Kiro Desktop Auth plugin for Opencode - access Claude and Gemini using Kiro credentials
npm install opencode-kiro-authOpencode plugin for Kiro Desktop Auth (AWS CodeWhisperer).
Access Claude and Gemini models using Kiro Desktop credentials with automatic account rotation.
- Kiro Desktop Auth: Uses Kiro's refresh token-based authentication
- Multi-account Rotation: Automatically switch between accounts on rate limits (429)
- Automatic Token Refresh: Tokens are refreshed automatically when they expire
- Sticky Account Selection: Keeps using the same account until rate-limited
- Configurable: Support for global and project-local configuration files
``bashUsing npm
npm install opencode-kiro-auth
Configuration
$3
Priority (highest wins):
- Project:
- User: (Linux/Mac)
- User: %APPDATA%\opencode\kiro.json (Windows)$3
Environment variables always override config file values:
| Variable | Description | Default |
|----------|-------------|----------|
|
OPENCODE_KIRO_QUIET | Suppress toast notifications | false |
| OPENCODE_KIRO_DEBUG | Enable debug logging | false |
| OPENCODE_KIRO_ACCOUNT_SELECTION_STRATEGY | Account selection strategy (sticky, round-robin) | sticky |
| OPENCODE_KIRO_PID_OFFSET_ENABLED | Enable PID-based account offset | false |$3
`json
{
"quiet_mode": false,
"debug": false,
"max_rate_limit_wait_seconds": 300,
"account_selection_strategy": "sticky",
"pid_offset_enabled": false,
"switch_on_first_rate_limit": true,
"auto_update": true
}
`OpenCode Provider Configuration
To enable multimodal support (images, PDFs), you need to configure model capabilities in your OpenCode settings.
Add this to your OpenCode configuration file (
or global settings):`json
{
"provider": {
"kiro": {
"name": "Kiro",
"models": {
"claude-sonnet-4.5": {
"name": "Claude Sonnet 4.5",
"modalities": {
"input": ["text", "image", "pdf"],
"output": ["text"]
}
},
"claude-opus-4.5": {
"name": "Claude Opus 4.5",
"modalities": {
"input": ["text", "image", "pdf"],
"output": ["text"]
}
},
"claude-haiku-4.5": {
"name": "Claude Haiku 4.5",
"modalities": {
"input": ["text"],
"output": ["text"]
}
}
}
}
}
}
`Important Notes:
- Vision support: Only
and claude-opus-4.5 support image inputs
- Haiku models: Do not support images - only text input/output
- Without modalities configuration, OpenCode will block image inputs even if the model supports themAuthentication
$3
Before adding accounts, you must first configure the provider in OpenCode settings (see OpenCode Provider Configuration section above).
$3
There are two methods to add Kiro accounts:
#### Method 1: Auto-detect (Recommended)
If you have Kiro Desktop installed and logged in, the plugin will automatically detect your credentials:
1. Open OpenCode settings
2. Navigate to Providers → Add Provider
3. Select Kiro
4. Choose "Kiro Desktop (Auto-detect)"
5. The plugin will automatically find your Kiro Desktop token
The plugin searches for tokens in these locations:
- macOS:
~/.aws/sso/cache/kiro-auth-token.json or ~/Library/Application Support/Kiro/kiro-auth-token.json
- Linux:
- Windows: or %USERPROFILE%\.aws\sso\cache\kiro-auth-token.json#### Method 2: Manual (Refresh Token)
If auto-detect doesn't work or you want to add multiple accounts:
1. Open OpenCode settings
2. Navigate to Providers → Add Provider
3. Select Kiro
4. Choose "Manual (Refresh Token)"
5. Enter your refresh token and region
How to get your refresh token:
1. Log in to Kiro Desktop
2. Find the token file at one of the locations listed above
3. Open the JSON file and copy the
value$3
Accounts are stored in:
- Linux/Mac:
~/.config/opencode/kiro-accounts.json
- Windows: Each account includes:
-
: Account email (optional)
- refreshToken: Kiro refresh token
- region: AWS region
- addedAt: When the account was added
- lastUsed: When the account was last used
- rateLimitResetTime: When rate limit expires (if applicable)Account Rotation
The plugin automatically rotates accounts based on the following events:
$3
- Mark account as rate-limited for the duration specified in
retry-after header
- Switch to next available account
- Retry after cooldown$3
- Attempt token refresh
- If refresh fails, mark account for cooldown
- Switch to next available account
$3
- Mark account for temporary cooldown (30 seconds)
- Switch to next available account
- Retry after cooldown
Development
`bash
npm run build
npm run typecheck
`Publishing to npm
$3
1. Create an npm account at https://www.npmjs.com/signup
2. Login to npm:
bash
npm login
`$3
1. Update version in
:
`bash
npm version patch # for bug fixes (1.0.0 -> 1.0.1)
npm version minor # for new features (1.0.0 -> 1.1.0)
npm version major # for breaking changes (1.0.0 -> 2.0.0)
`2. Build the package:
bash
npm run build
`3. Test the package locally (optional):
bash
npm pack
# This creates a .tgz file you can test with: npm install ./opencode-kiro-auth-1.0.0.tgz
`4. Publish to npm:
bash
npm publish
`$3
Before publishing, ensure:
- ✅ All tests pass (
)
- ✅ Build succeeds (npm run build)
- ✅ dist/ directory contains compiled files
- ✅ README.md is up to date
- ✅ Version number is updated in package.json
- ✅ Git changes are committed
- ✅ No sensitive data in the package$3
The
field in package.json controls what gets published:
`json
"files": [
"dist/",
"README.md",
"LICENSE"
]
`Only these files/directories will be included in the npm package.
$3
If you need to unpublish a version within 72 hours:
bash
npm unpublish opencode-kiro-auth@1.0.0
`Note: Unpublishing is discouraged. Use
instead for older versions:
`bash
npm deprecate opencode-kiro-auth@1.0.0 "Please upgrade to 1.0.1"
``This project is heavily inspired by and based on antigravity-auth, an OpenCode plugin for Google Gemini authentication with multi-account rotation.
The account management, rotation logic, and plugin architecture were adapted from antigravity-auth's excellent implementation.
MIT