ScopeHold App

Sign in and land in the first live MVP dashboard.

This milestone is intentionally narrow: authenticate with Google, create a workspace, create a project, and confirm the shell is using real data.

Shared secret custody for humans and agents.
Real session cookies and hosted database state.
Thin app flow now, deeper secret management next.

Authentication

Continue with Google

Google redirects to the API callback, the API issues the session cookie, and then you return to the dashboard.

Local dev redirect: http://localhost:4000/auth/google/callback