Connect a coding agent to Deftro

Your coding agent (Claude Code, Cursor, Codex or another) works with your skills through the deftro CLI and the MCP server. Both sign in as you, and you approve that sign-in in your own browser.

The quickest way

1. Open Connect an agent. You can also reach it from Settings > Integrations.
2. Press Onboard your agent. It copies one sentence.
3. Paste it into your agent. The agent fetches the setup guide and runs the sign-in.
4. The agent shows you a code like ABCD-EFGH. Approve it on the device page (below).

The sentence it copies is the same for every agent. It names the site you pressed it on, for example:

Set up Deftro for me. Fetch https://baton-vault.vercel.app/get-started.md and follow it.

The setup guide signs the agent in, adds the MCP server and installs the deftro skill. Skills you install later land in your agent's own folder, such as .claude/skills/ for Claude Code or .cursor/rules/ for Cursor. See where skills are written.

Generate an agent brief instead

If you want a token limited to certain scopes, use the form on the same page. Choose What is this agent for? and, for publishing, a Publish destination, then press Generate agent brief. Copy the brief into your agent. The token in it is shown once only.

Approve or deny a device

1. Open the device page while signed in.
2. Type the code your agent, the CLI or the browser extension showed you.
3. Read Approving grants. The CLI can read and publish as you and does not expire. The browser extension gets a narrower sign-in that lasts 90 days.
4. Press Approve if you started this sign-in, or Deny if you did not.

A code stays valid for 10 minutes. Approved devices appear under Settings > General > Connected devices, where you can revoke them. A code is checked only from Deftro's own device page, so another website cannot try codes in your name, not even by sending you a link.

If the sign-in did not finish

• The request was denied (access_denied): someone pressed Deny. Run deftro login again for a new code.
• The code expired (expired_token): it was not approved, or not collected, within 10 minutes. Start the sign-in again.
• The token was already delivered (already_delivered): this code's sign-in was already handed to a client, and it is never handed out twice. Run deftro login again on the machine that is missing it.