cofounder.co
Cofounder is an agent-native operating system for running a company, spanning engineering, sales, marketing, finance, and operations. Its product includes a web app plus hosted agent interfaces for programmatic access.
Cofounder exposes three declared integration surfaces on cofounder.co subdomains: a hosted OAuth-protected MCP server at `api.superoptimizers.cofounder.co/mcp`, an Agent-First HTTP API at `api.superoptimizers.cofounder.co/cofounder-cli/v1`, and the `cofounder` CLI distributed via npm.
- Cofounder MCP serverdetected
- Cofounder Agent-First APIdiscovered
- Cofounder Agent-First APIdeclared
- cofounder CLIdeclared
$ cofounder auth loginAcquired by the CLI — running cofounder auth login opens the auth flow and stores the credential.
First sign in with cofounder auth login, then run cofounder auth token to print a bearer token, as declared in integrations.json. Use it as Authorization: Bearer <token> for the REST API or directly against the MCP endpoint, or export it as COFOUNDER_API_TOKEN for non-interactive CLI use.
Sign in with the CLI, then create a durable company API key with cofounder company api-keys create --name <name>, as declared in integrations.json. The returned cfk_… secret is then sent as Authorization: Bearer <key> to the REST API or exported as COFOUNDER_API_TOKEN for CLI automation. The owner declaration also notes it can be revoked with cofounder company api-keys revoke.
$ cofounder auth loginAcquired by the CLI — running cofounder auth login opens the auth flow and stores the credential.
After cofounder auth login, run cofounder auth token (or cofounder auth token --json) to print a Supabase access token for the signed-in user. Send it as Authorization: Bearer <token> to the REST API or the MCP endpoint, or export it as COFOUNDER_API_TOKEN for the CLI. It expires with the session — mint a company API key for durable automation.
With an admin CLI session, run cofounder company api-keys create --name <name> (POST /cofounder-cli/v1/company/api-keys). The cfk_… secret prints once. Send it as Authorization: Bearer <key> to the REST API, or export it as COFOUNDER_API_TOKEN for the CLI. Keys authenticate as the company that minted them and can be revoked with cofounder company api-keys revoke. Accepted by the REST API and CLI — the hosted MCP endpoint takes OAuth or session tokens instead.
conventions · 6/8 published
- integrations.json✓https://cofounder.co/.well-known/integrations.json
- llms.txt✓https://cofounder.co/llms.txt
- API catalog✓https://cofounder.co/.well-known/api-catalog
- OpenAPI document✗
/api/schema/, /openapi.json, /swagger.json, /api/openapi.json, or /v1/openapi.json - MCP server card✓https://api.superoptimizers.cofounder.co/mcp
- OAuth protected resource✓https://cofounder.co/.well-known/oauth-protected-resource
- Agent card✗
/.well-known/agent-card.json - Agent skills✓https://cofounder.co/.well-known/agent-skills/index.json
Publish these signals → /publishing