Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add Beezi-AI/beezi-claude-plugin/plugin install beeziWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/beezi-ai/beezi-claude-plugin/login)<a href="https://agentmods.dev/commands/beezi-ai/beezi-claude-plugin/login"><img src="https://agentmods.dev/badge/commands/beezi-ai/beezi-claude-plugin/login/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/beezi-ai/beezi-claude-plugin/login"><img src="https://agentmods.dev/badge/commands/beezi-ai/beezi-claude-plugin/login.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00018 | $0.08416 |
| Opus 5.5 | $0.00007 | $0.03366 |
| Sonnet 5.5 | $0.00004 | $0.01683 |
| Haiku 4.5 | $0.00002 | $0.00842 |
Grade A, and why
login scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 511 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Do NOT read, open, or inspect any files yourself. Run only the given commands.
The user cannot see tool output (Claude Code collapses it), so any output you are told to show or write verbatim is copied exactly into your reply text — never summarized or paraphrased.
AskUserQuestion, everywhere below: at most 4 questions in one call and at most 4 options in one
question; multiSelect: true only with 2 or more options. Make one AskUserQuestion call per
message and wait for its answers before the next (two calls in one message show the user only
the last). A dismissed question runs nothing.
How this command runs
Every read and check below comes from ONE script. Run it FIRST, before anything else, with the
Bash tool's timeout set to 600000 (the sign-in waits for the browser):
node ${CLAUDE_PLUGIN_ROOT}/scripts/login-flow.mjs
It runs the steps below in order and stops at the first one that needs a question. Each step's
output is a block: a <name …> line, the output, then a </name> line. Its LAST line says what
to do now: next=<step> account=<key>, or just next=stop when it stopped before a link.
<key> is the account just linked; every later command passes it as --account <key>.
next= |
Go to |
|---|---|
stop |
Step 0 or Step 1: show what they say, run nothing else |
setup |
Step 1w, where this machine's analytics go |
here |
Step 1w, this session's own folder |
key |
Step 3s-a |
payment question=gateway |
Step 3a |
payment question=tier |
Step 3c |
joined |
Step 4a, new workspaces |
routes |
Step 4a, repos and folders with no rule |
backfill |
Step 4b |
After a question's answers (or its dismissal) and the commands they call for, carry on with
EXACTLY this, with the same timeout, where the step names <step>:
node ${CLAUDE_PLUGIN_ROOT}/scripts/login-flow.mjs --account <key> --from <step>
It prints the blocks of the steps from there on and a new next= line. A listing that fails shows
a ✗ line inside its block, and the script goes on: write that line verbatim. Output that ends
without any next= line means the script itself failed: show its last ✗ line verbatim and stop
(running /beezi:login again resumes safely). Never run the scripts
behind the blocks yourself (login-preflight.mjs, login.mjs, the workspace.mjs listings,
billing-capture.mjs --from-claude, key-resolve.mjs status): the blocks hold their output.
Before doing what next= says, write out what each block printed this time calls for, in order,
as its step below says (Step 1's sign-in output, Step 2's summary, Step 3s's report, the
no-folder line in Step 4a).
Step 0 — preflight: the <preflight> block.
It checks the three things that make the link fail halfway: plan mode, auto mode (its permission classifier denies this plugin's node scripts), and a state directory this session cannot write to (a sandboxed Bash session only allows writes inside the working directory).
If its output starts with ✗ (the script then stopped with next=stop), STOP: show those lines
to the user verbatim and run no other command — not the sign-in, not the plan capture, not the
backfill. A flow that dies partway leaves this machine half-linked.
If login-flow.mjs does not run at all — denied by the permission classifier, or blocked by
plan mode — that IS the answer, and the same rule applies: STOP. Do not retry it, do not
try PowerShell or another shell, do not run any later step. Tell the user their session's
permission mode is gating the plugin's scripts, that they should press Shift+Tab to switch
to normal mode, and run /beezi:login again.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago Changed · +62 lines f3e7788e84fb
- 23d ago Changed · +239 lines 2619b695c784
- 1mo ago Changed 88c784c82e20
- 1mo ago Changed · +17 lines · +1 tokens per session 32082a0678a2
- 1mo ago Changed · +69 lines 549d7700bd4f
- 2mo ago First seen · 124 lines · 17 tokens per session scan A e965027389fd
login is a command published in the GitHub repository Beezi-AI/beezi-claude-plugin (63 stars, last pushed 9d ago), licensed Apache-2.0. It adds 18 tokens to every session and 8,416 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
login compared with commands from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| loginBeezi-AI/beezi-claude-plugin | Command | 63 | 9d ago | Apache-2.0 | A | 18 | Claude Code |
| usageliorwn/claudetop | Command | 212 | 2mo ago | MIT | A | 34 | Claude Code |
| statsliorwn/claudetop | Command | 212 | 2mo ago | MIT | A | 14 | Claude Code |
| saverandomittin/heimdall | Command | 5 | 16d ago | MIT | A | 55 | Claude Code |
| autonomyrandomittin/heimdall | Command | 5 | 16d ago | MIT | A | 50 | Claude Code |
| clean-checkTeamManagementPlugin/claude-plugin | Command | 6 | 23d ago | MIT | A | 27 | Claude Code |
| check-versionsKSEGIT/Version-Sentinel | Command | 6 | yesterday | MIT | A | 19 | Claude Code, GitHub Copilot |