# Authenticate with rote

The public pages and public Play feed on `www.modiqo.ai` do not need a sign-in. You need a rote account when you run, create, publish, or access private Plays with the rote CLI.

## Install and sign in

Install the official CLI on macOS or Linux:

```sh
curl -fsSL https://getrote.dev/install | bash
```

Start sign-in:

```sh
rote login
```

The command opens a browser. Sign in with Google, GitHub, or your organization's SSO provider. The CLI stores the resulting session on your machine.

Check that the session is usable:

```sh
rote whoami --check
```

The command exits with status `0` when the session works. It exits with status `77` when you must sign in again.

## Use private Plays

A private Play is visible only to approved members of its organization. Sign in with the account that belongs to that organization. Rote applies the organization access rules when you search, inspect, pull, run, or publish a Play.

Inspect a Play before you run it:

```sh
rote play inspect <owner/name>
```

Use rote's credential controls when a Play needs a secret. Do not put a secret in a prompt, Play file, URL, query string, or log.

## Public website resources

Agents can read these resources without credentials:

- [Agent instructions](https://www.modiqo.ai/agent-instructions.md)
- [Product and documentation index](https://www.modiqo.ai/llms.txt)
- [Public Play feed](https://www.modiqo.ai/feeds/public-plays.v1.json)
- [Rote documentation](https://www.modiqo.ai/docs)

For help with access or an organization account, use the [Modiqo contact page](https://www.modiqo.ai/contact).