Build Map

Field guide

Real platform surfaces. Real Grok Build / *.grok.me platform. This page is an independent map of it — not the official help center. How to read this →

Identity

Authentication for Grok Build apps

Each app runs its own Better Auth at /api/auth/* and federates to the shared Grok broker at auth.grok.me. The app never holds Google/X client secrets — only a per-app broker client.

Supported: Google, X, and optional email/password. Live Lab re-proves broker idps on demand.

Supported methods

Capability	Spec	Claim
Google	Yes — via Grok broker (idp=google) Real OAuth; secrets stay on broker	template
X (Twitter)	Yes — via Grok broker (idp=twitter)	template
Email + password	Yes — local Better Auth (off by default) Enable only via src/lib/auth/email-password.ts	template

Not supported (template + broker)

Capability	Spec	Claim
GitHub	No — broker rejects unknown idp	template
ChatGPT / OpenAI SIW	No — not a Grok broker idp; OpenAI partner-gated for third parties	template
Apple / Discord / Microsoft / Facebook	No	template
Magic links / passkeys / OTP / SMS / anonymous	No	template

Where this is written

.grok/skills/auth/SKILL.md — “use ONLY these three… do NOT add GitHub…”
AGENTS.md Data & auth section
src/lib/auth/providers.ts — Google + X only
Live broker body: sign-in requires a supported 'idp' (google, twitter)

Preview vs publish

Preview: popup OAuth + bearer token (iframe cookie partitioning); sessions in PGLite until restart.

Published: full-page OAuth, cookies on your *.grok.me origin, identities in Neon Postgres.