# RightSide

> RightSide is an agent-native deployment finishing layer. RightSide is running for approved internal and invited use. Public signup and external beta access are not open. Access is allowlisted; public signup is unavailable; beta projects and data are disposable and may be erased before public beta.

## Start
- [Quickstart](https://rightside.host/docs/quickstart): installation, authorization, registration, verification
- [Agent guide](https://rightside.host/docs/agents): completion contract and agent-safe defaults
- [Deploy](https://rightside.host/docs/deploy): application contract and deploy flow

## Reference
- [MCP tools](https://rightside.host/docs/mcp): bounded tools for Claude Code and Codex
- [CLI reference](https://rightside.host/docs/cli): common commands and machine-readable output
- [Troubleshooting](https://rightside.host/docs/troubleshooting): stage-based recovery
- [Security](https://rightside.host/docs/security): credential and authority boundaries
- [Limits](https://rightside.host/docs/limits): current support and non-goals

## Canonical setup
```sh
curl -fsSL https://get.rightside.host/install | sh
rightside doctor --json
```

## Recommended Claude Code / Codex prompt
```text
Install and set up RightSide on this machine. Verify that Node.js is 22.13 or newer and that this is Linux x64, WSL2 x64, or Apple silicon macOS. Run `curl -fsSL https://get.rightside.host/install | sh`, let me complete browser authorization, and never ask me to paste a token, device code, cookie, or secret into chat. Then run `rightside doctor --json`. If it passes, inspect this project and deploy it with RightSide. Do not claim success until RightSide returns an HTTPS URL and you verify that URL responds correctly.
```

The one-line installer trusts HTTPS delivery of the bootstrap. The bootstrap verifies the immutable release payload against its manifest-pinned checksum; its own bytes are not out-of-band pinned by the one-line form.

Do not claim deployment success until the returned HTTPS URL is fetched directly and produces the expected response. Database is disabled by default. Hosted-app authentication is off unless the project is created with auth: true (MCP) or --auth (CLI); without it the application is public.