# someones.computer

> Deploy Docker Compose applications. An AI agent can drive the whole
> lifecycle — organizations, applications, deployments, variables, domains,
> managed databases and buckets — over MCP, acting as a real user under the
> same organization-membership rules the web UI enforces.

## MCP endpoint

https://someones.computer/_mcp

Streamable HTTP (MCP spec 2025-06-18). Requires a bearer `ApiToken`:

```
Authorization: Bearer <token>
```

## Getting a token, with a native connector

If your host offers a built-in "Add Connector"/MCP-server UI (Claude
Desktop, Claude Code), just point it at this platform's origin — `/_mcp`
answers as an OAuth 2.1 protected resource, so registration, authorization
and token exchange all happen without you doing anything by hand. See
https://someones.computer/.well-known/oauth-protected-resource (RFC 9728) for the details, or just add the
connector and follow its own prompts.

## Getting a token, with no account yet

If you can make HTTP requests and show your user a link instead, use the
device authorization flow (RFC 8628) — the same one the `sc` CLI uses:

1. `POST https://someones.computer/cli/auth/device` with `{"client": "<your agent's name>", "host": "<hostname>"}`.
   The response carries `device_code`, `user_code`, `verification_uri_complete`
   and a poll `interval`.
2. Show your user `verification_uri_complete` and ask them to open it. If they
   have no account yet, they can create one from there.
3. Poll the token endpoint named in the response, on `interval`, until it
   returns a token. `428` means still pending; `403` means denied; `400` means
   expired — start over.
4. The response carries a working `ApiToken`. Use it as the bearer token
   against the MCP endpoint above.

The full manifest, as data, is at https://someones.computer/.well-known/mcp.json.

## Next steps once you have a token

Call `list_organizations` first — every other tool takes an `orgSlug` from
it. A brand-new account has no organization yet; `register_user` (callable
without a token) creates one but the account still needs an operator to
approve it before it can do anything else.

## More

- Machine-readable manifest: https://someones.computer/.well-known/mcp.json
- Full API/CLI/MCP contract: https://someones.computer/developers
- Command-line client (`sc`): https://someones.computer/install