@mcpbox/daruma@2 (Cloud + self-host)

MCPBox auth CLI for Daruma — RFC 8628 device-code pairing for MCPBox (mcpbox.ru) and bootstrap-token login for OSS self-host. Part of the @mcpbox scope on mcpbox.ru. Canonical contract: docs/plugin-auth-v1.md.

npm: @mcpbox/daruma

CLI binaries: mcpbox-daruma (primary), daruma (alias).

Combined setup

curl -fsSL https://mcpbox.ru/install.sh | sh

The installer requires Node.js and npx. It runs @mcpbox/mcpbox setup and @mcpbox/daruma setup in sequence.

Cloud npm CLI

npx @mcpbox/daruma login
npx @mcpbox/daruma login --no-open
npx @mcpbox/daruma session

DARUMA_CLOUD_URL=http://127.0.0.1:8081 npx @mcpbox/daruma login

Agent setup

Detect installed Codex, Cursor, and Claude Code clients, choose one scope, and install Daruma MCP, plugins/hooks, and policy for every detected client:

npx @mcpbox/daruma setup

Choose Repository to install one policy per detected client in the current repository, or Global to install policies for all detected clients in the user profile. Existing MCP and managed policy blocks are preserved without duplication.

For Codex, setup installs the canonical plugin from tupical/daruma/clients/codex-plugin into ~/plugins/daruma, registers it in the personal marketplace (~/.agents/plugins/marketplace.json), and enables daruma@personal in ~/.codex/config.toml, so it appears as installed in /plugins. During local development, set DARUMA_CODEX_PLUGIN_SOURCE to override the canonical source path.

Advanced targeted setup:

npx @mcpbox/daruma setup codex
npx @mcpbox/daruma setup cursor
npx @mcpbox/daruma setup claude
npx @mcpbox/daruma setup all

All supported clients use the hosted HTTP MCP endpoint with OAuth. Cursor setup also installs its rules and guard hooks. Claude Code setup installs the daruma-claude plugin with hooks. Codex setup installs the Daruma plugin.

Node-free MCP setup from the cabinet

Users without Node.js can connect agents from the Cloud cabinet:

1. Open workspace → Connect agents.

2. Select Cursor, Claude Code or Claude Desktop.

3. For Cursor, click Add to Cursor or use this remote MCP config:

   {
     "mcpServers": {
       "daruma": {
         "type": "http",
         "url": "https://<cloud-origin>/v1/mcp"
       }
     }
   }

4. For stdio clients, click Generate in Node-free MCP credentials.

5. Save the generated JSON to:

   ~/.agents/daruma/credentials.json

6. Download the Rust daruma binary from the generated command and put it on PATH.

7. Configure the client command as daruma mcp.

Startup fallback:

daruma mcp
claude mcp add daruma -- daruma mcp

If daruma is not on PATH, use ~/.agents/daruma/bin/daruma mcp. If a prebuilt binary is not available for your platform, build it from source:

cargo install --git https://github.com/tupical/daruma daruma-cli

The generated token is shown once in the browser and is listed in workspace settings as an mcp-oauth token, so it can be revoked later without touching the agent machine.

Self-host (OSS :8080)

# After daruma-server wrote bootstrap.token (~/.agents/daruma/data/)
DARUMA_SELFHOST_URL=http://127.0.0.1:8080 npx @mcpbox/daruma login --mode self-host

npx @mcpbox/daruma session --mode self-host

Mode switch

npx @mcpbox/daruma use cloud
npx @mcpbox/daruma use self-host

Credentials: ~/.agents/daruma/credentials.json (schema v1, mode: cloud | self-host). Override directory via DARUMA_AGENT_DIR. If ~/.config/daruma/credentials.json exists, it is copied into the agent dir on first use.

On 401 / revoked token, cloud mode clears stored auth and prompts device-code re-pair (--no-repair disables auto re-pair on session).