Tofu

Tofu takes an app you or your coding agent built, puts it on the internet and keeps it running. This plugin connects your agent to Tofu’s hosted tools and adds the Tofu skill, which tells the agent how and when to use them: check an app, deploy it, read its build and runtime logs, restore an earlier version, connect a domain you already own, and add a managed database or Google sign-in for the app’s own users.

What it contains

• .mcp.json names one remote MCP server, https://app.trytofu.ai/mcp. The plugin installs and starts no program on your computer.
• skills/tofu/SKILL.md is the Tofu skill: the order of the steps, what each tool needs, and what to ask you before anything that deletes or replaces live work.

What it connects to, and what it sends

The plugin fetches nothing by itself. The first time your agent uses a Tofu tool, it connects to https://app.trytofu.ai/mcp and opens Tofu’s own sign-in page, where you approve the connection. From then on your agent sends Tofu the requests you ask for, and the app files you ask it to deploy, over that connection. Tofu answers with what those tools return, such as your apps, their status and logs, and the names of their settings (never a secret value), and it gives your agent the id and email address of the account you approved so the connection can be labelled. You never paste a key, token or password into chat. Tofu reaches only the apps in the account you approved, and you can disconnect at any time from the Coding agent page of the Tofu dashboard. The privacy policy at https://trytofu.ai/privacy describes what a connected agent receives and what Tofu keeps about the connection.

When you ask your agent to report a problem with Tofu itself, or it offers to, the skill has it show you the report first and send it only once you approve its exact words. The report carries those words, the kind of problem, the step that failed and any status code or reference from Tofu that you quote, and the app it is about, and Tofu records which coding agent or AI app it came through. Unless you leave them out, Tofu adds that app’s status as it reads it: its live version and how that version went, how many problems blocked its newest blocked update, and its uptime check. Tofu refuses words that look like a key or a password, encoded data, or a block of code marked off with three backticks or three tildes, and takes out email addresses and phone numbers written with a country code; nothing else from your chat is sent. A person at Tofu reads every report, Tofu keeps it for 180 days, and Tofu emails a receipt to the address you sign in with: reply to it to add something or to withdraw the report. When Tofu cannot email one, its answer says so: to add something or withdraw the report, write to [email protected] with its reference.