@remcp/remcp 0.1.0 → 0.1.2

package/README.md

@@ -1,71 +1,118 @@
 # ReMCP
 
-ReMCP is an open-source remote MCP bridge for computers you control. A local agent connects outbound to a ReMCP server and exposes filesystem, search, terminal and process tools through one authenticated remote MCP endpoint.
+ReMCP is an open-source remote MCP bridge for computers you control. A lightweight device agent connects **outbound** to a ReMCP relay, so ChatGPT, Codex, or another MCP client can work with local files, directories, searches, terminal sessions, and processes without exposing an inbound port on the computer.
 
-**Hosted service:** https://remcp.delio24.com
-**MCP endpoint:** `https://remcp.delio24.com/mcp`
+- Hosted service: <https://remcp.delio24.com>
+- MCP endpoint: `https://remcp.delio24.com/mcp`
+- npm: `@remcp/remcp`
+- License: MIT
 
-## How it works
+## Quick start
 
-```text
-ChatGPT / MCP client ── OAuth + HTTPS ──> ReMCP server
-                                           │
-                                           ├── WSS ──> laptop agent ──> local MCP
-                                           └── WSS ──> server agent ──> local MCP
+Requires Node.js 22.5 or newer.
+
+1. Sign in at <https://remcp.delio24.com> and generate a one-time pairing command.
+2. Run it on the computer you want to connect:
+
+```bash
+npx --yes @remcp/remcp@latest connect \
+  --server https://remcp.delio24.com \
+  --code YOUR_PAIRING_CODE \
+  --install
 ```
 
-The central service stores account/device metadata, hashed reusable credentials and OAuth state. Actual filesystem and process access stays on the paired computer.
+3. Verify the persistent agent:
 
-## Install
+```bash
+remcp --version
+remcp status
+```
 
-Requires Node.js 22.5 or newer.
+4. Add the MCP endpoint to your client:
+
+```text
+https://remcp.delio24.com/mcp
+```
+
+Authentication uses OAuth authorization code + PKCE with rotating refresh credentials.
+
+## Update
 
 ```bash
-npx @remcp/remcp connect --server https://remcp.delio24.com --code YOUR_PAIRING_CODE --install
+remcp update
 ```
 
-Generate the one-time pairing code after signing in at https://remcp.delio24.com.
+`remcp update` refreshes the global CLI and compatible local runtime, then restarts the installed user service.
+
 ## CLI
 
 ```text
-remcp connect   Pair this computer with a ReMCP server
-remcp start     Run the device agent in the foreground
-remcp status    Check the saved configuration and server
-remcp install   Install the user service where supported
-remcp uninstall Remove the installed user service
+remcp start             Run the device agent in the foreground
+remcp status            Show version, pairing and server health
+remcp doctor            Alias for status
+remcp update            Update ReMCP and restart the user service
+remcp install           Install or repair the user service
+remcp uninstall         Remove the user service
+remcp uninstall --purge Remove the service and global ReMCP packages
+remcp --version         Print the installed CLI version
 ```
 
-## Self-host the server
+## Architecture
 
-```bash
-git clone https://github.com/antonbaider/remcp.git
-cd remcp
-cp .env.example .env
-# Fill in your public URL and Firebase Web App configuration.
-docker compose up -d --build
+```text
+ChatGPT / Codex / MCP client
+           │
+           │ OAuth 2.1 + HTTPS
+           ▼
+     ReMCP relay /mcp
+           │
+           │ authenticated WSS (outbound from device)
+           ▼
+      paired computer
+           │
+           └── local file / search / terminal / process runtime
 ```
 
-Put a TLS reverse proxy in front of ReMCP and proxy WebSocket upgrades for `/agent`. The example Compose file binds the application to localhost by default. Do not publish the internal application port directly unless you have deliberately secured it.
+The hosted relay stores account/device metadata, one-way hashes of reusable credentials, OAuth client metadata, and refresh-token hashes. Device credentials are independently revocable. MCP sessions are scoped to the authenticated ReMCP account.
+
+## OpenAI Plugin package
 
-ReMCP does **not** require a Firebase Admin service-account private key. Firebase ID tokens are verified using Google's public signing keys.
+The repository is prepared for the current OpenAI Plugins format:
 
-## ChatGPT / remote MCP
+- `plugin.json` — portable Agent Plugins manifest;
+- `mcp.json` — production Streamable HTTP MCP configuration;
+- `skills/remcp-operator/SKILL.md` — bundled operator skill;
+- `assets/remcp-icon.png` — plugin icon;
+- `docs/OPENAI_PLUGIN.md` — submission and reviewer checklist;
+- `submission/openai-plugin-review.json` — generated tool annotations plus five positive and three negative review cases.
 
-ReMCP exposes Streamable HTTP MCP at `/mcp`. Authentication uses authorization code + PKCE, Dynamic Client Registration, short-lived access tokens and rotating refresh tokens.
+ReMCP has no plugin UI, so the public submission should not include UI screenshots. The remote MCP server uses a universal production URL and OAuth. See [`docs/OPENAI_PLUGIN.md`](docs/OPENAI_PLUGIN.md) before submitting.
 
-The repository includes `chatgpt-app-submission.json` plus a reusable ReMCP operator skill for submission/testing workflows.
 ## Security model
 
-- one independent credential per paired device;
-- device and refresh credentials are stored as one-way hashes server-side;
+- no inbound port is required on paired computers;
+- one revocable credential is issued per paired device;
+- reusable credentials are hashed server-side;
 - pairing codes are short-lived and single-use;
-- MCP sessions are bound to the authenticated account;
-- the device agent connects outbound over WSS;
-- write/process tools expose explicit MCP risk annotations;
-- the public review sandbox is isolated per authenticated user and intentionally limits terminal commands;
-- central Docker deployment runs read-only with dropped Linux capabilities in the supplied Compose configuration.
+- OAuth uses PKCE and rotating refresh credentials;
+- OAuth metadata advertises `openid` and `email`, with a UserInfo endpoint for verified-email workspace restrictions;
+- MCP tools carry explicit `readOnlyHint`, `openWorldHint`, and `destructiveHint` annotations;
+- the public review fixture is isolated per authenticated account and intentionally restricts terminal commands;
+- the supplied server container runs read-only with dropped Linux capabilities.
+
+ReMCP tools should not be used to request or process passwords, MFA codes, API/private keys, payment-card data, protected health information, or government identifiers. See [`SECURITY.md`](SECURITY.md) and the hosted <https://remcp.delio24.com/security> page.
+
+## Self-hosting
+
+```bash
+git clone https://github.com/antonbaider/remcp.git
+cd remcp
+cp .env.example .env
+# Fill in your public URL and Firebase Web App configuration.
+docker compose up -d --build
+```
 
-See https://remcp.delio24.com/security for the hosted-service security overview.
+Put a TLS reverse proxy in front of ReMCP and proxy WebSocket upgrades for `/agent`. The supplied Compose configuration binds the application to localhost by default. ReMCP verifies Firebase ID tokens using Google's public signing keys and does not require a Firebase Admin private key.
 
 ## Development
 
@@ -74,10 +121,25 @@ npm ci
 npm run check
 npm test
 npm audit --omit=dev
+npm pack --dry-run
 ```
 
-## License
+For server changes:
+
+```bash
+docker build -t remcp:test .
+```
+
+See [`CONTRIBUTING.md`](CONTRIBUTING.md) for contribution and security rules.
+
+## Project docs
 
-ReMCP is MIT licensed. `@wonderwhy-er/desktop-commander` is a separate MIT-licensed dependency; its notices are preserved in `THIRD_PARTY_NOTICES.md`.
+- [`docs/OPENAI_PLUGIN.md`](docs/OPENAI_PLUGIN.md) — OpenAI Plugins submission
+- [`SECURITY.md`](SECURITY.md) — vulnerability reporting and operational security
+- [`CONTRIBUTING.md`](CONTRIBUTING.md) — development checks
+- [`CHANGELOG.md`](CHANGELOG.md) — release notes
+- [`THIRD_PARTY_NOTICES.md`](THIRD_PARTY_NOTICES.md) — third-party license notices
+
+## License
 
-ReMCP does not require or depend on the proprietary Remote Desktop Commander hosted relay service.
+ReMCP is MIT licensed. Third-party notices for the local device runtime are preserved in `THIRD_PARTY_NOTICES.md`.

package/mcp.json

@@ -0,0 +1,9 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json",
+  "mcpServers": {
+    "remcp": {
+      "type": "streamable-http",
+      "url": "https://remcp.delio24.com/mcp"
+    }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remcp/remcp",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Self-hosted remote MCP bridge for securely controlling your own computers from MCP clients.",
   "type": "module",
   "license": "MIT",
@@ -15,8 +15,10 @@
     "bin",
     "src",
     "public",
+    "plugin.json",
+    "mcp.json",
+    "assets",
     "skills/remcp-operator",
-    "chatgpt-app-submission.json",
     "LICENSE",
     "THIRD_PARTY_NOTICES.md",
     "README.md"
@@ -30,7 +32,6 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
-    "@wonderwhy-er/desktop-commander": "^0.2.50",
     "express": "^5.2.1",
     "express-rate-limit": "^8.7.0",
     "helmet": "^8.3.0",

package/plugin.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+  "name": "remcp",
+  "version": "0.1.2",
+  "description": "Securely use files, directories, searches, terminal sessions, and processes on computers you have paired with ReMCP.",
+  "homepage": "https://remcp.delio24.com",
+  "repository": "https://github.com/antonbaider/remcp",
+  "license": "MIT",
+  "keywords": [
+    "mcp",
+    "remote-computer",
+    "developer-tools",
+    "files",
+    "terminal"
+  ],
+  "extensions": {
+    "com.openai": {
+      "interface": {
+        "displayName": "ReMCP",
+        "shortDescription": "Use your paired computers through MCP.",
+        "longDescription": "ReMCP securely connects ChatGPT and Codex to computers you have explicitly paired. Inspect files and directories, search local content, and manage terminal sessions and processes through an authenticated remote MCP endpoint.",
+        "category": "Developer Tools",
+        "websiteURL": "https://remcp.delio24.com",
+        "privacyPolicyURL": "https://remcp.delio24.com/privacy",
+        "termsOfServiceURL": "https://remcp.delio24.com/terms",
+        "defaultPrompt": [
+          "Show my paired ReMCP computers and tell me which ones are online.",
+          "On my laptop, list the files in my project folder and summarize what is there without changing anything.",
+          "On my server, list the running processes and help me identify the one using the most memory."
+        ],
+        "brandColor": "#4C50D8",
+        "composerIcon": "./assets/remcp-icon.png",
+        "logo": "./assets/remcp-icon.png"
+      }
+    }
+  }
+}

package/public/authorize.html

@@ -8,7 +8,7 @@
   <title>Authorize · ReMCP</title>
   <meta name="description" content="Authorize an MCP client to access computers paired to your ReMCP account.">
   <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=b92ac4c9219a">
+  <link rel="stylesheet" href="/style.css?v=remcp-012">
   <meta property="og:site_name" content="ReMCP">
   <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
   <link rel="icon" href="/favicon.ico" sizes="any">
@@ -28,7 +28,7 @@
     <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
     <span translate="no">ReMCP</span>
   </a>
-  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a></nav>
+  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a></nav>
 </header>
 <main id="oauth-main" class="oauth-shell">
   <section class="oauth-card">
@@ -56,13 +56,13 @@
       <p class="eyebrow">Access request</p>
       <h2>Authorize ReMCP Access</h2>
       <p class="muted">This MCP client is requesting access to operate computers paired to this ReMCP account.</p>
-      <ul class="scope-list"><li><span>Control paired devices</span><strong>remcp:control</strong></li><li><span>Maintain the authorized connection</span><strong>offline_access</strong></li></ul>
+      <ul class="scope-list"><li><span>Identify your ReMCP account</span><strong>openid</strong></li><li><span>Share your verified email for workspace access rules</span><strong>email</strong></li><li><span>Control paired devices</span><strong>remcp:control</strong></li><li><span>Maintain the authorized connection</span><strong>offline_access</strong></li></ul>
       <p class="oauth-meta">Client: <span id="client-id"></span></p>
       <div class="oauth-actions"><button id="authorize" class="button" type="button">Authorize ReMCP Access</button><a class="button ghost" href="/">Not Now</a></div>
     </div>
     <p id="status" class="muted" aria-live="polite"></p>
     <p id="error" class="error" role="alert" aria-live="assertive"></p>
-    <p class="footer-mini"><a href="/privacy">Privacy</a> · <a href="/terms">Terms</a> · <a href="/security">Security</a></p>
+    <p class="footer-mini"><a href="/docs">Docs</a> · <a href="/docs#install">Install</a> · <a href="/docs#update">Update</a> · <a href="/security">Security</a> · <a href="/privacy">Privacy</a> · <a href="/terms">Terms</a></p>
   </section>
 </main>
 <script type="module" src="/oauth-app.js?v=36155fefb47e"></script>

package/public/copy.js

@@ -0,0 +1,49 @@
+function legacyCopy(text) {
+  const input = document.createElement('textarea');
+  input.value = text;
+  input.setAttribute('readonly', '');
+  input.style.position = 'fixed';
+  input.style.inset = '0 auto auto -9999px';
+  document.body.append(input);
+  input.select();
+  input.setSelectionRange(0, input.value.length);
+  const copied = document.execCommand('copy');
+  input.remove();
+  if (!copied) throw new Error('Clipboard write failed');
+}
+
+async function copyText(text) {
+  if (window.isSecureContext && navigator.clipboard?.writeText) {
+    try {
+      await navigator.clipboard.writeText(text);
+      return;
+    } catch {
+      legacyCopy(text);
+      return;
+    }
+  }
+  legacyCopy(text);
+}
+
+document.addEventListener('click', async event => {
+  const button = event.target.closest('[data-copy]');
+  if (!button) return;
+  const target = document.querySelector(button.dataset.copy);
+  if (!target) return;
+
+  const original = button.textContent;
+  const originalLabel = button.getAttribute('aria-label') || 'Copy command';
+  try {
+    await copyText(target.textContent.trim());
+    button.textContent = 'Copied';
+    button.setAttribute('aria-label', 'Copied to clipboard');
+  } catch {
+    button.textContent = 'Copy failed';
+    button.setAttribute('aria-label', 'Copy failed. Select the command manually.');
+  }
+
+  window.setTimeout(() => {
+    button.textContent = original;
+    button.setAttribute('aria-label', originalLabel);
+  }, 1400);
+});

package/public/docs.html

@@ -8,7 +8,7 @@
   <title>Docs · ReMCP</title>
   <meta name="description" content="Connect a computer to ReMCP and configure the hosted MCP endpoint.">
   <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=b92ac4c9219a">
+  <link rel="stylesheet" href="/style.css?v=remcp-012">
   <meta property="og:site_name" content="ReMCP">
   <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
   <link rel="icon" href="/favicon.ico" sizes="any">
@@ -28,20 +28,57 @@
     <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
     <span translate="no">ReMCP</span>
   </a>
-  <nav aria-label="Primary"><a href="/docs" aria-current="page">Docs</a><a href="/security">Security</a><a href="/support">Support</a></nav>
+  <nav aria-label="Primary"><a href="/docs" aria-current="page">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a></nav>
 </header>
 <main id="main" class="doc-shell">
-  <aside class="doc-nav" aria-label="Documentation"><a href="/docs" aria-current="page">Setup</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></aside>
+  <aside class="doc-nav" aria-label="Documentation"><a href="/docs" aria-current="page">Setup</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></aside>
   <article class="prose">
     <p class="eyebrow">Documentation</p>
-    <h1>Connect a computer to ReMCP.</h1>
-    <p>ReMCP is a remote MCP relay. The hosted server authenticates the MCP client and routes each tool call to a paired local agent.</p>
-<h2>1. Sign in</h2><p>Open <a href="/">the ReMCP workspace</a> and authenticate. Generate a one-time pairing command from the device section.</p>
-<h2>2. Pair the computer</h2><pre><code>npx @remcp/remcp connect --server https://remcp.delio24.com --code YOUR_CODE --install</code></pre><p>The code is exchanged for a device-specific credential that can later be revoked.</p>
-<h2>3. Add the MCP server</h2><pre><code>https://remcp.delio24.com/mcp</code></pre><p>Choose OAuth when your MCP client asks for authentication. ReMCP uses authorization code flow with PKCE and refresh tokens.</p>
-<h2>Connection model</h2><p>The device agent creates an outbound secure WebSocket connection to the relay. You do not need to expose a listener on the computer.</p>
-<div class="notice"><strong>Review mutating actions.</strong><p>Some tools can write files or run processes. Review the action requested by your MCP client before approving it.</p></div>
-<h2>Self-hosting</h2><p>The central ReMCP service runs in Docker with persistent account, device and OAuth metadata. Device agents run natively so host access does not require a privileged container.</p>
+    <h1>Install, pair and keep ReMCP updated.</h1>
+    <p>Use <code>npx</code> once to pair a computer. With <code>--install</code>, ReMCP creates a persistent global CLI and a user service, so normal operation no longer depends on the temporary npx cache.</p>
+
+    <h2 id="requirements">1. Requirements</h2>
+    <p>Install Node.js 22.5 or newer. The computer needs outbound HTTPS/WSS access to <code>remcp.delio24.com</code>; no inbound device port is required.</p>
+
+    <h2 id="pair">2. Get a pairing code</h2>
+    <p>Open <a href="/#connect">the ReMCP workspace</a>, sign in, and choose <strong>Generate Command</strong>. Pairing codes are short-lived and single-use.</p>
+
+    <h2 id="install">3. Install and pair</h2>
+    <div class="code-row"><pre><code id="docs-command-1">npx --yes @remcp/remcp@latest connect --server https://remcp.delio24.com --code YOUR_CODE --install</code></pre><button class="copy-button code-copy" type="button" data-copy="#docs-command-1" aria-label="Copy command" aria-live="polite">Copy</button></div>
+    <p>This stores a device-specific credential locally, installs the persistent <code>remcp</code> CLI, installs the compatible local device runtime, and starts the ReMCP user service.</p>
+
+    <h3>Verify the installation</h3>
+    <div class="code-row"><pre><code id="docs-command-2">remcp --version
+remcp status</code></pre><button class="copy-button code-copy" type="button" data-copy="#docs-command-2" aria-label="Copy command" aria-live="polite">Copy</button></div>
+    <p><code>status</code> shows the installed CLI version, paired device id, server URL and server health.</p>
+
+    <h2 id="mcp">4. Add the MCP endpoint</h2>
+    <div class="code-row"><pre><code id="docs-command-3">https://remcp.delio24.com/mcp</code></pre><button class="copy-button code-copy" type="button" data-copy="#docs-command-3" aria-label="Copy MCP endpoint" aria-live="polite">Copy</button></div>
+    <p>Choose OAuth when your MCP client asks for authentication. ReMCP uses authorization code flow with PKCE and refresh tokens.</p>
+
+    <h2 id="update">Update ReMCP</h2>
+    <div class="code-row"><pre><code id="docs-command-4">remcp update</code></pre><button class="copy-button code-copy" type="button" data-copy="#docs-command-4" aria-label="Copy command" aria-live="polite">Copy</button></div>
+    <p>The update command installs the latest published ReMCP CLI, refreshes the compatible local runtime, and restarts the user service when it is installed. Verify afterwards with <code>remcp --version</code> or <code>remcp status</code>.</p>
+
+    <h2 id="service">Service commands</h2>
+    <div class="code-row"><pre><code id="docs-command-5">remcp status
+remcp doctor
+remcp install
+remcp start</code></pre><button class="copy-button code-copy" type="button" data-copy="#docs-command-5" aria-label="Copy command" aria-live="polite">Copy</button></div>
+    <p><code>start</code> runs the agent in the foreground. <code>install</code> repairs or reinstalls the persistent user service for an already paired computer.</p>
+
+    <h2 id="uninstall">Uninstall</h2>
+    <div class="code-row"><pre><code id="docs-command-6">remcp uninstall</code></pre><button class="copy-button code-copy" type="button" data-copy="#docs-command-6" aria-label="Copy command" aria-live="polite">Copy</button></div>
+    <p>This stops and removes the background user service but keeps the CLI and local pairing configuration.</p>
+    <div class="code-row"><pre><code id="docs-command-7">remcp uninstall --purge</code></pre><button class="copy-button code-copy" type="button" data-copy="#docs-command-7" aria-label="Copy command" aria-live="polite">Copy</button></div>
+    <p><code>--purge</code> also removes the globally installed ReMCP packages. The local pairing configuration remains in <code>~/.config/remcp</code> so it is not silently destroyed.</p>
+
+    <h2 id="connection-model">Connection model</h2>
+    <p>The device agent creates an outbound secure WebSocket connection to the relay. You do not need to expose a listener on the computer.</p>
+    <div class="notice"><strong>Review mutating actions.</strong><p>Some tools can write files or run processes. Review the action requested by your MCP client before approving it.</p></div>
+
+    <h2 id="self-hosting">Self-hosting</h2>
+    <p>The central ReMCP service runs in Docker with persistent account, device and OAuth metadata. Device agents run natively so host access does not require a privileged container.</p>
   </article>
 </main>
 <footer class="site-footer">
@@ -49,10 +86,9 @@
     <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
     <span translate="no">ReMCP</span>
   </div>
-  <nav aria-label="Footer">
-    <a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a>
-  </nav>
+  <nav aria-label="Footer"><a href="/docs">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></nav>
   <p>Open-source remote MCP infrastructure.</p>
 </footer>
+<script type="module" src="/copy.js?v=remcp-012"></script>
 </body>
 </html>

package/public/index.html

@@ -8,7 +8,7 @@
   <title>ReMCP — Your computers over MCP</title>
   <meta name="description" content="Securely pair your own computers and use their files, terminal and processes through authenticated MCP clients.">
   <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=b92ac4c9219a">
+  <link rel="stylesheet" href="/style.css?v=remcp-012">
   <meta property="og:site_name" content="ReMCP">
   <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
   <link rel="icon" href="/favicon.ico" sizes="any">
@@ -28,7 +28,7 @@
     <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
     <span translate="no">ReMCP</span>
   </a>
-  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a></nav>
+  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a></nav>
 </header>
 <main id="main">
   <section class="hero">
@@ -56,6 +56,32 @@
     <div><span>03</span><h2>Explicit control</h2><p>Read, write and destructive tools declare their behavior so MCP clients can apply the right review flow.</p></div>
   </section>
 
+  <section id="install" class="quickstart">
+    <div class="section-heading">
+      <p class="eyebrow">Quick start</p>
+      <h2>One command to pair. One command to update.</h2>
+      <p>Use npx only for the first pairing. <code>--install</code> creates a persistent <code>remcp</code> CLI and background user service.</p>
+    </div>
+    <div class="quickstart-grid">
+      <article class="command-card">
+        <span>01</span><h3>Install &amp; pair</h3>
+        <div class="command-row"><code id="install-command">npx --yes @remcp/remcp@latest connect --server https://remcp.delio24.com --code YOUR_CODE --install</code><button class="copy-button" type="button" data-copy="#install-command">Copy</button></div>
+        <p>Generate <code>YOUR_CODE</code> in the workspace below.</p>
+      </article>
+      <article class="command-card">
+        <span>02</span><h3>Check</h3>
+        <div class="command-row"><code id="status-command">remcp status</code><button class="copy-button" type="button" data-copy="#status-command">Copy</button></div>
+        <p>Confirm the local CLI version, pairing and server health.</p>
+      </article>
+      <article id="update" class="command-card">
+        <span>03</span><h3>Update</h3>
+        <div class="command-row"><code id="update-command">remcp update</code><button class="copy-button" type="button" data-copy="#update-command">Copy</button></div>
+        <p>Updates the CLI and restarts the installed user service.</p>
+      </article>
+    </div>
+    <a class="text-link" href="/docs">Full installation and CLI guide <span aria-hidden="true">→</span></a>
+  </section>
+
   <section id="connect" class="workspace">
     <div class="section-heading">
       <p class="eyebrow">Workspace</p>
@@ -120,9 +146,7 @@
     <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
     <span translate="no">ReMCP</span>
   </div>
-  <nav aria-label="Footer">
-    <a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a>
-  </nav>
+  <nav aria-label="Footer"><a href="/docs">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></nav>
   <p>Open-source remote MCP infrastructure.</p>
 </footer>
 <script type="module" src="/app.js?v=14a728f07dd1"></script>

package/public/privacy.html

@@ -8,7 +8,7 @@
   <title>Privacy Policy · ReMCP</title>
   <meta name="description" content="How ReMCP processes account, device, OAuth and remote-computer data.">
   <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=b92ac4c9219a">
+  <link rel="stylesheet" href="/style.css?v=remcp-012">
   <meta property="og:site_name" content="ReMCP">
   <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
   <link rel="icon" href="/favicon.ico" sizes="any">
@@ -28,10 +28,10 @@
     <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
     <span translate="no">ReMCP</span>
   </a>
-  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a></nav>
+  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a></nav>
 </header>
 <main id="main" class="doc-shell">
-  <aside class="doc-nav" aria-label="Legal and policy navigation"><a href="/docs">Setup</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy" aria-current="page">Privacy</a><a href="/terms">Terms</a></aside>
+  <aside class="doc-nav" aria-label="Documentation"><a href="/docs">Setup</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy" aria-current="page">Privacy</a><a href="/terms">Terms</a></aside>
   <article class="prose">
     <p class="eyebrow">Privacy</p>
     <h1>Privacy Policy</h1>
@@ -41,7 +41,8 @@
 <h2>Device and security metadata</h2><p>ReMCP stores device identifiers, device names and basic platform metadata, one-way hashes of device credentials, pairing records, OAuth client metadata, and one-way hashes of refresh credentials. Pairing codes are short-lived and single-use. Raw device credentials are returned to the paired device and are not stored in plaintext by the service.</p>
 <h2>Files, commands and tool results</h2><p>When you use an MCP tool, its request and response may pass through the ReMCP relay. This can include filenames, file contents, command output and process information that you explicitly ask the paired computer to process. ReMCP does not intentionally retain those tool payloads as product data. Operational security logs may retain limited metadata such as timestamps, status codes and errors.</p>
 <h2>How data is used and shared</h2><p>Data is used to provide authentication, device pairing, OAuth authorization, request routing, abuse prevention, security and reliability. ReMCP does not sell personal information and does not serve advertising. Data may be processed by infrastructure and authentication providers only as needed to operate the service, including Firebase/Google for authentication.</p>
-<h2>Retention and control</h2><p>Device records remain until revoked or removed. OAuth grants remain until revoked, expired or rotated. Security and operational metadata may be retained for a limited period appropriate to troubleshooting and abuse prevention. You can revoke a paired device from the ReMCP workspace. Requests concerning account data or deletion can be made through the support channel identified on the Support page or in the app listing.</p>
+<h2>Retention and control</h2><p>Pairing codes expire after 10 minutes by default. MCP access tokens expire after 1 hour by default. Refresh credentials expire after 30 days by default and are rotated on use. Device records remain until you revoke or remove the device. ReMCP does not intentionally retain MCP tool request or response payloads as product data. Hosted Nginx access and error logs are rotated daily with 14 rotated copies. Application container logs are size-bounded to three files of at most 50 MB each rather than retained for a fixed number of days. These operational logs are used only for security, reliability, and troubleshooting and are not intended to contain authentication secrets or MCP tool payloads. You can revoke a paired device from the ReMCP workspace, and account-data or deletion requests can be made through the Support page.</p>
+<h2>Restricted data</h2><p>ReMCP is not intended to collect or process passwords, MFA or OTP codes, API or private keys, payment-card data, protected health information, or government identifiers through plugin tool calls. Users should keep those data out of ReMCP requests and use a safer local workflow when a requested file or command would expose them.</p>
 <h2>Security and international processing</h2><p>ReMCP uses TLS for network transport, hashes reusable credentials before storage, and scopes device access to the authenticated account. Internet services may process data in more than one country depending on infrastructure and authentication providers. See the <a href="/security">Security page</a> for the current security model.</p>
 <h2>Children</h2><p>ReMCP is a developer and systems-administration tool and is not directed to children under 13.</p>
 <h2>Changes</h2><p>Material changes to this policy will be published at this URL with an updated effective date.</p>
@@ -52,9 +53,7 @@
     <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
     <span translate="no">ReMCP</span>
   </div>
-  <nav aria-label="Footer">
-    <a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a>
-  </nav>
+  <nav aria-label="Footer"><a href="/docs">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></nav>
   <p>Open-source remote MCP infrastructure.</p>
 </footer>
 </body>

package/public/security.html

@@ -8,7 +8,7 @@
   <title>Security · ReMCP</title>
   <meta name="description" content="How ReMCP isolates accounts, devices, credentials and remote MCP tool access.">
   <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=b92ac4c9219a">
+  <link rel="stylesheet" href="/style.css?v=remcp-012">
   <meta property="og:site_name" content="ReMCP">
   <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
   <link rel="icon" href="/favicon.ico" sizes="any">
@@ -28,10 +28,10 @@
     <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
     <span translate="no">ReMCP</span>
   </a>
-  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/security" aria-current="page">Security</a><a href="/support">Support</a></nav>
+  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security" aria-current="page">Security</a><a href="/support">Support</a></nav>
 </header>
 <main id="main" class="doc-shell">
-  <aside class="doc-nav" aria-label="Documentation"><a href="/docs">Setup</a><a href="/security" aria-current="page">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></aside>
+  <aside class="doc-nav" aria-label="Documentation"><a href="/docs">Setup</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security" aria-current="page">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></aside>
   <article class="prose">
     <p class="eyebrow">Security</p>
     <h1>A narrow relay between the model and your machine.</h1>
@@ -50,9 +50,7 @@
     <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
     <span translate="no">ReMCP</span>
   </div>
-  <nav aria-label="Footer">
-    <a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a>
-  </nav>
+  <nav aria-label="Footer"><a href="/docs">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></nav>
   <p>Open-source remote MCP infrastructure.</p>
 </footer>
 </body>