Your AI assistant, your deployments, your bill.
Jaws ships with a built-in Model Context Protocol server. Point Claude Code, Claude Desktop, Cursor, Codex Desktop, Codex CLI — or anything else that speaks MCP — at your Jaws workspace, and the AI can create projects, assemble deployment pipelines from step templates, read deploy logs, author new templates, and set variables on your behalf.
You pay your AI provider once. We don't charge per token, we don't proxy your model calls, and we don't tie you to a specific vendor. If you switch from Claude Code to Cursor next month, your Jaws setup keeps working.
What you can do today
A three-step setup
1. Create a service account in your Jaws workspace under Settings → Service Accounts. Generate an API key. 2. Add the Jaws server to your AI client's MCP config. Copy-pasteable snippets for each major client are in the quickstart guide. 3. Start asking questions. Your AI now sees your workspaces, projects, step templates, variables, and deployment logs.
We could've charged you per token.
Most deploy tools that ship AI features quietly become token resellers. They wrap a model provider, mark up the inference, and bake it into a new pricing tier. That's fine for them and bad for you — your costs scale with conversations, you're locked into whichever model they chose, and your spend on AI is now split across two bills.
We chose MCP instead.
By exposing Jaws as an MCP server, we let your existing AI subscription do the work. You bring your Claude, Cursor, or Codex plan. We bring the deployment surface. No inference markup. No new vendor to evaluate. When models get cheaper and better — which they will — the savings go straight to you.
Built so the AI can't break things on its own
- No deploy triggers without confirmation. Triggering a deployment is split into
preview_deploy(dry run) andtrigger_deploy(consumes a short-lived token). Your AI cannot deploy without you seeing a preview first. - No secrets in transcripts. Secret-typed variable values are masked when read and rejected when written. Secrets are set by hand in the Jaws UI — they never travel through an AI conversation.
- Every call is permission-checked. Tool calls go through the same
WorkspaceGuardas the REST API. A service account that can't see a workspace can't see it via MCP either. - Auditable. Every MCP call is a regular HTTP request to your Jaws hub — shows up in your existing access logs.