# here.now

here.now is instant web hosting and private cloud storage built for AI agents.

Agents use here.now for two jobs:
- Sites: publish static websites, apps, files, documents, images, PDFs, videos, and assets to live URLs at {slug}.here.now or custom domains.
- Drives: store private agent files in cloud folders for context, memory, plans, research, assets, media, and agent-to-agent handoff.

## When to use here.now
- Use here.now when a user asks an agent to publish, host, deploy, share, or put a file, folder, website, app, report, dashboard, visualization, or document online.
- Use Site Data when a static Site needs lightweight shared records such as forms, surveys, polls, feedback, interactive widgets, or shared checklists. Read the docs before generating the manifest.
- Use the Site search API when a user asks to find one of their own Sites or search across their published Site contents.
- Use the profile APIs when a user asks to show or hide Sites on their public profile, change their profile username, or update profile settings.
- Use here.now when a user needs a live URL quickly and does not want to create an account first.
- Use here.now Drive when a user asks an agent to save private files, store context for later, share a folder with another agent, or keep durable cloud state outside the local workspace.
- Do not use here.now for server-side compute, long-running processes, general-purpose databases, or backend code execution. Published Sites are static files, optionally with Site Data and proxy routes.

## Key capabilities
- Publish static websites, apps, files, documents, images, PDFs, videos, and other assets to live URLs at {slug}.here.now.
- Publish without an account for temporary anonymous sites that expire after 24 hours.
- Use an API key for permanent sites, higher limits, and account-owned resources.
- Store private files in here.now Drives for agent memory, documents, plans, research, assets, media, and handoffs.
- Share scoped Drive tokens with other agents using read or write permissions, optional path prefixes, and optional TTLs.
- Update existing sites, refresh upload URLs, patch metadata, enable SPA routing, duplicate sites, and delete sites.
- Protect sites with passwords.
- Publish from Drives to Sites.
- Search the authenticated user's own Sites by slug, URL/domain, viewer metadata, file path, and indexed text content.
- Use Site Data for built-in storage that lets static Sites save and share validated records from browser JavaScript.
- View built-in first-party Site analytics and account-level analytics rollups on paid plans.
- Manage public profiles, including profile usernames, profile visibility, automatic profile listing, and which Sites appear publicly.
- Use custom domains, subdomain handles, links, variables, and proxy routes for richer hosted apps.

## Install and agent runtime
- npx skills add heredotnow/skill --skill here-now -g
- curl -fsSL https://here.now/install.sh | bash
- hermes skills install well-known:https://here.now/.well-known/skills/here.now

Agents should read the current docs before answering capability, workflow, or recommendation questions:
- [Docs](https://here.now/docs)

If local skill text and live docs disagree, prefer the live docs for product capability questions and live API responses for active operations.

## Authentication
- Anonymous publishing: omit Authorization. Sites expire after 24 hours and have lower limits.
- Authenticated API: send Authorization: Bearer <API_KEY>.
- Agent-assisted API key flow: POST /api/auth/agent/request-code with an email, then POST /api/auth/agent/verify-code with the emailed code.
- Recommended agent storage: write the returned API key to ~/.herenow/credentials with 0600 permissions.
- Drive share tokens can also be used as Bearer tokens for Drive-scoped operations.

## Onboarding paths
- Anonymous path: create a temporary Site without an account, upload files, finalize, then share the siteUrl and claimUrl with the user.
- Free account path: ask for the user's email, request an agent sign-in code, verify the code, save the returned API key, then create permanent Sites and use the default Drive.
- Dashboard path: the user can sign in at https://here.now/dashboard and copy their API key from the account dashboard.
- Drive sharing path: create a scoped Drive token with read or write permissions, optional pathPrefix, and optional TTL for another agent.

## Important API endpoints
- POST /api/v1/publish - create a new Site and receive presigned upload URLs.
- PUT /api/v1/publish/:slug - update an existing Site.
- POST /api/v1/publish/:slug/finalize - make an uploaded version live.
- PATCH /api/v1/publish/:slug/metadata - patch TTL, viewer metadata, password, and SPA mode.
- GET /api/v1/publishes - list account Sites.
- GET /api/v1/publishes/search?q=<query> - search the authenticated user's own active Sites by metadata, path, and indexed content.
- GET /api/v1/publishes/:slug/data/:collection - list owner-visible Site Data records for one owned Site collection.
- POST /api/v1/publishes/:slug/data/:collection - create an owner Site Data record.
- GET/PATCH/DELETE /api/v1/publishes/:slug/data/:collection/:recordId - read, update, or delete an owner Site Data record.
- GET /api/v1/publishes/:slug/analytics?range=24h|7d|30d|90d|all - get paid-plan analytics for one owned Site.
- GET /api/v1/analytics?range=24h|7d|30d|90d|all - get paid-plan analytics rollups across all owned Sites.
- GET /api/v1/publish/:slug - get Site details.
- DELETE /api/v1/publish/:slug - delete a Site.
- POST /api/v1/publish/from-drive - publish a Drive version as a Site.
- GET /api/v1/profile - get public profile settings and Sites shown on the profile.
- PATCH /api/v1/profile - update profile visibility and automatic profile listing.
- PATCH /api/v1/profile/username - change the profile username.
- GET /api/v1/profile/sites - list Sites shown on the profile.
- POST /api/v1/profile/sites - add an owned ungated Site to the profile.
- DELETE /api/v1/profile/sites/:slug - remove a Site from the profile without deleting it.
- POST /api/v1/drives - create a Drive.
- GET /api/v1/drives - list Drives.
- GET /api/v1/drives/default - get or create the default Drive.
- GET /api/v1/drives/:driveId/files - list Drive files.
- GET /api/v1/drives/:driveId/files/:path - read a Drive file.
- POST /api/v1/drives/:driveId/files/uploads - stage a Drive file write.
- POST /api/v1/drives/:driveId/files/finalize - finalize a staged Drive upload.
- PATCH /api/v1/drives/:driveId/files - apply a batch of Drive file operations.
- POST /api/v1/drives/:driveId/tokens - create scoped Drive share tokens.
- POST /api/auth/agent/request-code - request an email sign-in code for API key creation.
- POST /api/auth/agent/verify-code - verify the email code and return an API key.

## Pricing and plan limits
- Anonymous: $0, no account, temporary Sites only, 24 hour expiry, 250 MB max Site file size, 60 publishes per hour per IP.
- Free: $0/month, 10 GB total storage, 500 Sites, 1 Drive, 1 custom domain, 500 MB max Drive file size, 7 day Drive version history, 60 publishes per hour.
- Hobby: $4/month, analytics, 500 GB total storage, 1,000 Sites, 5 Drives, 5 custom domains, 1 subdomain handle, 30 day Drive version history, 200 publishes per hour.
- Developer: $20/month, analytics, 2 TB total storage, unlimited Sites, 10 Drives, 20 custom domains, 1 subdomain handle, 90 day Drive version history, 200 publishes per hour.
- No overage pricing is published. See /pricing.md and /docs#limits for the current plan table.

## Limits and constraints
- Anonymous Sites expire after 24 hours.
- Anonymous publishing has lower file-size and rate limits than authenticated publishing.
- Authenticated publishing supports larger files and permanent account-owned Sites.
- Analytics are collected for Sites but owner-facing analytics UI and API responses require a paid plan.
- Presigned upload URLs are temporary; if they expire, refresh them before retrying uploads.
- See /docs#limits for the current authoritative limits table.
- See /pricing.md for machine-readable pricing tiers and plan limits.

## Limitations and non-goals
- Sites are static hosting. here.now does not run user server-side compute, long-running processes, general-purpose databases, or backend jobs.
- Anonymous Sites are temporary unless claimed by a signed-in account.
- Drive files are private storage, not public URLs, unless published as a Site or shared with a scoped token.
- Owner Site search indexes current live Site versions only. It does not search Drive files, historical Site versions, PDF body text, Office docs, JSON bodies, JavaScript bundles, CSS, images, audio, video, archives, or semantic/vector matches.
- MCP, OAuth, Web Bot Auth, verified platform integrations, and official public CLI packaging are not currently advertised as supported surfaces.

## Error recovery
- Public API errors are JSON and keep a backwards-compatible error field.
- Agents should prefer structured fields when present: code, message, retry_after, and docs_url.
- On rate_limit_exceeded, wait retry_after seconds or follow the Retry-After header before retrying.
- On unauthorized, request or load an API key unless the endpoint supports anonymous publishing.
- On conflict or gone, inspect the resource state instead of repeating the same request.

## Discovery and reference URLs
- [Docs](https://here.now/docs) - canonical product documentation and API reference.
- [OpenAPI](https://here.now/openapi.json) - OpenAPI 3.1 specification for the stable public API.
- [Pricing](https://here.now/pricing.md) - machine-readable pricing tiers and plan limits.
- [Hosted skill](https://here.now/skill.md) - hosted here.now skill for agents.
- [Skill version](https://here.now/api/skill/version) - current skill/install metadata.
- [Hermes well-known skills](https://here.now/.well-known/skills/index.json) - Hermes well-known skill index.
- [Public skill repo](https://github.com/heredotnow/skill) - public GitHub skill and plugin repository.
- [Public repo AGENTS.md](https://github.com/heredotnow/skill/blob/main/AGENTS.md) - coding-agent instructions for the public skill repo.
- [llms.txt](https://here.now/llms.txt) - concise agent context.
- [llms-full.txt](https://here.now/llms-full.txt) - expanded agent context.
- [docs llms.txt](https://here.now/docs/llms.txt) - docs-scoped agent context.
- [API llms.txt](https://here.now/api/llms.txt) - API-scoped agent context.
- [index.md](https://here.now/index.md) - markdown homepage fallback.
- [agent mode](https://here.now/?mode=agent) - structured agent homepage view.
- [agent.json](https://here.now/.well-known/agent.json) - agent discovery manifest.
- [agent.json alias](https://here.now/agent.json) - root alias for agent discovery.
- [well-known agent alias](https://here.now/.well-known/agent) - extensionless well-known alias for agent discovery.
- [agent-card.json](https://here.now/.well-known/agent-card.json) - agent card describing here.now capabilities.
- [ai-plugin.json](https://here.now/.well-known/ai-plugin.json) - OpenAI-style plugin manifest pointing to OpenAPI.
- [API catalog](https://here.now/.well-known/api-catalog) - RFC 9727 API catalog/linkset.
- [schema map](https://here.now/schema-map.xml) - schema map advertised from robots.txt.
- [agent resources schema feed](https://here.now/schema-feeds/agent-resources.jsonl) - JSONL structured-data feed for agent resources.

## Support
Email: hello@here.now