A private door for a tool you already built
Let Bob use the tool. One private link.
A long link stays open for anyone who saved it. A shared password has to change for the whole group. A company login list leaves out a client or a partner.
Invite
Private link
- One emailReady
- A roleReady
- RevokeReady
- The gateReady
- A vaultReady
Who can open it
Five checks. Then the link.
01
One email
They get a magic link. They do not join GitHub, Google Cloud, Neon, or your host.
02
A role
They use the app, leave notes that come back to your agent, or edit. Edit is the only role with the repo.
03
Revoke
They lose access on the next request. You do not rotate a password or redeploy.
04
The gate
The gate is the login. The coding agent cannot remove that check on the next publish.
05
A vault
The database password stays out of the app. They only see the rows you granted.
The app and the database sleep when nobody is in them. One bill for both.
MCP connection
Connect once. Invite from your agent.
Add this once. The first time, approve access in the browser.
Cursor
Merge this into Cursor’s project MCP configuration.
- 1. Add the JSON.
- 2. Reload Cursor.
- 3. Approve access in the browser on first use.
{
"mcpServers": {
"cloud": {
"url": "https://cloud-site-blue.vercel.app/mcp"
}
}
}Claude Code
Run this where Claude Code is available.
- 1. Add the endpoint.
- 2. Restart Claude Code if it is already open.
- 3. Approve access in the browser on first use.
claude mcp add --transport http cloud https://cloud-site-blue.vercel.app/mcpCodex
Add this to your Codex configuration.
- 1. Add the configuration.
- 2. Reload Codex.
- 3. Approve access in the browser on first use.
[mcp_servers.cloud]
command = "npx"
args = ["-y", "mcp-remote", "https://cloud-site-blue.vercel.app/mcp"]Try this prompt
Call cloud_providers, then cloud_setup_guide, then attach_my_cloud. Keep the database key in the vault. Do not put it in the app. Invite my teammate with a magic link and a role.Do not paste a token into the chat.
Request a pilot.
The first teams are onboarded by hand. This form only saves your email.