---
title: "Set up your repository | PackageMaze docs"
description: "Point a repository's installs and publishes at a PackageMaze Feed — for npm, pnpm, uv, pip, and Poetry — without committing Token secrets."
canonical: https://www.packagemaze.com/docs/set-up-your-repository/
---

> Documentation index: https://www.packagemaze.com/llms.txt

# Set up your repository

Point a repository's installs and publishes at a PackageMaze Feed. Committed files carry the Feed URL, never a Token secret.

## With your agent

> Tell your connected agent: "Set up this repository to install through PackageMaze."

- Inspects the repository and its CI for every place packages are installed or published.
- Writes the package-client configuration that points at your Feed.
- Keeps Token secrets out of committed files — auth stays in user-level or CI configuration.
- Reviews its own changes for coverage, then proves one install through your Feed before it calls the setup done.

Requires a connected agent. See [Connect your agent](https://www.packagemaze.com/docs/connect-your-agent/).

## By hand

Commit one file per project. With the GitHub App installed, PackageMaze finds each project in the repository and lists it on the Projects screen. The Feed Configuration page in the app shows each file with your Feed filled in and only the lines it needs.

### npm-compatible Feeds

**.npmrc**

```
registry=https://pkg.packagemaze.com/<organization>/<feed>/
replace-registry-host=npmjs
```

pnpm, publishing, and lockfiles: [Set up npm and pnpm](https://www.packagemaze.com/docs/set-up-npm-and-pnpm/).

### PyPI Feeds

**pyproject.toml (uv)**

```
[[tool.uv.index]]
name = "packagemaze"
url = "https://pkg.packagemaze.com/<organization>/<feed>/simple/"
publish-url = "https://pkg.packagemaze.com/<organization>/<feed>/legacy/"
default = true
authenticate = "always"
```

pip, Poetry, and publishing: [Set up pip, uv, and Poetry](https://www.packagemaze.com/docs/set-up-pip-uv-and-poetry/).

### Credentials

Keep Token secrets out of Git. Locally, supply the Token as `MAZE_TOKEN`, ideally from your operating system's keychain. CI mints a short-lived Token per run: [Set up CI](https://www.packagemaze.com/docs/set-up-ci/).

Next: [Set up npm and pnpm](https://www.packagemaze.com/docs/set-up-npm-and-pnpm/)

Related: [Set up npm and pnpm](https://www.packagemaze.com/docs/set-up-npm-and-pnpm/), [Set up pip, uv, and Poetry](https://www.packagemaze.com/docs/set-up-pip-uv-and-poetry/), [Set up CI](https://www.packagemaze.com/docs/set-up-ci/)