npx skills add https://github.com/kernel/skills --skill kernel-auth为任何网站设置和管理 Kernel 托管的认证连接,提供安全检查并支持重新认证。
kernel-auth setup gmail
然后访问打印出的 URL 以完成登录。
适用于任何网站 — 对于其他网站,请参阅“使用自定义域名”部分。
kernel-auth setup <service> [--profile-name <name>]
gmail → gmail.comgithub → github.comoutlook → outlook.com对于任何其他网站,使用 --domain 标志:
广告位招租
在这里展示您的产品或服务
触达数万 AI 开发者,精准高效
kernel-auth setup --domain amazon.com --profile-name amazon-main
kernel-auth setup --domain linkedin.com
kernel-auth setup --domain example.com --profile-name custom-site
kernel-auth setup gmail
kernel-auth setup github --profile-name github-work
kernel-auth setup outlook
AUTHENTICATED(用户已完成登录,状态已存储)或 NEEDS_AUTH(从未登录或登录会话已过期)检查连接状态:
kernel auth connections list # 检查状态
kernel auth connections get <id> # 获取连接详情
如果连接显示为 NEEDS_AUTH:
kernel-auth setup <service> # 重新启动登录会话,获取新的 URL
# 列出所有认证连接
kernel auth connections list -o json
# 检查特定连接
kernel auth connections get <connection-id> -o json | jq '.status'
一旦认证连接建立,即可使用该配置文件创建浏览器会话:
# 创建已加载 Gmail 认证的浏览器
kernel browser create --profile-name gmail-main --stealth -o json
# 浏览器将自动登录到 Gmail
删除 Kernel 配置文件将删除附加到它的所有连接:
kernel profile delete gmail-main # 删除所有 gmail-main 连接
请谨慎使用。最好刷新认证,而不是删除并重新创建。
如果您通过 Telegram 发送认证 URL,请在设置中禁用链接预览:
否则 Telegram 会自动打开 URL 并消耗掉验证码。
Kernel 认证需要:
setup — 创建连接,生成登录 URL,显示说明认证码已被消耗。这发生在以下情况:
解决方案:再次运行 kernel-auth setup <service> 以获取新的验证码。
验证码约 40 分钟后过期。重新运行 setup 以生成新的验证码。
连接可能已被删除。再次运行 setup 以创建它。
您未在会话窗口内完成登录,或者需要重新认证。重新启动登录:
kernel-auth setup gmail
认证技能与 OpenClaw 定时任务集成:
AUTHENTICATED,则继续执行浏览器自动化来自 GMAIL_DAILY_WORKFLOW.md 的示例:
# 每日定时任务在抓取前检查此项
AUTH_STATUS=$(kernel auth connections list -o json | jq -r ".[] | select(.domain == \"gmail.com\") | .status")
if [ "$AUTH_STATUS" != "AUTHENTICATED" ]; then
echo "需要重新认证"
exit 1
fi
# 获取认证状态
kernel auth connections list -o json | jq '.[] | {id, status, domain}'
# 删除并重新创建
kernel profile delete gmail-main --yes
kernel-auth setup gmail
为每个账户创建单独的配置文件:
kernel-auth setup gmail --profile-name gmail-personal
kernel-auth setup gmail --profile-name gmail-work
然后在创建浏览器时使用相应的配置文件:
kernel browser create --profile-name gmail-work --stealth
每周安装次数
132
代码仓库
GitHub 星标数
3
首次出现
2026年2月21日
安全审计
安装于
codex132
cursor132
claude-code129
opencode13
gemini-cli13
github-copilot13
Setup and manage Kernel managed authentication connections for any website with safety checks and reauthentication support.
kernel-auth setup gmail
Then visit the URL printed to complete login.
Works for any website — See Using Custom Domains for any other site.
kernel-auth setup <service> [--profile-name <name>]
gmail → gmail.comgithub → github.comoutlook → outlook.comFor any other website, use the --domain flag:
kernel-auth setup --domain amazon.com --profile-name amazon-main
kernel-auth setup --domain linkedin.com
kernel-auth setup --domain example.com --profile-name custom-site
kernel-auth setup gmail
kernel-auth setup github --profile-name github-work
kernel-auth setup outlook
AUTHENTICATED (user completed login, state stored) or NEEDS_AUTH (never logged in or login session expired)Check connection status:
kernel auth connections list # Check status
kernel auth connections get <id> # Get connection details
If a connection shows NEEDS_AUTH:
kernel-auth setup <service> # Re-initiate login session with fresh URL
# List all auth connections
kernel auth connections list -o json
# Check specific connection
kernel auth connections get <connection-id> -o json | jq '.status'
Once auth is connected, create browser sessions with that profile:
# Create browser with Gmail auth already loaded
kernel browser create --profile-name gmail-main --stealth -o json
# Browser will be logged into Gmail automatically
Deleting a Kernel profile deletes ALL connections attached to it:
kernel profile delete gmail-main # Deletes ALL gmail-main connections
Use sparingly. Better to refresh auth than delete and recreate.
If you send auth URLs via Telegram, disable link previews in settings:
Otherwise Telegram auto-opens the URL and consumes the code.
Kernel auth requires:
setup — Create connection, generate login URL, display instructionsThe auth code was consumed. This happens if:
Solution: Run kernel-auth setup <service> again to get a fresh code.
Codes expire after ~40 minutes. Re-run setup to generate a new one.
The connection may have been deleted. Run setup again to create it.
You didn't complete the login within the session window, or you need to re-authenticate. Re-initiate login:
kernel-auth setup gmail
The auth skill integrates with OpenClaw cron jobs:
AUTHENTICATED, proceeds with browser automationExample from GMAIL_DAILY_WORKFLOW.md:
# Daily cron checks this before scraping
AUTH_STATUS=$(kernel auth connections list -o json | jq -r ".[] | select(.domain == \"gmail.com\") | .status")
if [ "$AUTH_STATUS" != "AUTHENTICATED" ]; then
echo "Reauthentication needed"
exit 1
fi
# Get auth status
kernel auth connections list -o json | jq '.[] | {id, status, domain}'
# Delete and recreate
kernel profile delete gmail-main --yes
kernel-auth setup gmail
Create separate profiles for each account:
kernel-auth setup gmail --profile-name gmail-personal
kernel-auth setup gmail --profile-name gmail-work
Then use the appropriate profile when creating browsers:
kernel browser create --profile-name gmail-work --stealth
Weekly Installs
132
Repository
GitHub Stars
3
First Seen
Feb 21, 2026
Security Audits
Gen Agent Trust HubPassSocketPassSnykPass
Installed on
codex132
cursor132
claude-code129
opencode13
gemini-cli13
github-copilot13