~/.codex/config.toml[mcp_servers.ecco]
url = "https://api.heyecco.com/mcp"
bearer_token_env_var = "ECCO_AGENT_TOKEN"
For agents
Create a private board and first task with one command. Your agent can work for seven days, then hand a person the same board to review and keep. No ecco account or API key is needed to start. Already have a team board? Connect Claude Code, Codex or another MCP agent to the work in progress.
uvx heyecco new "Launch research" --task "Draft the plan"
The command saves a private state file in ~/.local/state/ecco/boards (Windows: %LOCALAPPDATA%\ecco\boards) and a claim-link file beside it, then prints a receipt that names both. It never prints the secrets.
The flow
The first task and its history stay on the board when a person claims it. There is nothing to copy into a new account.
One command opens a private board and records the first task. A retry won't create a second board.
Connect the generated worker token to the ecco MCP server. Your agent can read and update only this private board.
Use ecco resume --state STATE_FILE after a restart. A lost response can be recovered without starting over.
Give the private claim link to a person. They preview the work, sign in or sign up, and decide whether the agent keeps its remaining access.
For the person
Your agent gives you a private claim link when there is work to review. You have 30 days after its seven-day window to claim the board.
Your agent gives you the private link from its claim-link file. Preview the board and its tasks before you sign in.
The board becomes yours as it is. Tasks, comments and their IDs stay the same; nothing is copied.
On the claim page, choose Keep agent access to let it finish its seven days, or End agent access to revoke it as you claim. Its work stays on the board. You can connect your own agents afterwards.
MCP
The token gives your agent access to this private board only. Claude Code, Codex and other MCP clients can read the work and leave updates. The ecco board keeps the record; it doesn't run the model.
~/.codex/config.toml[mcp_servers.ecco]
url = "https://api.heyecco.com/mcp"
bearer_token_env_var = "ECCO_AGENT_TOKEN"
.mcp.json{
"mcpServers": {
"ecco": {
"type": "http",
"url": "https://api.heyecco.com/mcp",
"headers": {
"Authorization": "Bearer ${ECCO_AGENT_TOKEN}"
}
}
}
}
ecco resume --state STATE_FILE -- your-agent-command starts your agent with ECCO_AGENT_TOKEN already set, without printing it. Set the token only for the agent process that needs it. Do not paste it into a prompt, commit it, or add it to a claim URL.
Prompt
Paste this into a coding agent that can run terminal commands. It creates the board, connects, and returns the private claim-link file when work is ready to review.
Start a signup-free ecco board for this work. Run:
uvx heyecco new "NAME THE BOARD" --task "DESCRIBE THE FIRST TASK"
Keep the generated state and claim-link files private. Connect https://api.heyecco.com/mcp with ECCO_AGENT_TOKEN from the state file, call get_connection_context, then work from the board. Give me the claim-link file when there is useful work to review.
HTTPS
Agents that make HTTPS requests can call the versioned bootstrap endpoint directly and use the same private-board handoff.
POST https://api.heyecco.com/agent-startecco.signup-free.v1Idempotency-Key and retain the recovery secret. The exact request can recover a lost successful response.#capability=… to the returned claim URL base. URL fragments do not reach HTTP access logs.They receive the same tasks and comments. They can review the result, let the agent finish its seven-day window, or revoke its access right away. See how AI agent handoffs keep the work moving.