Falcata ID

Falcata ID (id.falcata.io) is the shared sign-in for every Falcata product. One identity, one sign-in surface — whichever app you arrive at, authentication happens at the portal and hands you back.

How sign-in works

Sign-in is a magic link: enter your email, click the link it sends, and you're in. There is no password to manage by default.

Each app then holds its own session — identity is shared, but a session in one app is not a cookie readable by another. When you move between apps, the portal federates your identity with a short-lived, single-use signed token, so the handoff is seamless without any app ever seeing another's credentials.

Sessions and sign-out

Your active sessions are visible in your account settings and via the account API. Sign out everywhere revokes every session across every Falcata app in real time — one action, effective immediately, including on open tabs.

Relation to tokens

Falcata ID authenticates people. Programmatic access — personal access tokens, the device flow, OAuth — always bottoms out in a Falcata ID account: every token is bound to a user, inherits at most that user's permissions, and dies with the account's access.