@myapihq/cli 2.31.8 → 2.31.9

package/dist/commands/account.d.ts

@@ -3,7 +3,7 @@ import type { Flags } from '../helpers.js';
 import type { Exposes } from '../exposes.js';
 export declare const EXPOSES: Exposes;
 export declare const SCHEMA: FlagSchema;
-export declare const HELP = "Usage: myapi account <subcommand>\n\nSubcommands:\n  api-keys        Manage API keys \u00B7 list / create / revoke\n  config          Manage CLI defaults (org, funnel, domain) \u00B7 supports set-org / set-funnel / set-domain\n  import-key      Import an existing API key non-interactively\n  install-skills  DEPRECATED \u2014 use `myapi install-skills` instead\n  keys            Alias for api-keys\n  link [email]    Upgrade anonymous account to registered (or add a second session)\n                  Use myapi account setup to create a completely new account\n  login           Sign in via your browser \u2014 Google or email code (preview: --mock)\n  mailing-address Get or set the account's mailing address (CAN-SPAM)\n  registrant      Manage stored WHOIS contact info for domain registration \u00B7 set / get / clear\n  resume-sending  Turn email sending back on after an automatic pause (account or org)\n  sending         Whether this account can send email, and how close it is to the limits\n  setup           Configure your account\n  switch [index]  Switch active account by index or email\n  whoami          Show current account \u00B7 supports --json";
+export declare const HELP = "Usage: myapi account <subcommand>\n\nSubcommands:\n  api-keys        Manage API keys \u00B7 list / create / revoke\n  config          Manage CLI defaults (org, funnel, domain) \u00B7 supports set-org / set-funnel / set-domain\n  import-key      Import an existing API key non-interactively\n  install-skills  DEPRECATED \u2014 use `myapi install-skills` instead\n  keys            Alias for api-keys\n  link [email]    Attach an email to a pre-2026-10 anonymous account (or add a second session)\n                  Use myapi account setup to create a completely new account\n  login           Sign in via your browser \u2014 Google or email code (preview: --mock)\n  mailing-address Get or set the account's mailing address (CAN-SPAM)\n  registrant      Manage stored WHOIS contact info for domain registration \u00B7 set / get / clear\n  resume-sending  Turn email sending back on after an automatic pause (account or org)\n  sending         Whether this account can send email, and how close it is to the limits\n  setup           Configure your account\n  switch [index]  Switch active account by index or email\n  whoami          Show current account \u00B7 supports --json";
 export declare const INSTALL_SKILLS_HELP = "Usage: myapi install-skills\n\nInstalls the MyAPI skills pack for AI coding agents (Claude, Codex, Gemini, \u2026).\n\nThis command writes skill definition files to:\n  ~/.agents/skills/myapi/\n\nAnd creates symlinks in the appropriate agent config directories:\n  ~/.claude/  (Claude)\n  ~/.gemini/  (Gemini)\n  ~/.cursor/  (Cursor, if detected)\n\nThese files teach agents how to use the MyAPI CLI and API directly.\nRun this command again to update existing skills to the latest version.\n\nNote: `myapi account install-skills` is deprecated and will be removed in the next minor.\nUse `myapi install-skills` going forward.";
 export declare const SUBCOMMAND_USAGE: Record<string, string>;
 export declare function link(flags?: Flags, emailArg?: string): Promise<void>;

package/dist/commands/account.js

@@ -51,7 +51,7 @@ Subcommands:
   import-key      Import an existing API key non-interactively
   install-skills  DEPRECATED — use \`myapi install-skills\` instead
   keys            Alias for api-keys
-  link [email]    Upgrade anonymous account to registered (or add a second session)
+  link [email]    Attach an email to a pre-2026-10 anonymous account (or add a second session)
                   Use myapi account setup to create a completely new account
   login           Sign in via your browser — Google or email code (preview: --mock)
   mailing-address Get or set the account's mailing address (CAN-SPAM)

package/dist/commands/login.d.ts

@@ -3,7 +3,7 @@ import type { Flags } from '../helpers.js';
 import type { Exposes } from '../exposes.js';
 export declare const EXPOSES: Exposes;
 export declare const SCHEMA: FlagSchema;
-export declare const HELP = "Usage: myapi login [--no-browser] [--mock]\n\nSigns in to MyAPI in your browser \u2014 Google, or an email code \u2014 and stores the\nsession in ~/.myapi/config.json. The account created/linked here is the same\naccount model as `myapi account setup`; anonymous setup stays available and\nunchanged.\n\nFlags:\n  --no-browser  Print the sign-in URL instead of opening a browser\n  --mock        Run the flow against an in-process mock (offline UX preview;\n                nothing is saved, no network calls leave your machine)";
+export declare const HELP = "Usage: myapi login [--no-browser] [--mock]\n\nSigns in to MyAPI in your browser \u2014 Google, or an email code \u2014 and stores the\nsession in ~/.myapi/config.json. The account created/linked here is the same\naccount model as `myapi account setup`: one account type, always with a\nverified email. Anonymous accounts are no longer created.\n\nFlags:\n  --no-browser  Print the sign-in URL instead of opening a browser\n  --mock        Run the flow against an in-process mock (offline UX preview;\n                nothing is saved, no network calls leave your machine)";
 export interface Pkce {
     verifier: string;
     challenge: string;

package/dist/commands/login.js

@@ -28,8 +28,8 @@ export const HELP = `Usage: myapi login [--no-browser] [--mock]
 
 Signs in to MyAPI in your browser — Google, or an email code — and stores the
 session in ~/.myapi/config.json. The account created/linked here is the same
-account model as \`myapi account setup\`; anonymous setup stays available and
-unchanged.
+account model as \`myapi account setup\`: one account type, always with a
+verified email. Anonymous accounts are no longer created.
 
 Flags:
   --no-browser  Print the sign-in URL instead of opening a browser

package/dist/commands/setup.js

@@ -25,7 +25,6 @@ function getCliVersion() {
     return _cliVersion;
 }
 export const EXPOSES = [
-    'POST /hq/account/anonymous',
     'POST /hq/account/send-code',
     'POST /hq/account/verify-code',
     'GET /hq/account/me',
@@ -215,9 +214,6 @@ async function registeredFlow() {
     const data = await hq.verifyCode(email, code);
     return { ...data, email };
 }
-async function anonymousFlow() {
-    return hq.createAnonymousAccount();
-}
 // ---------------------------------------------------------------------------
 // Main setup command
 // ---------------------------------------------------------------------------
@@ -241,13 +237,14 @@ Examples:
   echo "$MY_KEY" | myapi account import-key
   MYAPI_API_KEY="$MY_KEY" myapi account import-key --install-skills
   myapi account import-key < key.txt`;
-const SETUP_HELP = `Usage: myapi account setup [--anonymous] [--yes] [--install-skills|--no-skills]
+const SETUP_HELP = `Usage: myapi account setup [--yes] [--install-skills|--no-skills]
 
-Configures your account and stores your default org and funnel so you don't
-need to pass --org or --funnel on every command.
+Creates your account with an email code, grants the $5 free credit, and stores
+your default org and funnel so you don't need to pass --org or --funnel on
+every command. There is one account type: every account has a verified email.
+For CI or Docker, mint a key in your account and use \`myapi account import-key\`.
 
 Flags:
-  --anonymous       Skip registration, create anonymous account
   --yes             Skip confirmation prompts
   --install-skills  Auto-install skills pack
   --no-skills       Skip skills installation`;
@@ -362,34 +359,23 @@ export async function setup(flags = {}) {
         }
         // Fall through to setup flow — new account will be added to the list.
     }
-    let apiKey = '';
-    let accountId = '';
-    let defaultOrg = '';
-    let defaultFunnel = '';
-    let subdomainUrl = '';
-    let isAnonymous = false;
-    let email = '';
-    const useAnon = flags.anonymous || flags.anon;
-    const wantsRegister = useAnon ? false : await confirm('› Register with email? (Y/n, or N to continue anonymously) ', true);
-    if (wantsRegister) {
-        const data = await registeredFlow();
-        apiKey = data.api_key;
-        accountId = data.account_id;
-        defaultOrg = data.default_org;
-        defaultFunnel = data.default_funnel;
-        email = data.email;
-    }
-    else {
-        info('› Continuing as anonymous — sites ship to *.makeautonomous.com');
-        info('  (Anonymous accounts have $0 credit. Link an email anytime to unlock $5 free credit and paid actions: myapi account link <email>)');
-        const data = await anonymousFlow();
-        apiKey = data.api_key;
-        accountId = data.account_id;
-        defaultOrg = data.default_org;
-        defaultFunnel = data.default_funnel;
-        subdomainUrl = data.subdomain_url;
-        isAnonymous = true;
+    // Anonymous accounts were retired on 2026-10-04: a key with no identity was
+    // the abuse surface for free pages and functions, could not be measured in
+    // the funnel, and could never receive the $5 credit. Accounts created that
+    // way before the cut keep working (`myapi account link` attaches an email);
+    // new ones are refused here and by the backend.
+    if (flags.anonymous || flags.anon) {
+        throw new Error('Anonymous accounts are no longer created. Every account has a verified email:\n' +
+            '  myapi account setup          — email code, $5 free credit, no card\n' +
+            '  myapi login                  — Google or email, in the browser\n' +
+            '  myapi account import-key     — a key minted in an existing account (CI, Docker)');
     }
+    const data = await registeredFlow();
+    const apiKey = data.api_key;
+    const accountId = data.account_id;
+    let defaultOrg = data.default_org;
+    let defaultFunnel = data.default_funnel;
+    const email = data.email;
     const wantsSkills = await resolveSkillsPreference(flags);
     await installAndPersistSkills({
         api_key: apiKey,
@@ -397,7 +383,7 @@ export async function setup(flags = {}) {
         email: email || undefined,
         default_org: defaultOrg,
         default_funnel: defaultFunnel,
-        is_anonymous: isAnonymous,
+        is_anonymous: false,
     }, wantsSkills);
     // Report where the config ACTUALLY went. This was hardcoded to
     // `~/.myapi/config.json`, which became a lie the moment MYAPI_CONFIG_DIR
@@ -423,15 +409,7 @@ export async function setup(flags = {}) {
         }
     }
     catch { /* non-fatal */ }
-    if (isAnonymous) {
-        success('› Setup complete. No card, no email, ready to ship.');
-        if (subdomainUrl)
-            info(`› Your funnel: ${subdomainUrl}`);
-        info('› Upgrade anytime — myapi account link');
-    }
-    else {
-        success(`› Setup complete. Org ${defaultOrg} ready · $5.00 free credits added.`);
-    }
+    success(`› Setup complete. Org ${defaultOrg} ready · $5.00 free credits added.`);
     // The key just saved is account-wide, and it has to be: an org-locked key
     // cannot create orgs or manage billing, so locking the operator's own
     // credential would break the next thing they do. The scoping belongs on the

package/dist/skills/my-api-hq/SKILL.md

@@ -1,10 +1,10 @@
 ---
 name: my-api-hq
-version: 1.3.2
+version: 1.3.3
 description: >
   Auth, organizations, and billing hub. Start here to get an api_key and org_id — every other service depends on both.
 triggers: [api key, account, organization, org, billing, balance, topup, credits, setup, defaults, brand, sync brand, doctor, health check, is my org healthy]
-checksum: sha256-d09b77d74b93ca44d7b913fce6b684a6dda21d0dff9efe2686143abffeb217ee
+checksum: sha256-c6e5e9de3396995e6ea7bfb044c8253a46df12f0f9fac27fd23f5f8864a25f53
 ---
 
 # MyApiHQ
@@ -15,14 +15,11 @@ The root service. It manages accounts, API keys, organizations, and billing. No
 <!-- llm:start -->
 MyApiHQ is the platform's foundation: every other service needs an `api_key` and (for org-scoped resources) an `org_id` minted here. `myapi account setup` provisions an account, key and first org into `~/.myapi/config.json`, and later commands pick those up.
 
-### Anonymous vs registered accounts
+### One account type
 
-Two tiers, chosen at setup time:
+Every account has a verified email. `myapi account setup` sends a code, verifies it, and grants **$5 free credit** — no card. `myapi login` does the same in the browser (Google or email). For CI or Docker, mint a key in an existing account and use `myapi account import-key`.
 
-- **Anonymous** (`myapi account setup --anonymous`): zero friction, **$0 credit.** Fine for browsing the catalog and reading help.
-- **Registered** (verify email via `myapi account link <email>`): unlocks $5 free credit and the paid surface (LLM, image, email, domain register).
-
-An anonymous account upgrades any time with `myapi account link <email>`; the credit grants on verification.
+Anonymous accounts are no longer created (`--anonymous` is refused). Pre-October-2026 ones keep working; `myapi account link <email>` attaches an email and grants the credit.
 
 ### Health check
 

package/dist/skills/my-auth-api/SKILL.md

@@ -1,10 +1,10 @@
 ---
 name: my-auth-api
-version: 1.1.1
+version: 1.1.2
 description: >
   Add authentication to apps you build on MyAPI — a managed OIDC identity provider for your app's END USERS (à la Kinde/Auth0). One auth tenant per org; register OIDC clients; sign users in with managed Google or the hosted login page; verify RS256 tokens against the tenant JWKS.
 triggers: [auth, authentication, login, sign-in, oidc, oauth, jwt, jwks, sso, google sign-in, user accounts, identity provider, kinde, auth0, clerk]
-checksum: sha256-92ed5cff8e8cd5bed3f59564b3ebb6a66eb572f0914de28322fbda1b8b6ae943
+checksum: sha256-858dd9e20e5ca44e2266424fdceddd898b0d9935373f53ba4ac5dbe92de46b85
 ---
 
 # MyAuthAPI
@@ -120,12 +120,14 @@ myapi auth client list
   `http://localhost…` for local dev).
 - `402 INSUFFICIENT_FUNDS` = empty wallet → `myapi billing topup <amount>` (or keep it funded automatically: `myapi billing auto-recharge set`). `402 SPEND_CAP_EXCEEDED` = you hit your account spend ceiling → raise it with `myapi billing spend-cap`.
 
-## Anonymous accounts
+## Machine-owned and throwaway accounts
 
-`myapi account setup --anonymous` skips registration and creates an account
-with no email — for throwaway or machine-owned orgs. It cannot receive
-password resets or magic links, so attach a real identity before anything
-depends on it. `myapi status` shows `Type: anonymous`.
+Anonymous accounts are no longer created (`myapi account setup --anonymous`
+is refused). For a machine-owned or throwaway identity, mint an org-locked key
+in a real account (`myapi keys create --org <id> --grant '*'`) and hand that
+to the workload with `myapi account import-key`. A pre-October-2026 anonymous
+account still shows `Type: anonymous` in `myapi status`; attach an email with
+`myapi account link <email>` before anything depends on it.
 
 **End-to-end example:** `examples/authenticated-app/` in github.com/myapihq/myapi walks the full seam — hosted login → token verification → per-user KV record → deployed container — including the parts that cost real users hours (verify the id_token for identity; the access token is a bearer credential for `<issuer>/userinfo`).
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@myapihq/cli",
   "license": "Apache-2.0",
-  "version": "2.31.8",
+  "version": "2.31.9",
   "description": "Command-line interface for MyAPI — websites on your own domain, business email, payments, a customer list. Agents should use the MyAPI MCP server instead: https://api.myapihq.com/mcp",
   "type": "module",
   "files": [
@@ -45,7 +45,7 @@
     "lint:skills:strict": "node scripts/copy-skills.js && node scripts/lint-skills.js --strict"
   },
   "dependencies": {
-    "@myapihq/sdk": "^2.31.8"
+    "@myapihq/sdk": "^2.31.9"
   },
   "devDependencies": {
     "@types/node": "^25.6.0",