Save a wiki profile using OAuth or a username and password. When –profile is omitted, the profile name defaults to the verified username.
Wikimedia and wikibase.world have built-in public a-wikimedia-cli clients. OAuth uses authorization code with PKCE and defaults to the callback http://localhost:8765/auth/login. No client secret is required. Use –client-id and –redirect-uri for another registered public client, or –method password for a password login.
Basic access is the default. Interactive login offers a permission picker grouped by function and risk; –scope selects permissions explicitly. The wiki validates which scopes the client can request.
Use –manual when the callback port is occupied. You can also paste the callback URL during normal browser login if the redirect fails.