Agents

Give an agent a workspace, not your account.

Dedicated tokens have a workspace boundary, read or read/write scopes, an expiry and immediate revocation.

Create a token

Open Agents, choose a workspace and the narrowest scope, then copy the secret once. The HTTP contract lives at api.devicecamp.app/openapi.yaml.

Connect MCP

Run the Devicecamp platform binary as a stdio subprocess. Keep the token in the private environment, never in command arguments.

{
  "mcpServers": {
    "devicecamp": {
      "command": "/absolute/path/to/platform",
      "args": ["mcp"],
      "env": {
        "DEVICECAMP_API_URL": "https://api.devicecamp.app",
        "DEVICECAMP_AGENT_TOKEN": "dca_..."
      }
    }
  }
}

Bootstrap a repository

The get_bootstrap_artifacts tool generates AGENTS.md instructions and a device.yaml inventory without embedding credentials.