get-api-key

# Get a free Vulnetix API key (self-serve) The Vulnetix VDB works **unauthenticated** on a shared pool — most lookups need no key. A free **Community** key removes the shared-pool contention and raises your daily limit. Getting one is a browser device login: the CLI prints a code, the user approves it while signed in to Vulnetix, and the CLI stores the credential. See `_lib/contract.md`. **This is interactive.** There is no unauthenticated endpoint that mints credentials from an email — identity moved to the Vulnetix identity provider, so a human has to sign in and approve. ## 1 · Ensure the CLI is present The CLI stores and uses the credentials. Install it self-serve if missing: ```bash command -v vulnetix &>/dev/null || bash "${CLAUDE_PLUGIN_ROOT}/hooks/ensure-vulnetix-cli.sh" ``` If install fails, the key still works over plain HTTP (`Authorization: ApiKey <apiKey>`), but storing it via the CLI is preferred. ## 2 · Skip if already authenticated ```bash vulnetix auth status -o json 2>/dev/null | jq -r '.status // "unauthenticated"' ``` If this is `authenticated`, stop and report — do **not** register again. ## 3 · Tell the user what will happen (consent required) This needs a browser: the user signs in to Vulnetix and approves a short code. **You cannot complete this on their behalf.** Say so before starting, so they are at the keyboard. No email argument is needed — identity is handled by the Vulnetix sign-in page, which supports password, GitHub, Google and pa...