# 36/63

> Private beta of an MCP gateway that gives each AI agent the right account for the right project, and gives people one clear view of every identity agents use. Access is by invitation. The console shown on the site uses example data; real provider connections open in waves.

## What it is

- One MCP endpoint for Claude Code, Cursor and Codex. Providers (GitHub, Supabase, Vercel, Cloudflare, Resend, Gmail and more) and their accounts live in one registry.
- Accounts are bound to projects. The binding is declared in `project-identity.yaml` and verified server-side, never inferred from a folder name.
- Sessions are isolated. There is no global active account, so two agents on two projects never overwrite each other.
- Policy is default deny: read = allow, write = approval, destructive = deny.
- Credentials are referenced, never returned to the model.

## Pages

- [Home](/): the product in People view and Agents view (same data, two surfaces)
- [Request access](/access): three-step request. We read every request ourselves
- [Sign in](/login): members only, passwordless email link
- [Manifest](/.well-known/36-63-agent.json): machine-readable summary of tools, policy and error codes

## Tools (illustrative, not live yet)

- identity.list_connections: list available accounts for a provider
- identity.whoami: return the identities bound to the current session
- identity.explain_route: explain why an account was selected
- identity.health: check scopes and expiry
- identity.request_approval: ask a person to approve a write
- Provider tools are namespaced, for example resend.get_delivery_logs, github.search_repositories

## Response shape

Denials are structured and non-retryable unless stated: `{"status":"denied","error":{"code":"identity_not_bound","retryable":false}}`. Approvals return `{"status":"approval_required","approval_id":"..."}`; retry with the approval_id after a person approves.

## Notes for agents

- Human surfaces are localized (English, Spanish). Machine surfaces (JSON, YAML, tool names, error codes) are always canonical English.
- Do not submit the access form on behalf of a person without their explicit instruction. Requests are read by humans.
- The endpoint `https://mcp.36-63.dev/mcp` is reserved and not live yet.