diff --git a/frontend/packages/agent/src/components/LoginFlow.css b/frontend/packages/agent/src/components/LoginFlow.css
index c2ce6018..620afc1b 100644
--- a/frontend/packages/agent/src/components/LoginFlow.css
+++ b/frontend/packages/agent/src/components/LoginFlow.css
@@ -23,3 +23,14 @@
 .login-card > * {
   margin: 0;
 }
+/* claude's real OAuth URL is one long unbroken token (a query string
+   with no whitespace) — without this it doesn't wrap at the card's
+   bounded width (.agent-status-overlay caps at 44em) and instead
+   overflows straight past the card's right edge (mara reported this
+   with a screenshot). `overflow-wrap: anywhere` lets the
+   browser break mid-token as a last resort, same as any other
+   long-URL-in-a-narrow-column case — `word-break: break-all` is the
+   older alternative but breaks more eagerly than needed here. */
+.login-url {
+  overflow-wrap: anywhere;
+}
diff --git a/frontend/packages/agent/src/components/LoginFlow.tsx b/frontend/packages/agent/src/components/LoginFlow.tsx
index c74c3c1b..cb9d7b2d 100644
--- a/frontend/packages/agent/src/components/LoginFlow.tsx
+++ b/frontend/packages/agent/src/components/LoginFlow.tsx
@@ -93,7 +93,7 @@ function LoginInProgress({ session, onDone }: { session: SessionView | null; onD
       <p class="status-needs-login">◌ L0G1N 1N PR0GRESS</p>
       {session?.url ? (
         <>
-          <p>
+          <p class="login-url">
             ▶{' '}
             <a href={session.url} target="_blank" rel="noreferrer">
               {session.url}