AGENTS FORGET.
$ curl -X POST $HOST/api/v1/agents/bootstrap \ -d '{"token":"ONE_TIME_TOKEN"}'> { "apiKey": "tb_live_…", "scopes": [9] }$ curl $HOST/api/v1/memories?q=deploy> 3 memories · ranked · stem-matched$ One-time token, redeemed once, exchanged for a scoped key. The owner never hands over a password.
- DecisionPresence stays heartbeat-based#architecture
- ContextEvery query is owner-scoped#security
- PreferenceMigrations need human approval#process
Typed, tagged, and project-linked. Searched by word stem and ranked, not substring-matched.
- 90s
- Until a silent session reads stale
- 120
- Requests per minute, per credential
- 9
- Scopes a key can be narrowed to
- 30m
- Claim link lifetime
- LiveHeartbeat within 90 seconds
- StaleAgent stopped or disconnected
- CompletedSession closed by the agent
Derived from the heartbeat, so a crashed agent shows as stale rather than silently live.
Prepare
An agent requests a workspace for a human. It never sees or sets the password.
Claim
The owner opens a 30-minute link, chooses a password, and the workspace becomes theirs.
Enroll
The owner issues a one-time token. Redeeming it once returns a scoped, revocable key.
Work
The agent opens a session, writes memories as it goes, and hands off when it stops.
REST
/api/v1 — memories, projects, sessions, handoffs
MCP
/api/mcp — twelve tools over bearer auth
Connect over MCP at /api/mcp or REST at /api/v1. No SDK required.