One For All Auth

Works with Even Realities G2 apps today

Stop pasting API keys into every app.

Keep your keys and accounts, like Groq, OpenAI and Spotify, in one safe place. Apps connect with a short code instead, never see your keys, and you can disconnect any of them in one tap.

Create a free account Sign in

Building an app? Read the developer docs or register your app.

The way it works today is rough.

Without One For All Auth

  1. Install a music app for your glasses.
  2. It asks you to make a Spotify developer account and paste in a client ID.
  3. Install an AI app. It wants your Groq or OpenAI key, pasted into a text box.
  4. Do it again for the next app, and the next.

Now five apps hold full copies of your keys. To take access back from one, you have to change the key everywhere.

With One For All Auth

  1. Set up Spotify and Groq here once, with copy-paste steps.
  2. In any supported app, tap Connect.
  3. Read the code off your glasses and approve it.
  4. Done. Every app after that is the same two taps.

Your keys stay here, encrypted. Disconnect an app and it stops working within seconds. Your other apps keep running.

How it works

1

Set up your services

Add your Groq key or connect Spotify. Each one takes about two minutes, and we walk you through every click.

2

Tap Connect in an app

The app shows a short code on your glasses and your phone, like BCDF-GHJK.

3

Approve it

Check the code matches, see exactly what the app is asking for, and tap Allow. That's it.

What apps can use

Groq

Fast AI chat and speech-to-text. Free tier, no card needed.

Your key never reaches the app

Spotify

See what's playing, play, pause and skip.

Spotify Premium required

Coming next

OpenAI, Anthropic, ElevenLabs and Home Assistant.

Tell us what you need

Security, in plain terms

Encrypted, and split up

Every key is encrypted with its own AES-256 key. The master key lives in a different system from the database, so a database leak on its own reveals nothing.

Apps get passes, not keys

Connected apps receive 15-minute access passes. AI requests go through us, so your key never leaves. Spotify apps get a token that expires within an hour.

You're in control

Every connected app is listed on your dashboard with what it can use. Disconnect it and it's cut off within seconds.

Write-only keys

Once saved, keys can't be viewed again, not even on your own dashboard. No part of a key is ever shown.

For developers

Add Spotify and AI to your app without touching a key.

One small file, no server, no secrets. Register your app, drop in the SDK, and call startConnect(). Your users approve once and you're done.

Read the docs Register an app 
const ofa = new OneForAllAuth({
  clientId: "your-app-id",
  storage: evenHubStorage(bridge),
  optionalScopes: [SCOPES.GROQ, SCOPES.SPOTIFY],
});

const login = await ofa.startConnect();
showOnGlasses(login.userCode);
await login.done;

const reply = await ofa.chat("groq", { model, messages });

Questions

Is it free?

Yes, during the beta. You pay Groq or Spotify directly for your own usage, same as before.

Why does Spotify need Premium?

Spotify only lets Premium accounts create the personal developer app this uses. That's Spotify's rule, not ours.

Can an app see or copy my key?

No. AI requests are made on our side with your key. Spotify apps get a short-lived token that only works for about an hour, and stops working when you disconnect.

Do I have to redo Spotify setup?

Spotify asks you to reconnect every 180 days. We'll remind you on your dashboard, and it's one click.

Is this made by Even Realities?

No. One For All Auth is an independent service. It launches with Even Realities G2 apps, and support for other platforms is on the way.