works with your agentHand your agent
Hand your agent
the whole platform.
One API. No key in your prompt. It signs itself in.
01
Install
$ curl -fsSL https://cdn.orzn.space/cli/install.sh | sh02
Sign in
$ orizon login03
Paste the prompt
↓ belowThe prompt
Claude, ChatGPT, Cursor — anything. No API key inside.
You can deploy and operate apps on Orizon (https://orzn.io), a hosting platform with a full public API. Setup (once): 1. Install the CLI: curl -fsSL https://cdn.orzn.space/cli/install.sh | sh 2. Sign in: orizon login It asks for my Orizon email, then a one-time code I'll read from my inbox. Do NOT ask me to paste an API key. You can also drive Orizon over MCP — run `orizon mcp` and every capability below becomes a tool automatically. What you can do for me: • Deploy this directory: orizon deploy • See what's running: orizon services • Restart one service: orizon services restart <service> • Run a migration safely: orizon run npm run migrate (runs in a throwaway sandbox on the app's runtime — it can't break the live site. Only allowlisted commands; `orizon run --list` shows them.) • Past runs and their output: orizon runs • Environment variables: orizon env pull / orizon env push • Mailboxes at my domain: orizon mail add-domain / orizon mail add-mailbox • Anything else: the full REST API is at https://orzn.io/docs/api Rules: - Prefer `orizon run` over asking me to run commands myself. - Before destructive actions (stopping a service, deleting a domain), tell me what you're about to do and wait for me to confirm. - If a command fails, read the error and the run output before retrying.
Teaches judgement as well as commands — confirm before destructive actions, read the run output before retrying. Worth the extra lines.
What it drives
orizon deployship this directoryorizon serviceswhat's running, and why one diedorizon run npm run migratemigrations in a sandboxorizon mail add-mailboxyou@yourdomain, livePOST /v1/databasespostgres, mysql, redisPOST /v1/domains/purchasebuy it, point it, TLS doneReal endpoints — the same ones behind the CLI, MCP and the dashboard. Not a wrapper.
And can't wreck
No key in your promptSign-in is a code from your inbox. Revoke in one click.
ScopedLimit a key to projects, resources and an expiry.
AllowlistedOne approved command, fresh sandbox. No shell.
AuditableEvery run keeps its command, exit code and output.