CDN.MN — CDN, minified.

# CDN.MN > An image CDN an AI coding agent can set up and operate: least-privilege scoped > access, a per-scope human-approval valve for anything sensitive, and a > hand-rollable MCP surface. You never need the user's password and never get a > permanent key. ## Start here - [Authentication guide](https://app.cdn.mn/auth.md): the device-claim flow, scopes, and the autonomy/approval model — read this first. - [Install skill](https://app.cdn.mn/SKILL.md): the step-by-step workflow to put a site behind the CDN using the live tools. - [CLI & SDK](https://cdn.mn/docs/cli): the packaged tools — `npm i -g @cdnmn/cli` (or `npx @cdnmn/cli`) to detect, set up, rewrite, and verify from your project (it honors an AGENTS.md `do not auto-edit` rule); `@cdnmn/sdk` is the typed client the CLI is built on. ## Machine-callable surfaces (live) - [MCP endpoint](https://app.cdn.mn/api/mcp): MCP 2025-06-18 over plain JSON (initialize, tools/list, tools/call). Bearer-authed; one request per POST, no streaming. - [OpenAPI description](https://app.cdn.mn/openapi.json): the agent REST endpoints (register, poll for a token) as OpenAPI 3.1. - [Protected-resource metadata](https://app.cdn.mn/.well-known/oauth-protected-resource) - [Authorization-server metadata](https://app.cdn.mn/.well-known/oauth-authorization-server) ## Documentation (human-readable, for answering questions about the product) - [Documentation index](https://cdn.mn/docs): how to point images at the CDN. - [Quickstart](https://cdn.mn/docs/quickstart): sign-up to a live optimized image in five steps. - [Your CDN hostname](https://cdn.mn/docs/generated-hostname): what the generated `cdn12345` hostname is and how to rewrite URLs to it. - [URL parameters](https://cdn.mn/docs/url-parameters): the accepted query parameters — width, height, DPR, fit — and how format and quality are chosen for you. - [Purging the cache](https://cdn.mn/docs/cache-purge): refresh a cached image after changing it at y

{"openapi":"3.1.0","info":{"title":"CDN.MN Agent API","version":"2025-06-18","description":"The device-claim REST endpoints an AI agent uses to obtain a scoped bearer token. Full flow, scopes, and the MCP surface: see /auth.md."},"servers":[{"url":"https://app.cdn.mn"}],"paths":{"/api/agent/register":{"post":{"operationId":"registerAgent","summary":"Register an agent: device-claim, or provision a live workspace.","description":"Unauthenticated by necessity (the agent has no credential yet) and I