Docs

yof in your AI builder

Let the AI that writes your code check it with yof before it says the work is done. In the yof dashboard, AI builders makes the key and the config for you, so connecting is one click or one paste.

Pick your tool

Tool	How	Status
Claude Code	One command adds the yof MCP server. A plugin adds a skill and a hook that check what changed before Claude finishes.	Available
Cursor	One click opens Cursor with the yof server ready to add.	Available, one detail to confirm
VS Code	One click adds yof to VS Code's MCP servers for Copilot's agent mode.	Available
Codex	One command, or a few lines in ~/.codex/config.toml.	Available
Windsurf	Paste one block into Windsurf's MCP config.	Available
Claude Desktop	Paste one block into claude_desktop_config.json. A one-click bundle is built and waits to be published.	Available, one detail to confirm
Replit	One click adds the hosted yof server to Replit's integrations.	Available
Lovable	Add yof as a custom MCP connector with its address and your key.	Available
Bolt	Add yof as a custom MCP server with its address and your key (project owners only).	Available, one detail to confirm
Claude (web)	Claude's connectors sign in with OAuth. yof does not offer OAuth sign-in yet, so this is coming.	Coming
ChatGPT	ChatGPT's connectors take OAuth or no sign-in, never a key. yof does not offer OAuth sign-in yet, so this is coming.	Coming

On your computer or on yof.io

On your computer (Claude Code, Cursor, VS Code, Codex, Windsurf, Claude Desktop): the tool starts npx -y @yof/cli mcp, the open-source yof CLI as an MCP server. It reads your project folder and never uploads code. Always use the scoped name @yof/cli.

On yof.io (Replit, Lovable, Bolt): the tool calls https://mcp.yof.io/mcp. It works on your yof account: your apps' live sites and the GitHub repositories you linked. It cannot read files on your computer.

No yof tool can merge, close or delete anything, or change a setting. Revoke a connection in the dashboard and its key stops working on the next call.

Rules files

In AI builders, the rules card opens one pull request through the yof GitHub App that adds yof's security rules to the files AI tools read: CLAUDE.md (Claude Code), AGENTS.md (Codex, Cursor, VS Code, Windsurf), .cursor/rules/yof.mdc and .windsurf/rules/yof.md. In CLAUDE.md and AGENTS.md only the part between the yof markers is yof's. Nothing changes until you merge it, and yof never pushes to your main branch.

What is sent where

Local scans: nothing leaves your computer except package names and versions for the package check (npm, PyPI, OSV), which you can turn off.
With a yof key: a ping when the server starts, and ids and rule ids for the account tools, to mcp.yof.io.
On mcp.yof.io yof keeps counts of calls per day and per tool name, never the arguments, code or answers.
Every answer is marked as untrusted data, and secret values are shown only as a short prefix plus REDACTED.