. This guide explains each step of the process.

The Authentication Flow

Step 1: IDE Initiates Connection

When you first use an AlphaTales tool in your IDE (or when your session has expired), the IDE opens a browser window pointing to the AlphaTales authorization page. The page displays "Connect your IDE" and asks you to sign in.

Step 2: Enter Your Email

On the authorization page, enter the email address associated with your AlphaTales account. Click Continue to proceed.

Warning: You must use the same email address you use to log in to AlphaTales on the web. If you enter a different email, authentication will fail.

Step 3: Enter the Verification Code

AlphaTales sends a 6-digit verification code to your email inbox. Enter this code on the verification screen. The code expires after a few minutes, so enter it promptly.

If you did not receive the code:

  • Check your spam or junk folder.
  • Click Didn't get the code? Resend to request a new one.
  • Wait at least 60 seconds between resend requests.

Step 4: Redirect Back to Your IDE

After entering the correct code, you see a "Successfully Authenticated!" confirmation. You are automatically redirected back to your IDE within a few seconds. Your IDE now has a valid session and can call AlphaTales tools.

Session Duration and Re-Authentication

Your authentication session lasts for a limited period. When it expires:

  • Your IDE automatically prompts the login flow again.
  • You go through the same email-and-code verification steps.
  • No data is lost; you simply re-authorize the connection.

Tip: If you are prompted to re-authenticate frequently, check that your system clock is accurate. Time drift can cause tokens to expire earlier than expected.

Security Considerations

  • No passwords are stored in your IDE. The authentication uses a secure token exchange.
  • Only authorize from your own device. The authorization page warns: "Only authorize if you initiated this request."
  • Tokens are scoped to your account. Your IDE can only access projects and tasks that your AlphaTales account has permission to view.
  • Use a different email link if you need to switch accounts during the verification step.

Troubleshooting

IssueSolution
Browser does not openCopy the authorization URL from your IDE output and paste it into a browser manually.
Code is invalid or expiredClick "Resend" to get a fresh code. Codes expire after a few minutes.
"No account found" errorMake sure you have an AlphaTales account with the email you entered. Sign up at alphatales.io if needed.
Redirect fails after verificationCheck that your IDE is still running and the MCP server is active. Restart the IDE and try again.

Next Steps

Once authenticated, your IDE is ready to use AlphaTales tools. See the MCP Tools Reference for a complete list of what you can do.

Related guides