API tokens

A scheduled submission can't open a browser to sign in, so it carries a token instead. Tokens also mark your submissions as verified, which an X-GitHub-User header can't do — anyone can set that header to any name.

Using it

npx viberank-cli login       # paste the token once
npx viberank-cli autosubmit  # submit daily, in the background

The token is stored in ~/.viberank/config.json with owner-only permissions. Anything holding it can submit as you, so treat it like a password — revoke it here if it leaks, and the access ends immediately.