The core profile is recommended for new connections. Use ?profile=native for every first-party operation; the endpoint without a profile remains compatible with Reporter workflows.
Interactive hosts open browser sign-in. After connecting, ask the agent to call handover.whoami, create one record, and read it back.
First agent promptUse Handover to:
1. Call handover.whoami and show my identity, company, workspace, and scopes.
2. Create "My first handover" with the next step "Read this record and continue."
3. Search for that title, read the current revision back, and return its durable link.
Stop and explain which step failed if the full round trip does not succeed.
Start here
Prove the workflow before configuring anything
Inspect a complete handover without an account. When it makes sense, sign in and continue the same work as your first record.
No account
Inspect the files and decisions
Open a real Markdown, SQL, and JSON handover with revision history and a resolved human review.
Start with browser sign-in and one complete round trip. Handover attributes the agent's work to your user while preserving your company, workspace, and access boundaries.
1
Add the hosted MCP server
Choose your host below and add the canonical Handover endpoint. No employee token needs to be copied into its configuration.
The host opens Handover in your browser. Sign in, inspect the client name and requested permissions, then choose Connect agent. Authorization codes are single-use and protected by PKCE.
3
Publish durable context and retrieve it
Ask the connected host to verify its identity, create a small organization-visible handover, and search for it again. The read-back proves the complete continuation path.
Agent promptUse Handover to:
1. Call handover.whoami and show my identity, company, workspace, and scopes.
2. Create "My first handover" with the next step "Read this record and continue."
3. Search for that title and read the current revision back.
Done means read-back, not just connection. The identity is correct, the handover exists, and a later authorized actor can retrieve the durable record without the original chat.
Choose an identity
People sign in. Agents get service credentials.
Authentication determines authorship. Interactive hosts act for the signed-in person; unattended automation uses a separately named, revocable service identity.
Interactive MCP hosts
Browser OAuth
Standard MCP OAuth discovery, dynamic client registration, PKCE, short-lived access tokens, and rotating refresh tokens let each person sign in without sharing a secret. Every revision stays attributed to that person.
Create a scoped credential in Company > Agents and store it as HANDOVER_TOKEN. The agent identity, scope, and revocation status remain separate from any employee account.
Interactive hosts use browser sign-in by default. Cline and unattended runners can use a named service credential when they do not support the standard OAuth flow.
Codex
Add the remote server, then let Codex open Handover in your browser. Sign in as yourself and approve the requested read, write, and audit access.
Install the dependency-free command from npm with Node.js 22.13 or newer. The package is MIT licensed and built from the public Handover MCP repository.
Install from npmnpm install --global handover-sh
Direct installercurl -fsSL https://handover.sh/install.sh | sh
Inspect before running
Review the public package source, install.sh, and handover.mjs. Set HANDOVER_URL and HANDOVER_TOKEN for the CLI or another unattended service identity; browser-connected MCP hosts do not need it.
Portable workflows
Install a Handover Agent Skill
Skills teach compatible agents how to publish, resume, review, and govern work safely. MCP or the CLI supplies the authenticated capability; the skill supplies the dependable workflow.
The host lists Handover's tools, handover.whoami returns the intended person or service agent, and search results are limited to context that identity may access.
The MCP transport connects without a JSON or sign-in error.
The identity belongs to the expected personal or company workspace.
Reads and writes preserve that identity as the author.
Revoking the credential immediately prevents further access.