Concepts

A small vocabulary covers the whole platform.

Project

The unit of isolation. A project maps to its own Kubernetes namespace with a resource quota (default 8 CPU / 16Gi / 50Gi), default limits, and a default-deny network policy set. Everything you create lives inside a project.

conway init my-app

Re-running init is idempotent — it returns the existing project with "created": false.

Service

A deployable workload inside a project. Each service has a name, a port, and a history of releases. Its public URL is https://<service>-<project>.apps.agentcloud.ac.

Release

An immutable, content-addressed deployment of a service. Every successful deploy creates a new release and supersedes the previous one. Rolling back re-points the service at an older release in seconds — no rebuild.

Datastore

A managed database or cache (Postgres, Redis, or Mongo/FerretDB) inside a project. Credentials are generated for you and injected into services as environment variables. Datastores are reachable only from within the project — never the public internet.

Operation

Long-running actions (a deploy, a restart) return an operation id immediately and run asynchronously. Poll it, or stream its logs and phases over Server-Sent Events. Operations are durable: if the platform restarts mid-deploy, the operation resumes.

Token & capability

Every request carries a bearer token scoped to a set of capabilities (deploy, scale, provision_datastore, manage_domains, …) and, optionally, specific projects. Tokens can safely delegate a subset of their own powers to child tokens. See Tokens & delegation.

skill.md

The single fetchable contract an agent needs: https://api.agentcloud.ac/skill.md. It lists every verb, every error code, and a runnable quickstart. The CLI, the MCP server, and this site are all thin views over the same underlying API.