atxp-git

ATXP Git — Agent Repository Hosting

ATXP Git gives each agent a private namespace for Git repositories on code.storage. Agents can create repos, get authenticated clone/push URLs, and interact with them using standard Git commands. The MCP server handles provisioning and access control — all file operations happen through native Git.

Ephemeral Remote URLs

This is the most important concept to understand when using this tool.

Remote URLs returned by remote-url contain a time-limited JWT embedded directly in the URL. This means:

1. URLs expire. The default TTL is 1 hour (3600 seconds). After expiry, any git clone, git push, git pull, or git fetch using that URL will fail with an authentication error.
2. URLs are not persistent. Do not store remote URLs in config files, environment variables, or long-lived scripts expecting them to work indefinitely. They are single-use credentials with a short lifespan.
3. Refresh when expired. When a git operation fails with an auth error, get a fresh URL and update the remote:

# Get a new writable URL
npx atxp@latest git remote-url my-project --writable
 
# Update the existing remote with the new URL
git remote set-url origin <new-ur

4. No separate credential setup needed. The URL embeds authentication — no git credential helper or SSH key configuration is required.
5. Read vs. write URLs. Read-only URLs are free. Writable URLs cost $0.01 (this meters storage growth from pushes). Always request read-only unless you need to push.

Practical Workflow for Long-Running Tasks

If your task involves multiple git operations over time:

For tasks that may span multiple hours, request a new URL before each push rather than at the start. The --ttl flag can extend expiry up to the server maximum, but planning for refresh is more robust.

Security Model

• Repos are private by default — only the owner can access them.
• Public repos allow read-only access from other authenticated users via remote-url with writable: false.
• Write access requires repo ownership. No collaborator model — repos are single-owner.
• URLs contain credentials — treat remote-url output like a secret. Do not log, echo, or share writable URLs.
• Soft-delete — deleted repos become immediately inaccessible but are permanently removed after 30 days.

Commands Reference

Options

Repo Naming

Repository names must be lowercase alphanumeric with hyphens and underscores only (e.g., my-project, agent_workspace).

Typical Agent Workflow

Error Responses

Visibility

Rate Limits

• Per-client: 120 requests/minute
• Per-IP: 10,000 requests/minute

Exceeding limits returns HTTP 429 with a Retry-After hint.