# Hookfish

## Docs

- [Hookfish](https://docs.hookfish.dev/index.md): Manage API keys, OAuth tokens, MCP access tokens, and other secrets for your application's users.
- [Quickstart](https://docs.hookfish.dev/quickstart.md): Scaffold Hookfish, connect a Gmail account through MCP, and read the user's inbox with a current access token.
- [How Hookfish works](https://docs.hookfish.dev/concepts/how-it-works.md): Understand Hookfish connections, request surfaces, callbacks, and credential boundaries.
- [Resource scopes and provider scopes](https://docs.hookfish.dev/concepts/scopes.md): Separate Hookfish resource authorization from upstream OAuth permissions.
- [Store API keys](https://docs.hookfish.dev/secrets/api-keys.md): Encrypt, retrieve, and rotate API keys with the Hookfish SDK.
- [OAuth providers](https://docs.hookfish.dev/authentication/oauth-providers.md): Configure GitHub, Linear, Notion, MCP, and application-owned provider registries.
- [Remote MCP servers](https://docs.hookfish.dev/providers/remote-mcp.md): Use protected-resource discovery, PKCE, and client registration to connect remote MCP servers.
- [Dynamic providers](https://docs.hookfish.dev/providers/dynamic.md): Create tenant-specific OAuth configurations without redeploying Hookfish.
- [Custom providers](https://docs.hookfish.dev/providers/custom.md): Implement the OAuthProvider contract for an unsupported service.
- [Hono on Node.js](https://docs.hookfish.dev/frameworks/hono.md): Add Hookfish to a Hono application and call it after your application authorizes the user.
- [Next.js](https://docs.hookfish.dev/frameworks/nextjs.md): Mount Hookfish in a Next.js App Router route handler.
- [Express](https://docs.hookfish.dev/frameworks/express.md): Mount the Fetch-compatible Hookfish handler in an Express 5 application.
- [Dashboard and browser access](https://docs.hookfish.dev/frameworks/browser-dashboard.md): Use the operator dashboard and build user-facing connection screens through your authenticated application API.
- [React and Hono RPC](https://docs.hookfish.dev/frameworks/react-hooks.md): Call your authenticated application API from React without exposing Hookfish credentials.
- [Choose a deployment backend](https://docs.hookfish.dev/deployment/choose-backend.md): Compare Hookfish deployment targets, databases, and production tradeoffs.
- [Vercel](https://docs.hookfish.dev/deployment/vercel.md): Deploy a Hookfish Hono handler to Vercel with PostgreSQL storage.
- [Bun](https://docs.hookfish.dev/deployment/bun.md): Run a standalone Hookfish broker with Bun and persistent storage.
- [Docker](https://docs.hookfish.dev/deployment/docker.md): Run Hookfish in Docker Compose with a persistent PGlite volume.
- [Cloudflare Workers](https://docs.hookfish.dev/frameworks/cloudflare-workers.md): Deploy Hookfish on Workers with PostgreSQL through Hyperdrive.
- [Application authentication](https://docs.hookfish.dev/authentication/application-auth.md): Authenticate users in your application, then call Hookfish from trusted server code with Hono RPC.
- [Scoped broker tokens](https://docs.hookfish.dev/authorization/token-scoping.md): Issue expiring, revocable broker credentials for Hookfish resource subtrees.
- [Organization routing](https://docs.hookfish.dev/authorization/organization-routing.md): Add an explicit tenant namespace to Hookfish routes and database resolution.
- [CLI](https://docs.hookfish.dev/operations/cli.md): Scaffold, serve, inspect, and migrate Hookfish projects from the command line.
- [MCP inspector](https://docs.hookfish.dev/operations/inspector.md): Discover, authorize, and call remote MCP server capabilities from a local interface.
- [Databases and migrations](https://docs.hookfish.dev/operations/databases.md): Configure PGlite, PostgreSQL, or the experimental Durable Objects adapter.
- [Events and audit logs](https://docs.hookfish.dev/operations/events.md): Export Hookfish lifecycle events to your telemetry or audit system.
- [Troubleshooting](https://docs.hookfish.dev/operations/troubleshooting.md): Diagnose callback, credential, browser, scope, provider, and database failures.
- [Configuration](https://docs.hookfish.dev/reference/configuration.md): Reference Hookfish config fields and runtime-specific options.
- [Environment variables](https://docs.hookfish.dev/reference/environment.md): Reference conventional Hookfish, dashboard, database, provider, and inspector variables.
- [Packages](https://docs.hookfish.dev/reference/packages.md): Choose the published Hookfish package and import path for each integration layer.
- [HTTP API](https://docs.hookfish.dev/reference/api.md): Reference Hookfish endpoint groups, authentication, browser exposure, and OpenAPI discovery.
- [Errors](https://docs.hookfish.dev/reference/errors.md): Handle stable Hookfish error codes across HTTP, OAuth callbacks, and the typed client.
- [Production security](https://docs.hookfish.dev/reference/security.md): Review Hookfish credential boundaries, deployment controls, and production readiness.

## OpenAPI Specs

- [openapi](https://docs.hookfish.dev/api-reference/openapi.json)

## Optional

- [GitHub](https://github.com/kamath/hookfish)