§ agents
Safe agent commerce
Current V1 is limited to public discovery and human-mediated signup and owner-controlled Stripe billing without exposing card details to an agent.
Hosted MCP
Hosted MCP is available at https://mcp.niceuptime.com/mcp. Pro and Max workspace owners create short-lived, tenant-scoped bearer tokens in Settings. The raw nu_mcp_ secret is shown once and belongs only in a trusted client or password manager. Read and write scopes follow the current tool, entitlement, and live role rules in the complete MCP contract.
Connect through Streamable HTTP JSON-RPC with an Authorization: Bearer header. Send initialize, then notifications/initialized, then discovery or tool calls. See the complete MCP contract for tools, resources, prompts, schemas, protocol versions, errors, and limits.
Safe flow
- Read pricing.json and get the buyer's explicit plan approval.
- Signup is globally available. A human buyer can use signup after confirming a plan.
- Billing is owner-controlled. A signed-in human can use the canonical
/billing/upgradechooser, then confirm through Stripe Checkout or the Stripe Billing Portal. - Treat only verified webhook-projected billing state as a paid subscription state.
Never collect raw card data
Agents must never ask for, collect, store, transmit, or log card numbers, expiration dates, CVCs, or other raw payment credentials. Do not put card data in chat, MCP calls, REST payloads, CLI arguments, stdin, environment variables, config files, or logs.