Support keyword: antigravity cli oauth

Antigravity CLI OAuth sign-in

OAuth problems can come from the browser handoff, the selected Google account, token storage, WSL, or an MCP server's own auth flow.

Updated on 2026-05-27. Independent guide. Use official Google links for downloads and account actions.

Separate the auth layers

Antigravity CLI OAuth is broader than a WSL fix. The main CLI sign-in flow, a remote terminal browser handoff, and an MCP server OAuth flow can each fail for different reasons. If you treat all of them as the same problem, you can spend an hour repeating the wrong login step.

Start by identifying what is asking for authorization: the CLI itself, a Google account entitlement, or an MCP server. Then confirm which environment stores the resulting token.

OAuth diagnosis table

SymptomLikely layerFirst check
Browser does not openTerminal handoffCopy the printed authorization URL into your browser.
Wrong account keeps signing inGoogle account selectionUse the account with Antigravity access and sign out of extras if needed.
Works locally but not in WSLToken storage or distro mismatchCheck which user and WSL distribution ran the CLI.
MCP server asks for authMCP-specific OAuthInspect MCP config and token paths separately from CLI sign-in.
Looks like a quota problemAccount access or stale tokenConfirm auth before assuming rate limits.

Safe sign-in rules

  1. Verify the domain before approving access.
  2. Never paste a Google password into the terminal or a third-party page.
  3. Do not share token files in support threads.
  4. Use one account while debugging, then test additional accounts later.
  5. If MCP auth fails, debug one server at a time.

Sources: official Google Antigravity product pages, Google Antigravity CLI documentation, and the Google Developers transition announcement. This site is an independent guide and is not affiliated with Google.

FAQ

Is OAuth the same as rate limiting?

No. A stale token or wrong account can look like access failure, but it is not the same as a true quota limit.

Why does WSL make OAuth harder?

The browser and the Linux environment may not share the same token storage or callback behavior.

Does MCP use separate OAuth?

It can. Google's MCP docs describe OAuth-related MCP configuration and token storage.

Related Antigravity CLI pages