Plinth

Create a Plinth account for your human owner (or join theirs if their email already has one). Plinth emails them a link to approve; then call account.status with the returned signup_id and poll to collect your token.

Finish signup: checks whether the owner approved, and returns your token (once) when they have.

Agents that have a key to this account, when each was last used, and which one you are.

Owner only. Remove an agent's access to this account immediately.

Visitors and page views per day, top pages, where visitors come from, and phone vs desktop. No cookies; visitors are counted per day. Free shows today; Pro up to 90 days.

Withdraw a pending approval request you made (for example one that is no longer needed). The owner can no longer approve it.

Check an approval. When approved, result holds the action output.

Approvals requested by this account, newest first. status: pending, approved, denied, cancelled, superseded (default all). Pending ones include approve_url, which the signed-in owner can approve at (the owner also gets each request by email).

Ask the owner to add or replace the payment card. Returns an approve_url; approving opens a Stripe page where the owner enters the card. Plinth never sees card numbers. May return pending_approval: the owner is emailed a link to approve; tell them it is waiting, then poll approval.status.

Whether a card is on file, this month's spend, the spend cap and recent charges.

List files in the project repo (path and size) on a branch or commit.

Read one file from the project repo. Text comes back as utf8; binary files as base64.

Commit files to the project without git: for agents that cannot run git or the CLI (e.g. Claude or ChatGPT in the cloud). Writes and deletes files on a branch (main deploys to staging; other branches get preview environments) and starts the deploy. Send whole files; text as utf8, binary as base64. Up to 5 MB per file.

Get the owner into the web console. Plinth emails the owner a sign-in link; approving it signs that browser in for 12 hours. The agent never receives a session. May return pending_approval: the owner is emailed a link to approve; tell them it is waiting, then poll approval.status.

Schedule a job: Plinth POSTs to path on the environment at each tick (5-field cron, UTC), with the header x-plinth-cron-secret. Paths under /api/cron/ refuse any other caller. Outside production jobs start paused unless enabled is true. Jobs can also be declared in plinth.json "crons".

Cron jobs on an environment with last run and next run.

Pause a cron job (it stays defined but does not run).

Delete a cron job.

Resume a paused cron job.

Run a cron job now and return its result.

Recent runs of a cron job.

Get the DATABASE_URL for an environment (the same one the app receives). Production needs owner approval. May return pending_approval: the owner is emailed a link to approve; tell them it is waiting, then poll approval.status.

Apply pending migrations from the live release now (deploys do this automatically). Takes a snapshot first. May return pending_approval: the owner is emailed a link to approve; tell them it is waiting, then poll approval.status.

Applied and pending migrations (files in migrations/*.sql, applied in name order).

Run SQL against an environment database. Returns up to 500 rows. On production, reads (SELECT, WITH, SHOW, EXPLAIN) run in a read-only transaction; any write needs owner approval. May return pending_approval: the owner is emailed a link to approve; tell them it is waiting, then poll approval.status.

Restore an environment database from a snapshot. Takes a safety snapshot first. Production needs owner approval. May return pending_approval: the owner is emailed a link to approve; tell them it is waiting, then poll approval.status.

Take a snapshot (pg_dump) of an environment database.

List snapshots for an environment. Staging and production get one automatically every night at 03:00 UTC, kept 7 days.

Rebuild and deploy the head of the branch an environment tracks (staging tracks main). Production only changes via promote.

Stop a build that is still running (the latest one in the environment, or a given release id). The live release keeps serving.

Releases for an environment, newest first, with status and build log of the latest. Pass log_from (a character offset) to get only the log written since; build_log_length tells you where to continue.

Buy a domain and connect it to an environment: registers it, points DNS at Plinth, issues HTTPS. Always shows the owner the exact price first. Standard registrations only. May return pending_approval: the owner is emailed a link to approve; tell them it is waiting, then poll approval.status.

Map a domain you own to an environment. Point its DNS at the Plinth host; returns the record to create.

Domains mapped to a project.

Domains bought through Plinth on this account, with price, status and expiry.

Unmap a domain.

Check if domains can be bought here, with price. Pass a name ("acme" checks acme.com, .dev, .app, .io, .co, .net, .ai, .org) or a full domain.

Check the TXT record of a connected domain; once it matches, the domain is served.

Production needs owner approval. Run a shell command inside the environment's running sandbox (same code, env vars, network and limits as the app), e.g. "node -e '...'", "ls", "env | sort". 30s timeout, 20 KB of output. Code is read-only; /tmp is writable. May return pending_approval: the owner is emailed a link to approve; tell them it is waiting, then poll approval.status.

Environments for a project with live release and URL.

Restart an environment on its current release (fresh sandbox, same code and data).

Set many environment variables at once from .env text (KEY=value lines; # comments, quotes and "export" are fine). One restart at the end. Keys starting with VITE_/NEXT_PUBLIC_/PUBLIC_ also reach the build.

List environment variable names (values are never returned).

Set an environment variable for an environment. Restarts the env so it takes effect.

Remove an environment variable.

Debug an environment: is it running, restarts, out-of-memory kills, memory/CPU use, live release, and the last errors from its logs.

Branches and their head commits.

Recent commits on a branch.

Get the authenticated git remote URL for pushing. Pushing main deploys staging; any other branch gets a preview environment.

Revert a commit on a branch server-side. The new commit deploys like a push.