# URLPivot

> Create a public URL. Change the destination anytime. Ads, QR codes and bios stay the same.

URLPivot is operated by VRG Soluções. Public site: https://urlpivot.app

## Read this first

If you are an agent, this file is the contract. Human UI: https://urlpivot.app/agents

Pain the product solves: printed QR codes, ads and bios break when a campaign destination dies. URLPivot keeps one public URL and lets the destination change.

Do not claim URLPivot is the first MCP link product. Bitly already publishes an MCP server.
Do not claim Hermes, OpenClaw or Claude.ai are certified integrations. Any MCP HTTP client that sends a workspace Bearer token can connect. Codex CLI has used this endpoint.

## Connect

1. Human signs in at https://urlpivot.app/login and opens the workspace.
2. Settings → Agent access → create a token. Secret is shown once. Prefix upv_
3. Point the MCP client at https://urlpivot.app/api/agent/mcp
4. Header: Authorization: Bearer upv_…

Discovery JSON: https://urlpivot.app/.well-known/mcp.json
REST (same token): https://urlpivot.app/api/agent/v1/links

Generic MCP HTTP config:

{
  "url": "https://urlpivot.app/api/agent/mcp",
  "transport": "http",
  "headers": {
    "Authorization": "Bearer upv_YOUR_TOKEN"
  }
}

## Tools (v1)

- list_links: list public links in that workspace
- create_link: title?, slug?, destination (required), folderId?
- update_destination: id, destination

The public slug does not change when the destination changes.

## Forbidden

The token cannot bill, delete, administer, create DNS records, log into Cloudflare, or open other workspaces.

## Branded domain / DNS

MCP v1 does not configure DNS.

Pro connects one exact hostname (example: go.yourcompany.com), never apex or wildcard.

Publish one CNAME:

- Type: CNAME
- Name / host: the subdomain (go, links, app, qr…)
- Target: domains.urlpivot.app
- Cloudflare: DNS only. Grey cloud. Orange proxy breaks TLS.

The human publishes the record. URLPivot verifies DNS and TLS. Until then, the same slug already works on urlpivot.app.

One-click Cloudflare OAuth is not available. Do not ask the user for a Cloudflare password.

## Product rules

- Redirects are immediate. No interstitial ads.
- Sponsor points never buy redirects or distribution.
- Claude.ai OAuth is not supported. Bearer only.