Getting Started
Marketplace Login & First Screen
The host app itself is local-first, but a Marketplace account is required for the plugin catalog, downloads, and signature verification. Auth is handled on the plugin side via hostApi.openAuthWindow / hostApi.openAuthPartitionViewer.
Why do I need to log in?
- Marketplace — plugin catalog reads + package downloads (the
lvis://install/<slug>deeplink routes to the host). - ms-graph, the internal portal plugin — each plugin's own OAuth (MSAL · portal SSO). Tokens are isolated to the plugin namespace.
Login flow
- 01
Main host → Marketplace SSO
Enter the Marketplace LoginPage in a web browser. The Marketplace server (
marketplace.lvisai.xyz) responds via/api/v1/auth/*. - 02
API key issuance
one-timeOn successful login an ApiKey (publisher/admin role) is issued, and the client verifies that the key's sha256 hash matches
api_keys.key_hashin the server DB. - 03
Plugin OAuth — when needed
ms-graph (MSAL) / the internal portal plugin (portal SSO) are handled separately via
hostApi.openAuthWindowon first use after plugin install.
First screen — what does it look like?
What works without logging in
The host chat and local plugins (e.g. Local Indexer's pre-indexed folders) work without logging in. However, installing new plugins and the Marketplace catalog are disabled.