给 coding agent 用的 Tofu
在你做 app 的对话里，
直接上线
接上你常用的 agent，让它把 app 上线。它会上传、检查、发布，以后有改动，也是更新同一个 Tofu 项目。部署、花钱或删除之前，它会按 Tofu 的要求先问你。
把 Tofu 接入你的 agent
选你用的 agent，复制对应的设置提示词，粘贴过去。agent 会下载 Tofu 客户端和 skill，两个都校验通过后再安装。接着你在浏览器里批准连接，agent 就等你说下一步做什么。全程不用粘贴任何 API key。
Pasting asks your agent to install the Tofu client and skill, connect it to your Tofu account, and then wait for you (if the folder it works in holds an app, it first asks whether to put that app online). It does not authorize a deploy, an upload, a database, a purchase, a sign-up or any DNS change: Tofu’s instructions tell your agent to wait for your yes to each of those, later in the conversation, and to check with you before each one.
选好你用的 agent，对应的设置提示词就会出现。复制下来，再粘贴给这个 agent。
只需核对一个验证码
你的 agent 会打开 Tofu 登录页。只批准你刚发起的那次请求，并确认页面上的验证码和 agent 里显示的一致。连接 7 天有效，随时可以断开。
在 coding agent 页面查看连接 →接着聊就行
连上之后，像平时聊天一样让 agent 把 app 上线，或者更新 Tofu 上已有的 app。它会先检查代码，部署前按 Tofu 的要求问你一声，完成后告诉你结果。需要修复时，也是在同一个项目里改。
你批准的内容与 agent 会安装的东西
This connection can upload your app’s source or import it from a public GitHub repository, download your app’s code into a new folder on your computer when the agent runs there, get the link that opens your app in Tofu’s builder, which you open yourself, run the safety check, deploy it — its build runs any migration step it has — once you have a hosting plan, save and remove your app’s public settings — an address, a feature flag, a key meant to be public — when the agent runs on your computer, but never a hidden value, which you type yourself in Keys & settings, create the app’s managed database, on its own or in the same call as a deploy, which Tofu runs and pays for as part of your plan, read the app’s build and runtime diagnostics, restore a previous deployment, connect, verify, release or withdraw the authorization for a domain you already own, read domain quotes and prepare a dashboard link for you to review a fresh price, agreements and payment when the agent runs on your computer — it cannot place an order or submit payment, read the stored status of domains you bought through Tofu and ask the registrar to send its confirmation email again to the registrant, without seeing your owner details or changing renewal settings, read and add DNS records on a domain you bought through Tofu, and delete one of yours — never its mail (MX) or verification (TXT) records, which stay with you, read your app’s own traffic — the first read for an app that has no counter yet issues its key — and turn that counter on or off, read whether your app is answering its visitors, and turn Tofu’s emails about it on or off, change how your app’s users sign in and how its sign-in email is sent, see who has an account in your app, add a person by email or remove one — which signs them out — choose whether anyone can sign up or only the people you add, and make the app private — only people with a link can open it — or open to everyone again, send a short message to up to ten of your app’s users, from your app’s own email address, get an invite link that lets one person into your private app — you hand the link out yourself, and the first person who opens it gets in for up to 30 days — list the links you made and turn one off again, choose who can open your app — anyone with the link, only people you list by email, or anyone with a code you share, which puts a sign-in page in front of the whole app — add or remove those people, make a new code, sign everyone out, and keep exact paths open for services like webhooks, connect your app to your own Stripe account when the agent runs on your computer — you install Tofu’s app on Stripe’s own page — then create payment links there, pass their payment events to the app or disconnect it, with the money going straight to you and nothing in its reach that moves money out of your account, set up email your app sends from its own address, pause it, give it a new key or remove it, when the agent runs on your computer — Tofu writes the app’s sending key into its settings, and nothing is sent until the app sends email itself, restore an archived database into a new one Tofu runs and pays for as part of your plan, and hand you a short-lived link to download its archive, keep a database Tofu warned you about from being archived for going unused, list your database’s daily backups and ask a person at Tofu to put it back to one, which loses what was saved after it, see which of your app’s database setup steps are done, choose whether Tofu runs them for an app, and mark one as done so it never runs, when the agent runs on your computer, delete an app — the source you uploaded is kept until you ask Tofu to erase it — or its database, with nothing kept, send Tofu’s team a problem report you approved word for word, with your app’s status attached, sign in to Tofu, read the account’s id and email address, report the plan and the account’s GitHub state, and turn automatic updates off.
It cannot buy, renew or transfer a domain, submit a payment, read domain owner details, an environment value or a database password or connection string, change your plan or billing, or import a private repository from GitHub. Those stay with you.
A saved credential alone is not proof of connection: the client checks with Tofu. When a host has not picked up a new MCP server in the session it is already in, the installed client’s own command line does the same work without one — see the skill’s *Installation and CLI fallback* — and the connection is there the next time that host starts.
The client runs locally over stdio. This release is downloaded directly from Tofu; no npm package installation or Tofu repository checkout is required. The browser cannot inspect your local MCP settings.
