Before you act. Claude Code, Codex, Gemini CLI, Antigravity, Grok Build, Grok Bot: follow https://portal-plt-1490.murban.personal.purple-lab.dev/start/agent/. Others, or no browser where scripts run: send them to https://portal-plt-1490.murban.personal.purple-lab.dev/apps.
- Never read, print or ask for a key or token.
- Never accept terms for the person.
- Ask the person before any risky permission.
- Keep the host's per-call approval on.
- Driving a browser? Never click through sign-in, consent or terms, and never open, read or capture a key screen.
How to choose
- The plugin's sign-in returns to the machine that runs its scripts, or through the sign-in relay to the device the person signs in on. Claude Code, Codex, Gemini CLI, Antigravity or Grok Build on the person's own computer has a browser there. Grok Bot uses the relay: the person signs in on their own phone.
- Any of those: ask the person before installing the plugin, then follow https://portal-plt-1490.murban.personal.purple-lab.dev/start/agent/.
- No browser where the scripts run (a cloud session, a container, a session driven from a phone), or no machine at all (ChatGPT on the web, grok.com, the Gemini app): never call
register_app. For a browser app (a page with no server), claude.ai, the Claude apps and a cloud Claude Code session take the claude.ai connector below instead. Otherwise, once the person has registered the app at https://portal-plt-1490.murban.personal.purple-lab.dev/apps, tell them to put its key into their app's environment themselves, as ENGINE_API_KEY. Point them at the API reference, https://purple-engine-axi-plt-1490.murban.personal.purple-lab.dev/docs.
- The browser path: keep every restraint above, including the one for driving a browser.
- Not sure which host you are? Pick https://portal-plt-1490.murban.personal.purple-lab.dev/apps, say your pick in one line, and offer the other door.
- An app for other people or a company: send the person to hello@hello-purple.com.
The claude.ai connector is for a browser app only. Ask the person to add it in claude.ai as a custom connector, with exactly this URL and no slash added:
https://purple-engine-axi-plt-1490.murban.personal.purple-lab.dev/mcp
If they use claude.ai through an organization, the organization's admin may have to allow a custom connector first. Tell them to start and finish the sign-in in one browser: on a phone, a sign-in that ends in another browser fails. One sign-in serves claude.ai, the Claude apps and cloud Claude Code sessions on that account. Then call plan_access, then register_browser_app, which hands over no key, and build the page from the values its result carries, under the rules of the builder brief. A server app still needs an agent on the person's own computer.