Account
Sign in.
Email and password. The session is an httpOnly cookie for 30 days; you can end it from Account → Sessions.
Developer sign-in
Integrating against the API? Sign in with an API key instead at /app/login. It opens the same dashboard; keys are scoped and can carry a budget cap.
Magic link
Passwordless sign-in by email link is served by POST /v1/auth/magic; it appears here once the mailer is configured for this deployment.