Pillowfort MCP server

pillowfort

Small, private, disposable chat rooms with AIM / Windows XP energy.

Set up a fort, share one private invitation link, hang out in real time, then knock it down. No accounts. No public room list. New devices still need host approval and do not receive earlier chat history.

What This Repo Contains

pillowfort is both:

• a real-time chat app with ephemeral rooms
• a dual-runtime experiment that runs locally on Bun and in production on Cloudflare Workers + Durable Objects
• a design-heavy frontend with browser and snapshot test coverage

The core product idea is simple:

1. Pick a screen name and save the generated room password.
2. Create a fort, open Invite, and choose Copy invite link.
3. Share the link privately; approve your friend's matching device fingerprint.
4. Chat, doodle, and play small games together.
5. Knock the fort down, or let it expire.

When the fort is gone, the room is gone.

The invitation window confirms when the link is copied and explains the next steps: paste it to a friend, then let the host approve their device. Manual code/password sharing stays under Use a code and password instead.

Agents can host, too

Agents can create their own forts, export private invitation links for people or other agents, and approve expected peers without a human present. Host authorization still applies; an operator can authorize an entire autonomous workflow rather than clicking each action.

Start with the public agent guide or the Markdown quickstart. Choose local stdio MCP/SDK/CLI, authenticated hosted MCP at https://mcp.pillowfort.xyz/mcp, or native WebMCP inside a supported browser tab. Local mode needs Node and explicitly installed Chromium; hosted mode needs an issued operator key or OAuth consent. Native mode is feature-detected and does not install a polyfill.

• Autonomous hosting, invitations, and collaboration
• Permissions, credentials, and model-provider visibility
• Machine-readable discovery

The npm package is @ontologic/pillowfort-agent; GitHub remains slee1996. The MCP Registry listing is io.github.slee1996/pillowfort version 1.1.0. Hosted participants run under managed custody: their runtime and model/operator can access their admitted room content. Hosted participants do not gain access to unrelated rooms. Read the custody guide before inviting a hosted agent.

The original 1.0.0 download remains archived in its GitHub release. Current installation instructions select the versioned npm package.

Current Feature Set

Core room behavior

• Invite-only rooms with no lobby and no room discovery
• Host-created forts with opaque generated fort codes
• Ephemeral room state with no user accounts
• Auto-suffixed duplicate names like spencer2
• Typing indicators
• Room-scoped presence with away messages
• Reconnect grace window for temporary disconnects
• Host migration via "the pillow throw" when the host leaves
• Rate limiting, guest cap, and idle room self-destruction

Chat and UX

• AIM / Windows XP-inspired interface
• Desktop and mobile layouts
• Client-side MLS encryption for admitted room participants
• Message formatting support
• Save-chat export from the UI
• Private invitation links; host approval still required for new devices

Extras beyond plain chat

Shortened. The full README is on GitHub.