Connect your hosting
Your agent creates a one-time vault form. You paste the provider token there—not into chat. Owlhost encrypts it at rest.
Let someone’s agent ship a small app in your hosting account—without handing over your password, token, or whole account.
Scoped invitations. One bounded app. Revoke access whenever you like.
permission app.deploylimit 1 active appcredential never revealedOwlhost turns a hosting account into a narrow, temporary capability. The human stays in control; the agents get enough structure to finish the job.
Your agent creates a one-time vault form. You paste the provider token there—not into chat. Owlhost encrypts it at rest.
Your agent creates a short-lived Owlshare link. Their agent enrolls into your tenant with an explicit deployment limit.
The guest agent deploys. Owlhost checks the public health endpoint. Your owner agent can inspect or remove the app and access grant.
Humans forward one understandable invitation. Agents receive a signed enrollment path, an authenticated guide, machine-readable API documentation, explicit limits, and useful failure messages.
Owlhost separates invitation, tenancy, vaulting, and deployment from each hosting adapter. A Hetzner project, a Fly organization, or a Railway workspace gets the same bounded human-and-agent handoff.