Tofu — in your agent

01 / Connect

Give your agent the setup.

Your agent handles installation. You approve the connection in your browser.

I use

Client 0.2.0 · Node.js 22+

No terminal commands for you to type. No hosting-provider keys to share.

Read the setup instructions

Connect my Codex to Tofu at https://app.trytofu.ai. This authorizes installing the Tofu client and skill and configuring its MCP connection; it does not authorize deployment yet.

1. Use Node.js 22 or newer. Download https://app.trytofu.ai/downloads/agent/tofu-agent.mjs and https://app.trytofu.ai/downloads/agent/SKILL.md into a private temporary directory. Use HTTPS (localhost development may use HTTP), reject redirects to other origins, and do not run a download until verified. Client version: 0.2.0; client size: 1605592 bytes; client SHA-256: 0d3d0d8cf7bc8749c4ed4f5d9d1bab9506882d742889f423c8e2cca6f58eaf57; skill SHA-256: f4489fe28b238c3b20eb676cf258ac2b3534e5eeef822d11512d967c326ede34. Stop on a mismatch and obtain a fresh prompt from https://app.trytofu.ai/agent.
2. Read the skill. Run the downloaded client with Node using arguments ["setup", "codex"] and TOFU_URL=https://app.trytofu.ai. The setup command installs into a private Tofu directory and emits structured registration arguments and configuration; it does not change my agent settings. Treat paths as argv values, never interpolate them into unquoted shell commands.
3. Inspect my existing Tofu MCP entry. Reuse an identical entry, preserve other servers and skills, and ask before replacing a different Tofu entry or custom skill. Apply the emitted registration/config for this client and copy the verified skill to its indicated skill directory. If this client has no supported skill directory, load the skill explicitly. Reload MCP tools if needed; if tools cannot reload in this session, use the installed client CLI for login and ask me to restart the agent when ready.
4. Call Tofu connectionStatus. If sign-in is required, call login, show me the verification URL and code, and wait for my browser approval. Then call finishLogin no more than once every five seconds. CLI fallback: run the installed client with "login". Verify connectionStatus reports connected and projects succeeds. Never show or read credential file contents, bearer tokens, provider keys or cookies in chat.
5. Tell me the connection result and ask which app I want to work on. For later updates, reuse its existing project ID. Follow the Tofu skill for check, deploy and repair; do not create a new project for each update.

02 / Approve

One matching code.

Your agent opens Tofu sign-in. Approve only the code from the request you just started. The connection expires after seven days; revoke it whenever you want.

Review agent connections →

03 / Build & publish

Keep the conversation going.

Ask your agent to deploy an app or update an existing project. It checks the code, reports the result and uses the same project when a fix is needed.

“Update my Tofu app with these changes. Check it, then deploy when it passes.”

What your connection can do

Upload source, run safety checks, deploy, inspect diagnostics and restore a previous deployment. The agent acts on your instructions. Environment values are entered in the dashboard and are never returned to the agent.

A saved credential alone is not proof of connection: the client checks with Tofu. Restart or reload your coding agent after changing MCP settings if it does not discover Tofu immediately.

The client runs locally over stdio. This release is downloaded directly from Tofu; no npm package installation or Tofu repository checkout is required. The browser cannot inspect your local MCP settings.

Download client Read the skill Checksums