HAN-uh-per

Authorization host

Hanaper is the authorization host for autonomous agents. A person writes policy. An agent proposes a payment. Hanaper answers ALLOW, DENY, or REQUIRE_APPROVAL. Spend credentials stay on this host. They do not go in the agent.

What it is

Customers run Hanaper in their own environment. One operator, one host, one rail for this beta. Hanaper does not custody funds.

How you run it

On a VM you control:

git clone https://github.com/cirracloud/hanaper.git
cd hanaper
bash scripts/install.sh

The installer binds 127.0.0.1:8788 on the VM, not the public IP. From your laptop:

ssh -L 8788:127.0.0.1:8788 USER@THE_VM

Open http://127.0.0.1:8788, paste the token, then the product wizard at https://<your-host>/dashboard/wizard. Details in GUIDE.md.

What you operate

• Dashboard: policy, rail grant, approvals, pause, rotate, audit
• MCP on your origin: https://<your-origin>/mcp
• Liveness: GET /healthz (no org data)
• Readiness: GET /readyz (503 if Postgres is down)

Unauthenticated GET /mcp on your origin must be HTTP 401 with an empty body.

This site is not the control plane

hanaper.dev is the product site. You run Hanaper on a host you control. Agents call your HTTPS URL.