Skip to main content
Re-authenticate configured OAuth MCP connectors from the terminal. This is the CLI equivalent of the ultra_reconnect tool. Use it when you’re working in a terminal or your agent can’t surface the in-app Reconnect link.

Usage

The <connector> must be an enabled HTTP upstream that authenticates with OAuth. With no connector name, Ultra reconnects every enabled OAuth connector whose sign-in is missing or expired. See Reconnecting every connector.

Flags

How It Works

  1. Resolves <connector> to a configured, enabled HTTP upstream
  2. Opens your browser to sign in, and always prints the authorize URL as a headless fallback
  3. Waits for you to finish signing in (press Ctrl+C to cancel)
  4. Saves the new token to Ultra’s shared credential store
Because the CLI can’t refresh an agent that is already running, restart your agent (or ultra start) afterward so its Ultra device process loads the new token.

Reconnecting every connector

Run ultra reconnect with no connector name to re-authenticate everything that needs it in one pass. Ultra picks the connectors to reconnect for you and skips the ones it can’t help: If nothing needs attention, Ultra prints Nothing to reconnect. and exits. Connectors are handled one at a time, each with its own browser sign-in. While a batch is running:
  • Press Ctrl+C once to skip the current connector and move to the next one
  • Press Ctrl+C twice in quick succession to stop the batch, leaving the remaining connectors unattempted
A failed connector doesn’t stop the run. Ultra prints the error, continues, and shows a summary at the end listing what was reconnected, skipped, failed, or never attempted. The command exits non-zero if any connector was skipped, failed, or left unattempted.

Examples

ultra reconnect only applies to OAuth connectors. If the connector authenticates with a token or API key instead, update its credential with ultra config set-token <connector> (see Authentication). Ultra returns a clear error if the connector is unknown, disabled, uses stdio transport, or doesn’t use browser-based OAuth.