Sign in

Surnex accounts are email and password. Authentication is handled by Supabase Auth, and every API request the dashboard makes carries a short-lived JWT issued at sign-in.

​

Create an account

Go to app.surnex.io/signup and fill in: Click Create Account. Surnex sends a confirmation link and shows a Check your email screen with the address it sent to. Open the link to confirm, then sign in.

​

Sign in

Go to app.surnex.io/login, enter your email and password, and click Sign In. After a successful sign-in, Surnex passes through a callback screen that syncs your account and loads your organizations before sending you on. Where you land depends on your account state: That last case is why a bookmarked report or project URL still works after a sign-in prompt — the destination is preserved through the login round-trip.

​

Signing in from an invite

There are no email invitations in Surnex. To be added to an organization, you must sign up first — an admin can only add an email address that already has a Surnex account. Create your account, tell your admin the address you used, and the organization appears in your organization switcher on your next sign-in. See Invite your team for the admin side of this.

​

Sessions

Your session persists across browser tabs and restarts. Sign out from the user menu in the sidebar.

​

Authenticating outside the dashboard

The dashboard uses your session JWT. Elsewhere there are two credentials, and they aren’t interchangeable:

• REST API — an API key in the X-API-Key header. Created under Settings → API Keys, scoped to one organization, not limited by your role. See API authentication.
• MCP server — OAuth, not keys. Your AI client sends you through a consent screen and receives a token that acts as you, with your role and your organizations. No key involved, and keys are refused. See MCP authentication.