Web sign-in and Open Solvaro

What the website is for

solvaro.ai is sign-in, download, account, and docs. Ask, Live Call, History, Tickets, and Settings run in the Electron app.

Sign in on the web (from the app)

1. In the app, choose Sign in on the web.
2. The desk asks Railway for a device code, then opens https://solvaro.ai/login?user_code=XXXX-XXXX. That is still the credential page — pairing query params do not change /login.
3. Sign in with email or Google. GitHub Sign-in shares the Railway OAuth callback; if it fails, use email or Google.
4. After a session exists, the site approves the device. The app polls Railway for tokens. Do not put JWTs on arcus:// yourself.

Open Solvaro (from the website)

1. Sign in on the website, then open Account.
2. Open Solvaro mints a one-time handoff: POST /api/v1/auth/desktop-handoff, then arcus://auth/callback?handoff=… After Sign in on the web (pairing), Account also mints that link so the desk comes forward.
3. The desk redeems that code once (about two minutes). If the app did not come to the front, use Account → Open Solvaro again or Download.

OAuth callbacks stay on Railway

Paste these URLs into the provider’s app. No slash at the end. Do not use this website. Do not use localhost. arcus:// is only the desktop handoff after Railway finishes. It is not a provider redirect URL.

https://api.solvaro.ai/api/v1/oauth/slack/callback
https://api.solvaro.ai/api/v1/oauth/jira/callback
https://api.solvaro.ai/api/v1/oauth/teams/callback
https://api.solvaro.ai/api/v1/oauth/github/callback
https://api.solvaro.ai/api/v1/oauth/zoom/callback
https://api.solvaro.ai/api/v1/oauth/linear/callback
https://api.solvaro.ai/api/v1/oauth/servicenow/callback
https://api.solvaro.ai/api/v1/oauth/zendesk/callback
https://api.solvaro.ai/api/v1/oauth/google/callback
https://api.solvaro.ai/api/v1/auth/google/callback

Which URL is which

1. Slack, Jira, Teams, GitHub, Zoom, Linear, ServiceNow, and Zendesk each use /api/v1/oauth/{name}/callback on https://api.solvaro.ai.
2. Google Calendar uses /api/v1/oauth/google/callback.
3. Google sign-in (the account button) uses /api/v1/auth/google/callback. That is a different path from Calendar.
4. After Railway finishes, the desk may open with arcus://auth/callback?handoff=… That link is only for the desktop app. Do not paste arcus:// into Zendesk, Slack, Jira, Teams, GitHub, Zoom, Linear, ServiceNow, or Google.