Scrubby

Sign in & Accounts

How signing in to Scrubby works — GitHub OAuth, sessions, multi-org access, and account recovery.

Scrubby uses GitHub for sign-in. There’s no separate username and password — your Scrubby identity is your GitHub identity, which is also how Scrubby figures out which repositories and organizations you have access to.

Signing in

  1. Visit scrubby.ai/dashboard/login.
  2. Click Sign in with GitHub.
  3. Authorize the Scrubby OAuth app on the GitHub consent screen.
  4. You’re in.

The first sign-in creates your account, starts your 14-day free trial, and detects the GitHub organizations you belong to. Subsequent sign-ins re-use the same identity.

Sessions

Web sessions last 14 days by default. They’re refreshed automatically while you’re active. Signing out from the Account page terminates the session immediately.

MCP sessions (used by your AI editor) are managed separately:

  • Claude Code uses RFC 9728/8414 OAuth metadata for automatic re-auth. If your session expires, run /mcp to reconnect.
  • Other editors use the standard MCP OAuth flow on first connect; sessions persist until revoked.

You can revoke any session from the Sessions section of your dashboard’s Account page.

Multi-organization access

Scrubby reads your GitHub org memberships and lets you operate in any of them. From the dashboard, switch active org via the dropdown in the header. The repositories list, team management, and billing are all org-scoped.

Linking accounts

If you’re a member of multiple GitHub orgs and want one of them to act as the billing entity, an admin in that org needs to set up a Team or Enterprise plan. Once the org has an active subscription, members signing in with GitHub will automatically see the org as available.

To merge two existing Scrubby accounts (e.g. you accidentally signed up twice with different emails), use the Merge accounts flow on your Account page or contact support.

Permissions

Scrubby requests these GitHub OAuth scopes:

  • read:user — basic profile (username, name, avatar).
  • user:email — verified email addresses.
  • read:org — read your org memberships (used for team detection).

The GitHub App installation is separate from sign-in and asks for repo-level permissions. Sign-in OAuth never grants Scrubby write access to your code.

Account recovery

If you lose access to your GitHub account, you lose access to your Scrubby account — we don’t have an alternate sign-in. Recover your GitHub account first (GitHub support can help), then sign back into Scrubby.

If your GitHub email changes, the change propagates on your next sign-in. Subscriptions and indexes survive email changes.

Deleting your account

From the Account page, choose Delete account. This:

  • Cancels any active subscription effective at the end of the current billing period.
  • Removes your Scrubby user record and your indexes after the cancellation date.
  • Does not uninstall the GitHub App from any orgs — you’ll need to do that from GitHub directly.

Account deletion is irreversible after the billing period ends.

Last updated