agent-paste

Where agents publish. Your agent built it. Open it anywhere.

Your coding agent just generated a report, a chart, a small HTML app. agent-paste turns that file or folder into a hosted Artifact with a URL you can open and share. No deploy, no repo, no bucket.

npx @zaks-io/agent-paste publish ./report
# -> https://app.agent-paste.sh/artifacts/art_01H...

It works from any coding agent with a shell (Claude Code, Codex, Cursor, CI), and over MCP from web chats that have none (ChatGPT, Claude, Gemini). The hosted service is operated by Zaks.io, LLC. The source is Apache-2.0.

How It Works

The core loop is intentionally small:

agent creates something -> publish -> human opens URL -> agent reads Agent View -> Artifact expires later

Every publish gives you:

• An Artifact: the published unit, revisable in place as the agent iterates.
• A View URL for humans: authenticated app navigation into the Artifact Viewer.
• An Agent View: a machine-readable manifest so tools can read what was published.
• Lifecycle controls: Workspace Auto Deletion policy, so generated work does not live forever by accident.

Nothing is public unless you make it public. Content is served from an isolated Content Origin with signed URLs, and a public Share Link is minted only when you explicitly create one.

Quick Start

Sign in once, then publish:

npx @zaks-io/agent-paste login
npx @zaks-io/agent-paste publish ./report

Expected output:

✓ Published "report"

  View      https://app.agent-paste.sh/artifacts/art_01H...
  Upload    3/3 uploaded, 0 reused · 42 KB sent, 0 B cached

  → open https://app.agent-paste.sh/artifacts/art_01H...

Want a public, shareable link? That is explicit:

npx @zaks-io/agent-paste publish ./report --share

No login, no human in the loop

Unattended agents can publish text, markdown, images, or static HTML/CSS with the restricted ephemeral path -- no account needed:

npx @zaks-io/agent-paste publish ./report --ephemeral

The output leads with a claim link — relay that to the user, not the Artifact URL. Open it in a browser while signed in to view, keep, and pull the work into your Workspace. Two rules keep this path safe:

• Check before falling back. Run whoami --json first -- whoami exits 0 even when signed out, so the exit code tells you nothing. Check the JSON: {"authenticated": false} means no usable credential; a signed-in response carries the resolved Workspace, actor, and scopes instead. If signed in, publish normally; if a human is present, run login first and skip --ephemeral.
• No JavaScript. Unclaimed ephemeral HTML is served under a script-disabled policy. Static pages are fine; browser apps and interactive visualizations need authenticated publish, which runs them inside the controlled Artifact Viewer.

The npm package is @zaks-io/agent-paste. The installed command is agent-paste. Standalone macOS, Linux, and Windows installers are documented in the CLI README.

MCP For Hosted Agents

Use MCP when an agent can connect to a remote MCP server but cannot run the CLI:

https://mcp.agent-paste.sh

MCP is OAuth-only. Connect the remote server in the host, complete OAuth, then start with the whoami tool. Agents can publish text Artifacts, read Agent Views, add Revisions, and manage Share Links and Revision Links. Folder and binary publishes stay in the CLI.

Read docs/mcp.md for the practical MCP guide, or docs/ops/runbook-mcp-hosts.md for host onboarding and smoke verification.

URLs And Sharing

Three URL shapes, three jobs:

Artifact URL           https://app.agent-paste.sh/artifacts/{artifact_id}
Access Link Signed URL https://app.agent-paste.sh/al/{publicId}#{blob}
Revision Content URL   https://usercontent.agent-paste.sh/v/{content_token}/index.html

The Artifact URL is authenticated Workspace app navigation and is the default View URL after publish. An Access Link Signed URL is the public/shareable URL, minted only when a Share Link or Revision Link is explicitly created. The Revision Content URL is exact signed byte delivery for one Revision; direct usercontent HTML is inert and should not be presented as the live page.

Use Cases

Publishing one generated asset, opening remote agent output anywhere, publishing from MCP hosts without CLI access, watching an agent iterate, handing work from one tool to another, sharing one-off artifacts, and running unattended with --ephemeral. The canonical use-case matrix lives in docs/specs/use-cases.md.

For Agents

Agents are first-class readers of the project:

• /agents.md: compact operating guide for agents.
• /llms.txt: short machine-readable summary.
• /llms-full.txt: full public docs corpus.
• https://mcp.agent-paste.sh: hosted OAuth-only MCP surface for agents without CLI access.

Choose Your Path

Goal	Start here
Use the CLI	apps/cli/README.md
Use MCP from hosted agents	docs/mcp.md
Understand use cases	docs/specs/use-cases.md
Get into the code	docs/development.md
Contribute	CONTRIBUTING.md
Read specs and ADRs	docs/specs/README.md, docs/adr/README.md
Check current project status	docs/ops/project-status.md
Orient an agent	AGENTS.md
Report a vulnerability	SECURITY.md

Project Status

agent-paste is live in production and in early alpha. The hosted service is available, the CLI/npm package and public docs are part of the supported surface, and the product is still intentionally small while the core handoff loop hardens. Current production status, alpha limits, and backlog live in docs/ops/project-status.md.

Repo Map

Area	What it owns
apps/cli	Public CLI for login, logout, whoami, publish, and standalone upgrade.
apps/apex	Public site, docs, legal pages, install scripts, /llms.txt, /agents.md.
apps/web	Dashboard, Access Link viewer, claim, billing, and Workspace UI.
API Workers	Control plane, uploads, content reads, jobs, stream, and MCP services.
packages/*	Contracts, DB/repository, auth, tokens, storage, billing, config, tooling.
docs/*	Specs, ADRs, development reference, project status, and operating docs.

For the full workspace inventory, root commands, package script policy, hooks, and monorepo maintenance rules, read docs/development.md.

Source Of Truth

• docs/specs/README.md: current product and system behavior.
• docs/specs/use-cases.md: canonical product use cases.
• docs/mcp.md: practical MCP guide for hosted agents.
• docs/adr/README.md: architecture decision trail.
• CONTEXT.md: domain language.
• packages/contracts: Zod schemas, route registries, and OpenAPI generation.
• docs/ops/project-status.md: production status, ledgers, and backlog.

Specs are the current behavioral truth. ADRs explain why decisions were made.

License

Apache License 2.0. See LICENSE and NOTICE. Copyright 2026 Zaks.io, LLC.