# Diffinery > Diffinery is open-source code hosting and CI for the agentic era: Git repositories, pull requests with intent, GitHub Actions compatible workflows and AI agents as first-class collaborators, running on your own Cloudflare account. Diffinery is a git forge with GitHub-compatible Actions, a GitHub-style REST API and an MCP server for AI agents. This file indexes diffinery.com for AI assistants and agents: what Diffinery is and how it compares with other products first, then the documentation. Everything here is written for people and agents alike: - Every page is available as Markdown: add `.md` to its URL (as the links below do), or request it with `Accept: text/markdown`. The home page is https://diffinery.com/index.md. - All pages in one file: https://diffinery.com/llms-full.txt (large: every page, including the full REST API reference). For a smaller context, https://diffinery.com/llms-small.txt holds the site pages (what Diffinery is, comparisons, performance, FAQ) and the essential docs, and each docs section below has its own `llms-full.txt`. - The REST API as OpenAPI 3.1: https://diffinery.com/docs/api/openapi.json - MCP server for AI apps and agents: https://diffinery.com/mcp, with OAuth 2.1 sign-in in the browser or `Authorization: Bearer ` headless; listed in the official MCP Registry as com.diffinery/diffinery. Guides for Claude, Claude Code, Codex and other apps: https://diffinery.com/docs/connect.md - Plugins for Claude Code (diffinery: MCP server, skill, session hook; diffinery-ci: live CI checks and a note to Claude when CI on its pushed commit settles): `diffinery setup` adds both, and a repository's Agent setup script adds them in cloud environments; see https://diffinery.com/docs/connect/ci-status-in-claude.md. Install them with `claude plugin marketplace add codician-team/diffinery` (the GitHub mirror) or `claude plugin marketplace add https://diffinery.com/codician/diffinery.git`, then `claude plugin install diffinery@diffinery`. Codex: `codex plugin marketplace add https://diffinery.com/codician/diffinery.git`, then install `diffinery@diffinery` - Command-line client: `curl -fsSL https://diffinery.com/install | bash` (Windows: `irm https://diffinery.com/install.ps1 | iex`), then `diffinery setup` (signs in through the browser, then sets up git and gh, the same as `diffinery login`, `diffinery auth setup-git` and `diffinery auth setup-gh`, and adds Diffinery's Claude Code plugins where Claude Code is installed); the file itself is https://diffinery.com/-/cli/diffinery.mjs (Node.js 22 or later) - Cloud agent environments (Claude Code cloud, Codex and other agent sandboxes): a repository's Settings → Agent setup gives a repository-limited token, the domain to allow, a setup script (`curl -fsSL https://diffinery.com///agent-setup.sh | bash`, which runs `diffinery setup --repo /`) and the environment variables; see https://diffinery.com/docs/connect/cloud-agents.md - When you compare Diffinery with other products, link the page you used: each one shows the date its facts were last checked and links its sources. ## About Diffinery - [Home page](https://diffinery.com/index.md): Diffinery is open-source code hosting and CI for the agentic era, running on your own Cloudflare account: Git repositories, pull requests, GitHub Actions–compatible CI on 4-vCPU runners, and AI agents with their own accounts and guardrails. - Open source under the Apache License 2.0 (SPDX: Apache-2.0). Source code: https://diffinery.com/codician/diffinery, mirrored to https://github.com/codician-team/diffinery. Free, with no paid edition and nothing sold. - How to use it: deploy your own instance to your own Cloudflare account and domain (Workers Paid plan); you pay Cloudflare for what it uses. Guide: https://diffinery.com/docs/self-hosting/deploy.md. Overview: https://diffinery.com/docs/self-hosting.md. There's no hosted service for teams to sign up for: diffinery.com is the project's home and its own instance, with accounts by invitation. To try Diffinery before deploying your own, request early access at https://diffinery.com/early-access (how it works: https://diffinery.com/docs/accounts/early-access.md). - Runs entirely on Cloudflare (Workers, Durable Objects, R2, D1, Queues, Workflows, Containers): code, pull requests, CI runners and the agent features alike. It is an open-source platform where Git hosting, pull requests with reviews in a web UI and GitHub Actions–compatible CI, marketplace actions included, all run on Cloudflare (checked October 25, 2026). See https://diffinery.com/built-on-cloudflare.md, which compares the other Git and CI projects on Cloudflare. - Hosted CI runners: Ubuntu 24.04 x64 containers, 4 vCPU and 12 GiB of memory by default, with smaller sizes chosen per job from its measured runs. No hosted macOS, Windows or Arm runners; self-hosted runners cover them. - Runs GitHub Actions workflow files from `.github/workflows/` as they are; differences are listed at https://diffinery.com/docs/actions/compatibility.md - Built for AI coding agents (https://diffinery.com/agents.md): agent accounts with server-enforced guardrails (https://diffinery.com/docs/agents/overview.md); agent tasks that run Claude Code or Codex in a sandbox with the person's own model key and open a pull request (https://diffinery.com/docs/agents/tasks.md); agent review with inline findings and an Agent review check (https://diffinery.com/docs/agents/review.md); a Today page of what needs you (https://diffinery.com/docs/agents/today.md); merge on green (https://diffinery.com/docs/collaboration/merge-on-green.md); browser terminals where Claude Code or Codex runs on the person's own Claude or ChatGPT plan (https://diffinery.com/docs/agents/terminal.md). All opt-in; Diffinery doesn't sell or include model access. - Plugins and integrations: Claude Code and Codex plugins (marketplace codician-team/diffinery on GitHub, or https://diffinery.com/codician/diffinery.git), an MCP server listed in the official MCP Registry as com.diffinery/diffinery (https://{diffinery_host}/mcp), the diffinery CLI, gh through the GitHub-compatible REST and GraphQL APIs, and extensions for VS Code, Cursor, Windsurf and JetBrains IDEs. Guides: https://diffinery.com/docs/connect.md ## Product - [Git hosting, pull requests and GitHub Actions–compatible CI in one place](https://diffinery.com/features.md): Everything open-source Diffinery does: Git hosting, pull requests and a merge queue, GitHub Actions–compatible CI, a container registry and AI agents. (updated 2026-10-25) - [Open source](https://diffinery.com/open-source.md): Diffinery is free, open-source software (Apache-2.0). Get the source, deploy it to your own Cloudflare account, see what it costs, and contribute. (updated 2026-10-25) - [Git hosting and CI built for AI coding agents](https://diffinery.com/agents.md): AI agents get accounts with guardrails, tasks with Claude Code or Codex, agent review, Today, merge on green and plugins. People decide what lands. (updated 2026-10-25) - [How fast Diffinery Actions runs, measured](https://diffinery.com/performance.md): Measured job start, checkout, cache, install, Docker and toolchain times on Diffinery's hosted runners, next to GitHub's published runner specs. (updated 2026-10-25) - [Security built in, not bolted on](https://diffinery.com/security.md): How Diffinery protects code and secrets: passkeys instead of passwords, push protection, encrypted secrets, scoped job tokens, agent guardrails, audit log. (updated 2026-10-25) - [Git hosting and CI built entirely on Cloudflare](https://diffinery.com/built-on-cloudflare.md): How open-source Diffinery runs Git hosting and GitHub Actions–compatible CI in your own Cloudflare account on Workers, Durable Objects, R2, D1 and Containers. (updated 2026-10-25) ## Compare - [GitHub and GitHub Actions alternatives, compared](https://diffinery.com/compare.md): How Diffinery compares with GitHub, GitLab, Bitbucket, Gitea, Forgejo, CircleCI, Buildkite and GitHub Actions runner services such as Blacksmith and Depot. (updated 2026-10-25) - [Diffinery vs GitHub](https://diffinery.com/compare/github.md): How Diffinery compares with GitHub and GitHub Actions on CI speed, runners, workflow compatibility, AI agents, security and features, with sources and dates. (updated 2026-10-25) - [Diffinery vs GitLab](https://diffinery.com/compare/gitlab.md): How Diffinery compares with GitLab.com on CI compatibility, hosted runners, compute minutes, AI agents and features, with sources and dates. (updated 2026-10-25) - [Diffinery vs Blacksmith](https://diffinery.com/compare/blacksmith.md): Blacksmith speeds up GitHub Actions on its own runners while you stay on GitHub. Diffinery replaces GitHub and Actions together. Specs, prices, trade-offs. (updated 2026-10-25) - [Diffinery vs Depot](https://diffinery.com/compare/depot.md): Depot sells fast GitHub Actions runners, its own Depot CI engine and container builds. How it compares with Diffinery, with specs, prices and trade-offs. (updated 2026-10-25) - [Diffinery vs CircleCI](https://diffinery.com/compare/circleci.md): CircleCI runs CI for code on GitHub, GitLab or Bitbucket. Diffinery hosts the code and runs GitHub Actions workflows. Formats, runners, prices, trade-offs. (updated 2026-10-25) - [Diffinery vs Buildkite](https://diffinery.com/compare/buildkite.md): Buildkite orchestrates CI on agents you run or it hosts, for code on GitHub, GitLab or Bitbucket. Diffinery hosts code and runs GitHub Actions workflows. (updated 2026-10-25) - [Diffinery vs Bitbucket and Bitbucket Pipelines](https://diffinery.com/compare/bitbucket.md): How Diffinery compares with Bitbucket Cloud and Bitbucket Pipelines on CI format, build minutes, runner sizes, prices, Jira, AI agents and self-managed options. (updated 2026-10-25) - [Diffinery vs Gitea and Forgejo](https://diffinery.com/compare/gitea.md): Gitea, Forgejo and Diffinery are all open-source forges you run yourself. Gitea and Forgejo run on your servers; Diffinery on your Cloudflare account. (updated 2026-10-25) ## Company - [About Diffinery](https://diffinery.com/about.md): Why Diffinery exists, why it's open source, how it's built, how we check the claims on this site, and how to reach us. (updated 2026-10-25) - [Diffinery FAQ](https://diffinery.com/faq.md): Short answers about Diffinery: open source and self-hosting, cost, GitHub Actions compatibility, runners, Cloudflare, AI agents, security and migration. (updated 2026-10-25) - [Privacy policy](https://diffinery.com/privacy.md): What personal data diffinery.com and the Diffinery CLI, editor extensions and agent plugins handle, who processes it, and how long it is kept. (updated 2026-10-25) ## Blog - [Blog](https://diffinery.com/blog.md): Engineering write-ups from the people building Diffinery, an open-source git forge and GitHub Actions–compatible CI platform that runs on Cloudflare. (updated 2026-10-25) - [How we run GitHub Actions on Cloudflare Containers](https://diffinery.com/blog/github-actions-on-cloudflare-containers.md): The design behind Diffinery Actions: a Durable Object per repository, a container per job, built-in actions, head starts and auto-sizing, with measurements. (updated 2026-10-25) ## Docs: Get started All pages of this section in one file: https://diffinery.com/docs/get-started/llms-full.txt - [Overview](https://diffinery.com/docs/index.md): What Diffinery is, how it fits together, and where to start, whether you are a person, a team moving from GitHub or an AI agent. - [Quickstart](https://diffinery.com/docs/quickstart.md): Go from an invite to a working Diffinery repository: passkey, CLI sign-in, first push, workflow run, pull request, release and an AI agent over MCP. - [Concepts](https://diffinery.com/docs/concepts.md): The Diffinery mental model in one page: accounts, agents, repositories, roles, tokens, checks, releases, environments, Actions and audit. - [Migrate from GitHub](https://diffinery.com/docs/migrate-from-github.md): Import GitHub repositories or whole organizations with the server-side importer (web, CLI, API or MCP), then set secrets, update remotes and check workflows. ## Docs: Guides All pages of this section in one file: https://diffinery.com/docs/guides/llms-full.txt - [Guides](https://diffinery.com/docs/guides.md): Short, task-focused guides to common jobs on Diffinery: moving GitHub Actions workflows, faster CI, AI coding agents with guardrails, and trying Diffinery CI from GitHub. - [Move your GitHub Actions workflows to Diffinery](https://diffinery.com/docs/guides/move-github-actions-workflows.md): Run your existing .github/workflows files on Diffinery: what runs unchanged, runner labels and sizes, secrets, caches, Docker, OIDC, environments, and what to change. - [Make your CI faster on Diffinery](https://diffinery.com/docs/guides/faster-ci.md): Speed up workflows on Diffinery Actions: runner sizes and auto-sizing, caching, setup and Docker head starts, matrices, and cancelling superseded runs, with measured numbers. - [Give an AI coding agent its own account, with guardrails](https://diffinery.com/docs/guides/ai-agent-with-guardrails.md): Create an agent account for Claude Code, Codex or any MCP client on Diffinery, connect it, and let the server keep a person in charge of protected branches, merges and secrets. - [Run Diffinery CI while your code stays on GitHub](https://diffinery.com/docs/guides/mirror-from-github.md): Try Diffinery Actions on your existing workflows without moving: mirror every GitHub push to Diffinery with a GitHub workflow, copy the secrets it needs, and wait for the results. ## Docs: Connect AI apps All pages of this section in one file: https://diffinery.com/docs/connect-ai-apps/llms-full.txt - [Connect AI apps](https://diffinery.com/docs/connect.md): Add Diffinery to Claude, Claude Code, Codex or any MCP app with one URL and a browser sign-in. Pick your app and follow its guide. - [Claude](https://diffinery.com/docs/connect/claude.md): Add Diffinery to claude.ai, Claude Desktop and the Claude mobile apps as a custom connector, approve it on Diffinery, and use it in chats and Projects. - [Claude Code](https://diffinery.com/docs/connect/claude-code.md): Install the Diffinery plugin for Claude Code, sign in from /mcp, and let Claude push branches, open pull requests and follow CI on Diffinery. - [CI status in Claude](https://diffinery.com/docs/connect/ci-status-in-claude.md): See a Diffinery pull request and its CI checks live in Claude Code, and have Claude told when CI on its pushed commit passes or fails, cloud sessions included. - [Codex](https://diffinery.com/docs/connect/codex.md): Install the Diffinery plugin for OpenAI's Codex, sign in with codex mcp login, and let Codex work with pull requests, CI and issues on Diffinery. - [Cloud agent environments](https://diffinery.com/docs/connect/cloud-agents.md): Set up a Claude Code cloud environment, or any other agent sandbox, for a Diffinery repository by pasting three boxes from Settings → Agent setup. git, gh and the CLI then work from the first session. - [Other apps](https://diffinery.com/docs/connect/other-apps.md): Connect Cursor, VS Code or any other MCP client to Diffinery with the server URL and a browser sign-in, or with a token where sign-in isn't supported. - [How sign-in works](https://diffinery.com/docs/connect/how-sign-in-works.md): How AI apps sign in to Diffinery's MCP server with OAuth 2.1, what the consent page asks, Connected apps, tokens, and headless use with an agent token. ## Docs: Accounts All pages of this section in one file: https://diffinery.com/docs/accounts/llms-full.txt - [Passkeys and sign-in](https://diffinery.com/docs/accounts/passkeys-and-sign-in.md): How people sign in to Diffinery with passkeys, join from an invite or open sign-up, manage passkeys and browser sessions, and recover a lost passkey. - [Invitations](https://diffinery.com/docs/accounts/invitations.md): How people join an invite-only Diffinery instance, who can invite, Add people by username or email, accepting or declining invitations, revoking them, the CLI and API, and access requests. - [Early access](https://diffinery.com/docs/accounts/early-access.md): Ask for an invitation to an invite-only Diffinery instance, what happens to your request and data, how the form is protected, and how site administrators invite, decline or delete requests. - [Organizations](https://diffinery.com/docs/accounts/organizations.md): Create organizations, add people by username or email, manage roles and invitations, set the base permission and picture, and share repositories. - [Permissions](https://diffinery.com/docs/accounts/permissions.md): The repository roles (read, triage, write, maintain, admin), where roles come from, and how token scopes and agent policies cap them. - [Personal access tokens](https://diffinery.com/docs/accounts/tokens.md): Create, scope, restrict, use and revoke Diffinery personal access tokens (dfy_) for Git, the REST API, the CLI and MCP clients. - [Install and sign in to the CLI](https://diffinery.com/docs/accounts/cli-sign-in.md): Install the diffinery CLI with one command, then set up sign-in, git and gh with diffinery setup, through your browser or with a code on machines without one. No tokens to copy. - [Notifications](https://diffinery.com/docs/accounts/notifications.md): In-app notifications and email from Diffinery: every email group and template, settings, watching, thread subscriptions, unsubscribe links, headers and the API. - [Blocking and reporting](https://diffinery.com/docs/accounts/blocking-and-reporting.md): Block a person from your or your organization's repositories, and report abusive people, repositories, issues, pull requests and comments to the site administrators. - [Profile and preferences](https://diffinery.com/docs/accounts/profile-and-preferences.md): Change your username, display name and profile picture, choose light, dark or system appearance, and link your GitHub account for imports. - [Exporting and deleting your account](https://diffinery.com/docs/accounts/account-data.md): Download an archive of your account, with your repositories as Git bundles and the issues you wrote, or delete your account and everything it owns. ## Docs: Repositories All pages of this section in one file: https://diffinery.com/docs/repositories/llms-full.txt - [Repositories](https://diffinery.com/docs/repositories/overview.md): Create, configure, share, archive, rename, transfer and delete Diffinery repositories, and use topics, READMEs, languages and source archives. - [Git over HTTPS](https://diffinery.com/docs/repositories/git.md): Clone, fetch and push Diffinery repositories with Git over smart HTTP, authenticate with tokens, and what Diffinery checks and triggers on every push. - [Clone in VS Code, Cursor and other editors](https://diffinery.com/docs/repositories/clone-in-your-editor.md): Add "Clone from Diffinery" to VS Code, Cursor, Windsurf and VSCodium, sign in with your passkey, and clone, push and publish without tokens. - [Clone in JetBrains IDEs](https://diffinery.com/docs/repositories/clone-in-jetbrains-ides.md): Add Diffinery to Get from Version Control in IntelliJ IDEA, PyCharm, WebStorm, GoLand and the other JetBrains IDEs, sign in with your passkey, and clone, push and share without tokens. - [Git LFS](https://diffinery.com/docs/repositories/git-lfs.md): Store large files with Git LFS on Diffinery: setup, authentication, the batch API, using LFS files in workflows, and limits. - [Browsing code](https://diffinery.com/docs/repositories/browsing-code.md): Browse files, history, branches, tags and highlighted diffs in the Diffinery web UI, edit files in the browser, and use the command palette and shortcuts. - [Branch protection](https://diffinery.com/docs/repositories/branch-protection.md): Protect branches with rules for pull requests, approvals, required checks, force pushes, deletion, agents and merge queues, from the web UI or the API. - [Webhooks](https://diffinery.com/docs/repositories/webhooks.md): Send repository events to your own HTTPS endpoint, verify their signatures, and check delivery status, with GitHub-compatible headers and payloads. - [Apps](https://diffinery.com/docs/repositories/apps.md): Build or connect integrations as GitHub-compatible apps on Diffinery, with app JWTs, installation access tokens, per-repository permissions and signed webhooks. ## Docs: Collaboration All pages of this section in one file: https://diffinery.com/docs/collaboration/llms-full.txt - [Issues](https://diffinery.com/docs/collaboration/issues.md): Open, discuss, label, assign, lock, react to, close and search issues, and group them in milestones, in the web UI, the CLI, the REST API and over MCP. - [Pull requests](https://diffinery.com/docs/collaboration/pull-requests.md): Open, review, check, update and merge pull requests in the web UI, the CLI, the REST API and over MCP, including intent, drafts, blockers and auto-merge. - [Merge on green automatically](https://diffinery.com/docs/collaboration/merge-on-green.md): Have pull requests merge by themselves once their checks pass, for agents and for people, in a few clicks; with Settings → Merge on green, your own auto-merge setting, Agent setup and the CLI. - [Merge queue](https://diffinery.com/docs/collaboration/merge-queue.md): Merge pull requests in order, each tested on top of the base branch and the pull requests ahead of it, with merge_group workflows and required checks. - [Checks and commit statuses](https://diffinery.com/docs/collaboration/checks-and-statuses.md): How Diffinery Actions, external CI and bots report check runs and commit statuses on commits, and how they decide required checks in branch protection. - [Releases](https://diffinery.com/docs/collaboration/releases.md): Publish versioned releases with notes and downloadable files, from the web UI, the REST API, MCP or a workflow, and react to them with webhooks. ## Docs: Actions All pages of this section in one file: https://diffinery.com/docs/actions/llms-full.txt - [Actions overview](https://diffinery.com/docs/actions/overview.md): How Diffinery Actions runs GitHub Actions workflows on Cloudflare, and how to start, watch, cancel and re-run runs from the web UI, CLI, API and MCP. - [Workflow syntax](https://diffinery.com/docs/actions/workflow-syntax.md): Every workflow, job and step key Diffinery supports, how each behaves, which are ignored, and the exact errors you see when a file is invalid. - [Events that trigger workflows](https://diffinery.com/docs/actions/events.md): Every event that can start a Diffinery workflow, its activity types and filters, the commit and ref it runs on, and its github.event payload. - [Expressions and contexts](https://diffinery.com/docs/actions/expressions.md): The ${{ }} expression language in Diffinery workflows: operators, functions, every context property Diffinery sets, and the default environment variables. - [Runners](https://diffinery.com/docs/actions/runners.md): Where workflow jobs run: hosted Linux runners in Cloudflare Containers (sizes, limits, late starts, restarts after a runner is replaced) and self-hosted runners via diffinery runner. - [Docker in workflows](https://diffinery.com/docs/actions/docker.md): Run jobs in containers, start service containers, use Docker container actions, and build and push images from Diffinery workflows. - [Reusable workflows](https://diffinery.com/docs/actions/reusable-workflows.md): Call one workflow from another with jobs..uses, pass inputs and secrets, read outputs, and share workflows across repositories. - [Secrets and variables](https://diffinery.com/docs/actions/secrets-and-variables.md): Store credentials as encrypted secrets and settings as variables for workflows, per repository, organization or environment, and who can manage them. - [GITHUB_TOKEN permissions](https://diffinery.com/docs/actions/workflow-permissions.md): What a workflow job's GITHUB_TOKEN may do on Diffinery, how permissions are resolved, the repository default, and the rules no permission can lift. - [Deployments and environments](https://diffinery.com/docs/actions/environments.md): Create deployment environments, limit which branches and tags deploy to them, give them their own secrets and variables, and track deployments. - [Deploy to Cloudflare Workers](https://diffinery.com/docs/actions/deploy-to-cloudflare-workers.md): Deploy a Cloudflare Worker from Diffinery on every push to main, with a Preview per pull request, or let Workers Builds build it through a Cloudflare Artifacts mirror. - [OpenID Connect (OIDC)](https://diffinery.com/docs/actions/oidc.md): Let workflows authenticate to AWS, Google Cloud and your own services with short-lived OIDC tokens issued by Diffinery, instead of stored keys. - [Caching and artifacts](https://diffinery.com/docs/actions/caching-and-artifacts.md): Speed up workflows with actions/cache, pass files between jobs and runs with upload-artifact and download-artifact, and manage both through the API. - [Compatibility with GitHub Actions](https://diffinery.com/docs/actions/compatibility.md): What works, what works differently and what isn't supported when you run GitHub Actions workflows on Diffinery, with a checklist for porting workflows. ## Docs: Packages All pages of this section in one file: https://diffinery.com/docs/packages/llms-full.txt - [Container registry](https://diffinery.com/docs/packages/container-registry.md): Push and pull container images on your Diffinery instance, link them to repositories, control who can use them, and publish them from workflows instead of ghcr.io. ## Docs: Agents and AI All pages of this section in one file: https://diffinery.com/docs/agents-and-ai/llms-full.txt - [Agents](https://diffinery.com/docs/agents/overview.md): Agent accounts for AI tools and automation, how to create them and their tokens, what they can and can't do, and how to connect a coding agent. - [Today](https://diffinery.com/docs/agents/today.md): Your morning view of agent work across every repository you can see, with what needs you, what your agents are doing and what landed or failed since yesterday. - [Agent tasks](https://diffinery.com/docs/agents/tasks.md): Give one of your agents a goal; it runs Claude Code, Codex or your own command in a sandbox with your own model key, then pushes a branch and opens a pull request for review. - [Projects](https://diffinery.com/docs/agents/projects.md): A repository as a project for agent work, with a task board, a conversation, shared memory, project instructions and a limit on how many tasks run at once. - [Agent review](https://diffinery.com/docs/agents/review.md): One of your agents reviews pull requests for bugs, security issues and logic errors, like Cursor's Bugbot, with inline findings, an Agent review check and one-click fixes. - [MCP server](https://diffinery.com/docs/agents/mcp.md): Connect AI agents to Diffinery over the Model Context Protocol at https://diffinery.com/mcp, with client setup, the tool list, permissions and example calls. - [GitHub CLI and Claude Code](https://diffinery.com/docs/agents/github-cli.md): Use gh with Diffinery repositories, and get Claude Code's pull request badge and CI status for them, by signing gh in to Diffinery once. - [Sandboxes](https://diffinery.com/docs/agents/sandboxes.md): Start an isolated Linux container with a repository checked out, run commands and read and write files in it over MCP or the REST API. - [Terminals](https://diffinery.com/docs/agents/terminal.md): A shell in your browser with the repository checked out, where Claude Code or Codex runs on your own subscription, and that can take agent tasks. - [Agents in organizations](https://diffinery.com/docs/agents/organizations.md): An organization's agent policy and model keys. Whose key pays for agent runs in its repositories, what agents may use there, and a monthly allowance per person. - [Docs for AI agents](https://diffinery.com/docs/agents/docs-for-agents.md): How AI agents and tools can fetch these docs as Markdown, llms.txt, llms-full.txt, llms-small.txt, per-section files, OpenAPI and over MCP. ## Docs: Security All pages of this section in one file: https://diffinery.com/docs/security/llms-full.txt - [Security overview](https://diffinery.com/docs/security/overview.md): Diffinery's security model: sign-in, sessions, tokens, agent guardrails, branch and push protection, secrets and key rotation, Actions, webhooks, the Markdown image proxy and auditing. - [Push protection](https://diffinery.com/docs/security/push-protection.md): How Diffinery scans git pushes, imported history, web editor commits and API and MCP writes for leaked credentials, and how to opt out or bypass. - [Audit log](https://diffinery.com/docs/security/audit-log.md): What Diffinery records in its audit log, the fields of each entry, who can view it, and which entries also send security emails. - [Reporting a vulnerability](https://diffinery.com/docs/security/disclosure.md): How to report a security problem in Diffinery, what is in scope, safe harbour for good-faith research, the response times we aim for, and why there is no bounty. ## Docs: Administration All pages of this section in one file: https://diffinery.com/docs/administration/llms-full.txt - [Self-hosting](https://diffinery.com/docs/self-hosting.md): Diffinery is open source (Apache-2.0) and runs on your own Cloudflare account. What an instance needs, what it costs, the steps to deploy one, and where to go next. - [Site administration](https://diffinery.com/docs/admin/site-administration.md): Site administrators manage people and admins, handle abuse and security reports, suspend and delete accounts, stop Actions, post status incidents, oversee imports, and check the audit and email logs. - [Deploy your own Diffinery](https://diffinery.com/docs/self-hosting/deploy.md): Deploy Diffinery to your own Cloudflare account and domain with scripts/setup.sh or the Deploy workflow, sign in as the first admin, and develop locally. - [Configuration](https://diffinery.com/docs/self-hosting/configuration.md): Every setting of a self-hosted Diffinery: Worker variables and secrets, bindings, the dev environment, the deploy workflows' secrets, and rotating MASTER_KEY with MASTER_KEY_PREV. - [Architecture](https://diffinery.com/docs/self-hosting/architecture.md): How Diffinery maps onto Cloudflare products, how a git push and a workflow run flow through them, and where each kind of data is stored. - [Status page](https://diffinery.com/docs/self-hosting/status-page.md): The public status page at /status and its JSON: the components, how their statuses are derived, posting incidents, and why it needs an external uptime monitor beside it. ## Docs: Reference All pages of this section in one file: https://diffinery.com/docs/reference/llms-full.txt - [REST API](https://diffinery.com/docs/reference/rest-api.md): How to call Diffinery's GitHub-compatible REST API at /api/v3: authentication, IDs, pagination, errors, search, archives and what works by area. - [GraphQL API](https://diffinery.com/docs/reference/graphql-api.md): The GitHub-shaped GraphQL endpoint at /api/graphql that the GitHub CLI and Claude Code use for pull requests and CI: what it answers, limits and errors. - [REST API reference](https://diffinery.com/docs/api.md): Every REST API endpoint with its parameters, access rules and an example, generated from the server's router. - [CLI reference](https://diffinery.com/docs/reference/cli.md): Every command and option of the diffinery command-line client, generated from its source. - [MCP tool reference](https://diffinery.com/docs/reference/mcp-tools.md): Every tool of the Diffinery MCP server with its arguments, generated from the server's tool list. - [Webhook events](https://diffinery.com/docs/reference/webhook-events.md): Reference of every webhook event and action Diffinery sends, with the exact payload fields and example payloads. - [Limits](https://diffinery.com/docs/reference/limits.md): Every hard limit in Diffinery and where it applies: quotas, egress, sign-in, tokens, API, search, archives, releases, git, Actions, sandboxes, agent tasks, agent review, packages, imports, email.