Tofu 会把你或你的编码代理开发的应用放到互联网上并保持运行。这个插件会把你的代理连接到 Tofu 托管的工具，并添加 Tofu 技能，告诉代理何时以及如何使用：检查应用、部署、读取其构建和运行日志、恢复早期版本、连接你已有的域名，并为应用用户添加托管数据库或谷歌登录。

它包含了什么

• [.mcp.json 指定一个远程 MCP 服务器，称为 https://app.trytofu.ai/mcp。该插件不会在您的电脑上安装和启动任何程序。
• skills/tofu/SKILL.md 是豆腐技能：步骤顺序、每个工具的需求，以及在删除或替换实时工作前该问什么。

它连接了什么，传递了什么

插件本身不会获取任何信息。代理第一次使用 Tofu 工具时，会连接到 https://app.trytofu.ai/mcp，打开 Tofu 自己的登录页面，你在那里批准连接。从那时起，代理通过该连接向 Tofu 发送你请求的请求和你要求部署的应用文件。

Tofu

Tofu takes an app you or your coding agent built, puts it on the internet and keeps it running. This plugin connects your agent to Tofu’s hosted tools and adds the Tofu skill, which tells the agent how and when to use them: check an app, deploy it, read its build and runtime logs, restore an earlier version, connect a domain you already own, and add a managed database or Google sign-in for the app’s own users.

What it contains

• .mcp.json names one remote MCP server, https://app.trytofu.ai/mcp. The plugin installs and starts no program on your computer.
• skills/tofu/SKILL.md is the Tofu skill: the order of the steps, what each tool needs, and what to ask you before anything that deletes or replaces live work.

What it connects to, and what it sends

The plugin fetches nothing by itself. The first time your agent uses a Tofu tool, it connects to https://app.trytofu.ai/mcp and opens Tofu’s own sign-in page, where you approve the connection. From then on your agent sends Tofu the requests you ask for, and the app files you ask it to deploy, over that connection. Tofu answers with what those tools return, such as your apps, their status and logs, and the names of their settings (never a secret value), and it gives your agent the id and email address of the account you approved so the connection can be labelled. You never paste a key, token or password into chat. Tofu reaches only the apps in the account you approved, and you can disconnect at any time from the Coding agent page of the Tofu dashboard. The privacy policy at https://trytofu.ai/privacy describes what a connected agent receives and what Tofu keeps about the connection.

When you ask your agent to report a problem with Tofu itself, or it offers to, the skill has it show you the report first and send it only once you approve its exact words. The report carries those words, the kind of problem, the step that failed and any status code or reference from Tofu that you quote, and the app it is about, and Tofu records which coding agent or AI app it came through. Unless you leave them out, Tofu adds that app’s status as it reads it: its live version and how that version went, how many problems blocked its newest blocked update, and its uptime check. Tofu refuses words that look like a key or a password, encoded data, or a block of code marked off with three backticks or three tildes, and takes out email addresses and phone numbers written with a country code; nothing else from your chat is sent. A person at Tofu reads every report, Tofu keeps it for 180 days, and Tofu emails a receipt to the address you sign in with: reply to it to add something or to withdraw the report. When Tofu cannot email one, its answer says so: to add something or withdraw the report, write to [email protected] with its reference.