# PackageMaze

> Private npm and PyPI feeds that host your packages, front the public registries, and enforce your rules — with a record of every package PackageMaze delivered, attributed to a human or agent.

PackageMaze is a hosted package registry for an Organization's npm and Python packages. A Feed is one registry address under pkg.packagemaze.com that serves the packages you publish and the public packages your policy allows from npmjs.com or pypi.org, so npm, pnpm, pip, uv, Poetry, CI jobs, and coding agents install through one URL and existing lockfiles stay valid.

Policy runs before delivery: a Minimum Age Policy holds new upstream releases (24 hours by default), and License, Install Scripts, Distribution Format, and Reserved Package Namespace rules decide what a Feed serves. Every delivered version is recorded with who requested it, a person, a CI run, or an agent.

People sign in with GitHub. GitHub Actions and CircleCI exchange OIDC identity for short-lived Feed access instead of stored secrets. Any MCP-capable agent connects at https://api.packagemaze.com/mcp with OAuth consent scoped to one Organization and its Feeds; connected agents do not count as seats.

## Overview

- [Agent quickstart](https://www.packagemaze.com/docs/agent-quickstart/index.md): If you are a coding agent asked to use PackageMaze, start here: the whole job, in order.
- [Home](https://www.packagemaze.com/index.md): Host, control, and track every package. Your private packages and the public registries behind one Feed. Every install follows the rules you set, and every version is on record.
- [Docs](https://www.packagemaze.com/docs/index.md): Task-oriented guides for PackageMaze: set up a repository, wire CI, connect your agent, and review what PackageMaze delivered to your team.

## Start

- [The PackageMaze GitHub App](https://www.packagemaze.com/docs/github-app/index.md): Why PackageMaze uses a GitHub App, what it does, and the permissions behind it.
- [Set up your repository](https://www.packagemaze.com/docs/set-up-your-repository/index.md): Point a repository's installs and publishes at a PackageMaze Feed.

## Control

- [Set up npm and pnpm](https://www.packagemaze.com/docs/set-up-npm-and-pnpm/index.md): Make your Feed the default npm registry — project .npmrc, install, publish, and the pnpm auth exception.
- [Set up pip, uv, and Poetry](https://www.packagemaze.com/docs/set-up-pip-uv-and-poetry/index.md): Make your Feed the only Python index — project files, install, and publishing with twine, uv, or Poetry.
- [Set up CI](https://www.packagemaze.com/docs/set-up-ci/index.md): Install and publish from GitHub Actions with short-lived credentials.

## Agents

- [Agent quickstart](https://www.packagemaze.com/docs/agent-quickstart/index.md): For a coding agent asked to use PackageMaze: the whole job, in order, and the one step only a person can take.
- [Connect your agent](https://www.packagemaze.com/docs/connect-your-agent/index.md): Give any MCP-capable agent the same Feed, with one URL.
- [Cloud agents and sandboxes](https://www.packagemaze.com/docs/cloud-agents-and-sandboxes/index.md): Install inside hosted coding agents and cloud sandboxes — pick your path by capability, not vendor.

## Reference

- [See what's delivered](https://www.packagemaze.com/docs/see-whats-installed/index.md): See what PackageMaze delivered, who requested it, and through which Token.
- [Fix a failing install](https://www.packagemaze.com/docs/fix-a-failing-install/index.md): Go from a failing install to the cause in minutes.
- [Leaving PackageMaze](https://www.packagemaze.com/docs/leaving-packagemaze/index.md): Uninstall, remove, revoke, or close — what each exit stops, and what stays behind.

## MCP

- [MCP endpoint](https://api.packagemaze.com/mcp): streamable HTTP; any MCP-capable agent connects with this one URL and approves OAuth consent in the browser
- [MCP tool manifest](https://api.packagemaze.com/v1/mcp/tools): the live catalog of tools and the scopes each one needs

## Optional

- [Everything in one file](https://www.packagemaze.com/llms-full.txt): every public page as Markdown, in reading order
- [Sitemap](https://www.packagemaze.com/sitemap.xml)