Exchanging code for tokens…

Plaud redirected you here with a one-time code. The broker is calling Plaud's token endpoint server-side. This should take less than a second.

✓ Plaud connected

Connected as

Paste this short code into your CRHQ Control Room chat — the skill will fetch the bundle automatically and store it. Code is single-use and expires in 5 min.

…

copied ✓

Then in CRHQ chat: bun run scripts/plaud-login.mjs pickup <code> (or the skill will offer this when you run /plaud-login).

Or paste the raw JSON bundle (fallback)

If your CRHQ doesn't yet have the pickup subcommand (v0.4+), use the old paste-the-JSON flow:

…

copied ✓

⚠ The JSON bundle contains a long-lived refresh_token. Pasting it into chat persists that credential in your conversation history. The pickup-code flow above avoids this — strongly preferred.

What is this and what does the skill do with it?

The client_secret never leaves this server — only the resulting tokens travel back to your satellite. With the pickup-code flow (v3.2), even those tokens never appear in your chat history: the code is single-use and the bundle is fetched directly satellite ↔ broker over HTTPS.

When the skill receives the bundle, it stores it in the satellite's plaud connector (encrypted at rest) under your Plaud account email. Downstream skills like plaud-ingest read it from there.

Access tokens expire after ~24h, but the bundle also contains a refresh_token. The satellite auto-refreshes via this same broker's /api/refresh endpoint — you never need to re-do this dance unless you revoke access.

✗ Authorization failed

Something went wrong during the exchange.

Details (paste this if you file a bug)

    

Go back to your CRHQ Control Room and try /plaud-login again. If this persists, the broker's /api/exchange endpoint may be down — check https://plaud.myzone.tech/api/health.

Plaud OAuth broker

This page only does something useful when Plaud redirects you here with an ?code=… after you click Allow.

If you're seeing this directly, you probably want /plaud-login in your CRHQ Control Room instead.

MyZone-AI · stateless OAuth broker · no cookies · no analytics · the resulting tokens never persist here