Agent Switcher (agentswitcher)

Save the login of every account you use with a coding agent, then switch between them with one command. Built for developers who share a machine between a work account and a personal one — for Antigravity (agy), Claude Code, OpenCode and Codex — without logging out and back in, and without touching a browser cookie, a proxy or anyone's traffic.

av (or asw) stores each login encrypted on your machine under a name you choose. One account is active at a time; switching is a single command with a verification step and a rollback.

Status: 0.1.1. Install with pip install agentswitcher (or pipx install agentswitcher). Everything below is true of this tree.

Proven: real av save/av use on a signed-in Antigravity login (Windows Credential Manager) and a signed-in Codex login, with the store byte-identical afterwards; 1,483 tests; a clean-venv install of both artifacts; CI green on Windows and Linux, Python 3.11, 3.13 and 3.14. Not proven yet: a switch between two different accounts (this machine had one account per agent; av logout now makes that cycle possible without /logout).

Quickstart (measured: 16 s from a clean venv)

Requires Python 3.11 or newer (developed and tested on 3.14.2) — see Prerequisites.

# 1. install (from PyPI; from a checkout use `python -m pip install .`)
python -m pip install agentswitcher

# 2. see what is on this machine
av detect          # which agents are installed, where each login lives, whether it can be switched
av doctor          # the full health check; exit code 1 means something needs fixing

# 3. sign in to an agent as usual, then save that login under a name
av save claude work

# 4. sign out and in as the other account, save it too, then switch freely
av save claude personal
av use claude work
av list            # which profile is active, and when it was captured

asw is an alias for av. Add the full-screen app with pip install 'agentswitcher[tui]', then run av tui (? shows every key).

Nothing leaves the machine: no network calls, no telemetry, no account names — the vault key lives in the OS credential store and the profiles are AES-256-GCM files under your data directory.

Prerequisites

macOS is not supported in this release - declared as a non-goal rather than an untested claim.

What it does

Every read-only command accepts --json (schema 1, additive-only — see super-docs/API.md). Exit codes: 0 ok · 1 error · 2 usage or a bad option · 3 refused because the agent is running, another av holds the lock, or the login signed in now is a different account from the active profile (AV023) · 130 interrupted.

Before you use this with Antigravity

Google's Antigravity FAQ answers "Can I use Antigravity CLI headless mode in third-party coding agents or automate account switching?" with: "Wrapping agy inside third-party coding agents or applications, or automating account rotation, is not supported under consumer plans." Its Terms of Service also call third-party access a breach that "may be grounds for suspension or termination" of your Antigravity and/or Gemini CLI account — see https://antigravity.google/terms and https://antigravity.google/docs/faq.

av does it anyway, because you asked for it and the accounts are yours. That is the entire warning: one command changes which account agy uses, and Google has said it does not support that. Codex, Claude Code and OpenCode carry no such wording — OpenAI in fact documents saved-account switching.

av never rotates accounts for capacity, never pools quota, and never runs in the background. One account is active at a time, always because you typed a command.

Configuration

av never reads a .env file. Precedence, highest first: a flag (--data-dir, --config-dir, --color) → an AV_* variable → config.toml in the config directory → the platform default. Every variable is also listed with no values in .env.example.

There are no secrets in the environment on purpose: the vault key is created in the OS credential store on first use and never printed.

Privacy

• Local only. No analytics, no telemetry, no crash reporting, no update check. The program makes no network call at all; there is no HTTP client in its dependency list.
• What is stored: your saved logins, encrypted (AES-256-GCM) under a random key in the OS credential store, plus a small index of profile names and timestamps. Profile names are labels you choose — no email, no account name.
• Logs are off by default (warning); when enabled they redact tokens before writing.
• Deleting everything: av remove each profile, then delete the data directory printed by av doctor, and finally delete the agentswitcher/vault entry in your OS credential store (Windows Credential Manager; on Linux secret-tool clear service agentswitcher target vault). Removing profile files alone leaves ciphertext that no longer has an index entry, which av doctor reports as an orphan.
• Export files are sealed with Argon2id (64 MiB, 3 passes) and need a passphrase of at least 12 characters; av export reads it from the terminal, never from an argument.

Development

Python is pinned in .python-version (3.14.2 for development; the package supports 3.11+). The test suite includes artifact smoke tests that build the wheel and sdist and install them into fresh virtual environments (tests/smoke), so verify is slower than a plain unit run and needs uv and network access for the first install.

Troubleshooting

Licence

MIT — see LICENSE. The decision and the alternatives considered are in super-docs/DECISIONS.md.