Prompt	What to enter
Site	Your Atlassian site name (for example, `example` for `example.atlassian.net`)
Email	Your Atlassian account email
API token	A classic (unscoped) API token — see below

Credentials are saved to ~/.twg/auth.conf and reused across sessions.

Create an API token

TWG CLI requires a classic API token (also called an unscoped token).

Go to your Atlassian API tokens page.
Click Create API token — this is the first option on the page. Use the classic (unscoped) token option, not Create API token with scopes.
Give it a label such as twg-cli and copy the token value.

Set up optional product tokens

Some products require additional credentials. All are prompted interactively during twg login:

Product	What you need
Bitbucket	Bitbucket app password
Rovo Search	MCP-scoped token

For CI/CD and scripted use, set the following variables instead of running twg login:

Never pass tokens as CLI flags. TWG CLI only accepts credentials interactively or via environment variables.