Sign-in is OAuth 2.1 in your own browser, with a one-time email code · your agent never sees a password or API key, and config files only ever contain the server URL. Access tokens expire in an hour, refresh tokens rotate, and reuse is detected and revoked.

What can my agent actually see?

Only what you approve. At sign-in you see the exact permission scopes the agent is asking for, and every call it ever makes is checked against them, rate-limited, and audited. Nothing is open-ended.

What if I don't have Kept yet?

The sign-in step creates your account · enter your email, type the 6-digit code, done. Nothing else to install, no card required.

Does it cost anything?

No. Connecting an agent is part of Kept, and Kept is free to start. The full system will be a fair annual subscription · founding members lock in founder pricing.

How do I disconnect an agent?

Kept → Settings → AI Agents → Connected agents → Disconnect. Revocation is immediate and cascades to every token that agent holds · there's nothing to hunt down in config files.

Claude Code, Claude on claude.ai and Claude Desktop, Codex, Cursor, GitHub Copilot, Windsurf, OpenCode · and any other MCP-capable client pointed at https://mcp.kept.do/mcp.

For AI agents · MCP · live now

Ready when your agent is.

One sentence connects Kept · your notes, tasks, and calendar · to any MCP-capable agent. Sign-in happens in your browser. Your agent never sees a password.

Fetch https://kept.do/agent-setup/prompt.md and follow its instructions to connect Kept (my notes, tasks, and calendar) to this agent over MCP.

OAuth 2.1 + PKCEScoped & revocableDisconnect any time

How it works

Three calm steps

01Copy the prompt

One sentence, on your clipboard. It points your agent at the published setup instructions · nothing hidden, nothing to install first.

02Paste it to your agent

Your agent fetches the instructions and walks the setup with you · a single MCP server entry, shown to you before it's added.

03Sign in with your email

A browser opens; you type a 6-digit code from your inbox. Your agent never sees a password · and if you're new to Kept, that same step creates your account.

Or set it up by hand

Your agent, your way

Every path below is the same three lines your agent would follow · inspectable, standard config. The server is https://mcp.kept.do/mcp for all of them.

Claude Code

claude plugin marketplace add keptdo/skills
claude plugin install kept@kept

Inside a session, that's /plugin marketplace add keptdo/skills and /plugin install kept@kept, then /reload-plugins. The plugin adds the Kept MCP server and a skill that teaches the agent Kept's fast-capture and daily-planning idioms.

Claude (claude.ai or Claude Desktop)

https://mcp.kept.do/mcp

Settings → Connectors → Add custom connector → paste the server URL.

Codex

codex mcp add kept --url https://mcp.kept.do/mcp
codex mcp login kept

Cursor

In .cursor/mcp.json (or global ~/.cursor/mcp.json), add under "mcpServers":

"kept": { "url": "https://mcp.kept.do/mcp" }

GitHub Copilot (VS Code)

In .vscode/mcp.json, add under "servers":

"kept": { "type": "http", "url": "https://mcp.kept.do/mcp" }

Windsurf

In ~/.codeium/windsurf/mcp_config.json (note serverUrl), add under "mcpServers":

"kept": { "serverUrl": "https://mcp.kept.do/mcp" }

OpenCode

In ~/.config/opencode/opencode.jsonc, add under "mcp":

"kept": { "type": "remote", "url": "https://mcp.kept.do/mcp", "enabled": true, "oauth": {} }

Any other agent

https://mcp.kept.do/mcp

Point any MCP-capable client at the server URL: streamable HTTP, OAuth 2.1 with dynamic client registration. No pre-shared credentials.

What your agent can do

About fifty tools, eight quiet families

Everything the Kept apps can do, your agent can do on your behalf · within the scopes you approve, with every call audited.

Capture

Say it once, it's filed · thoughts, errands, ideas land where they belong.

Tasks

Create, complete, and reshape work · with subtasks and comments.

Notes

Keyword and semantic search, plus the knowledge graph · people, projects, decisions, threads.

Calendar

Read the week, move events, send invites, answer RSVPs.

Goals

Check progress and log the next move on what matters most.

Habits

Mark the streaks and see what's holding.

Memory

Remember the durable facts you'd rather not repeat.

Daily planning

Read today's plan, reshape it, and start tomorrow already sorted.

Security, honestly

Built to be checked

A connection you can’t inspect or leave isn’t worth having. Here is exactly how this one works.

OAuth 2.1 with PKCE

Dynamic client registration, proof-key exchange, audience-bound tokens. No pre-shared credentials, ever.

Sign-in stays in your browser

You enter your email and a one-time code on Kept's page · agents and config files never hold a password or API key.

Tokens are short-lived

Access tokens expire in one hour. Refresh tokens rotate on every use, and reuse is detected and revoked.

Every call is checked

Scope-checked against exactly what you approved, rate-limited, and audited · a complete log of what was done.

Disconnect in one place

Kept → Settings → AI Agents → Disconnect. Immediate, and it cascades to every token that agent holds.