# CDN.MN

> An image CDN an AI coding agent can set up and operate: least-privilege scoped
> access, a per-scope human-approval valve for anything sensitive, and a
> hand-rollable MCP surface. You never need the user's password and never get a
> permanent key.

## Start here

- [Authentication guide](https://app.cdn.mn/auth.md): the device-claim flow, scopes, and the
  autonomy/approval model — read this first.
- [Install skill](https://app.cdn.mn/SKILL.md): the step-by-step workflow to put a site
  behind the CDN using the live tools.
- [CLI & SDK](https://cdn.mn/docs/cli): the packaged tools — `npm i -g @cdnmn/cli`
  (or `npx @cdnmn/cli`) to detect, set up, rewrite, and verify from your
  project (it honors an AGENTS.md `do not auto-edit` rule); `@cdnmn/sdk` is the typed client
  the CLI is built on.

## Machine-callable surfaces (live)

- [MCP endpoint](https://app.cdn.mn/api/mcp): MCP 2025-06-18 over plain JSON (initialize,
  tools/list, tools/call). Bearer-authed; one request per POST, no streaming.
- [OpenAPI description](https://app.cdn.mn/openapi.json): the agent REST endpoints
  (register, poll for a token) as OpenAPI 3.1.
- [Protected-resource metadata](https://app.cdn.mn/.well-known/oauth-protected-resource)
- [Authorization-server metadata](https://app.cdn.mn/.well-known/oauth-authorization-server)

## Documentation (human-readable, for answering questions about the product)

- [Documentation index](https://cdn.mn/docs): how to point images at the CDN.
- [Quickstart](https://cdn.mn/docs/quickstart): sign-up to a live optimized image in
  five steps.
- [Your CDN hostname](https://cdn.mn/docs/generated-hostname): what the generated
  `cdn12345` hostname is and how to rewrite URLs to it.
- [URL parameters](https://cdn.mn/docs/url-parameters): the accepted query parameters —
  width, height, DPR, fit — and how format and quality are chosen for you.
- [Purging the cache](https://cdn.mn/docs/cache-purge): refresh a cached image after
  changing it at your origin.
- [Troubleshooting](https://cdn.mn/docs/troubleshooting): what each response means and
  how to resolve it.

## Product and policy

- [Pricing](https://cdn.mn/pricing): the plan catalog and what each unit means.
- [For AI agents](https://cdn.mn/agents): the agent-install path end to end.
- [Website analyzer](https://cdn.mn/check): measure a site's image weight.
- [Security](https://cdn.mn/security): origin protection, tenant isolation, takedown.
- [Legal index](https://cdn.mn/legal): terms, privacy, acceptable use, DPA, SLA, and
  the rest of the published policies.
- [Contact](https://cdn.mn/contact): support, security, abuse, and privacy routes.

## Rules

- Ask for the narrowest scopes that do the job; the user may grant a subset.
- Never log or echo the device_code or the access_token.
- Every state-changing action you take is written to the workspace's audit log;
  a revoked token stops working immediately.