# Bootstrapware

> Production SaaS components for solo founders and bootstrapped teams: Importer (browser-side CSV/Excel), Feedback (embeddable feature requests), and Chat (in-product messaging). Local/dev mode and test keys are free. Live publishable config needs a paid product plan. Secret keys stay server-side. Customer spreadsheet contents, post bodies, and message/file payloads must never go to Bootstrapware APIs, MCP, or webhooks.

Start with the product AGENTS.md page (same file ships in the npm package). Then the quickstart. Hosted MCP is URL-only OAuth when possible; mint keys in the dashboard, not via MCP.

## Importer

- [Agent rules](https://bootstrapware.co/importer/docs/agents): Install, local vs hosted schema, MCP tools, and the rule that file contents never leave the browser.
- [Quickstart](https://bootstrapware.co/importer/docs/quickstart): `pnpm add @bootstrapware/importer`, embed the React component, send rows to your backend with `onComplete`.
- [File formats](https://bootstrapware.co/importer/docs/file-formats): CSV, TSV, XLSX in the browser, including client-generated template.csv.
- [Privacy](https://bootstrapware.co/importer/privacy): Spreadsheet contents, filenames, and row payloads are not sent to Bootstrapware.
- [npm @bootstrapware/importer](https://www.npmjs.com/package/@bootstrapware/importer): Client package. AGENTS.md is inside the tarball.
- [Hosted MCP](https://importer.bootstrapware.co/mcp): HTTP MCP. Prefer OAuth Connect. Tools configure importers only.

## Feedback

- [Agent rules](https://bootstrapware.co/feedback/docs/agents): Local, BYO ($9.99), Hosted ($19.99). Never put post title/body in MCP.
- [Quickstart](https://bootstrapware.co/feedback/docs/quickstart): Install, modes, similar-request search after 4 characters in the compose title.
- [Identity](https://bootstrapware.co/feedback/docs/identity): Host-asserted `user.id`. Origins and optional secret-minted `authorToken`.
- [Configuration](https://bootstrapware.co/feedback/docs/configuration): Published board toggles and revisions.
- [API](https://bootstrapware.co/feedback/docs/api): Secret-key board create/draft/publish. Keys stay server-side.
- [Privacy](https://bootstrapware.co/feedback/privacy): BYO stores config only. Hosted stores posts/votes; cancel freezes writes, 30-day export, then delete.
- [npm @bootstrapware/feedback](https://www.npmjs.com/package/@bootstrapware/feedback): Client package with AGENTS.md.
- [Hosted MCP](https://feedback.bootstrapware.co/mcp): HTTP MCP. Prefer OAuth Connect. Tools configure boards only.

## Chat

- [Agent rules](https://bootstrapware.co/chat/docs/agents): Path A local (no keys), Path B Hosted, Path C BYO. Stop if no publishable key. Never invent `user.id`. Opt-in browser Notify is off until the end user clicks Notify.
- [Quickstart](https://bootstrapware.co/chat/docs/quickstart): `pnpm add @bootstrapware/chat`, local adapter or hosted app.
- [Identity](https://bootstrapware.co/chat/docs/identity): Host-asserted session id. Optional `authorToken`.
- [Privacy](https://bootstrapware.co/chat/privacy): BYO stores config only. Hosted stores messages/files; cancel freezes writes, 30-day export, then delete.
- [npm @bootstrapware/chat](https://www.npmjs.com/package/@bootstrapware/chat): Client package with AGENTS.md.
- [Hosted MCP](https://chat.bootstrapware.co/mcp): HTTP MCP. Prefer OAuth Connect. Tools configure apps only. No message bodies or file bytes.

## Optional

- [Dashboard](https://app.bootstrapware.co): Keys, billing, branding, webhooks, Hosted inbox. Not available via MCP.
- [Company privacy](https://bootstrapware.co/privacy)
- [Terms](https://bootstrapware.co/terms)
- [Source](https://github.com/BootstrapWare/bootstrapware)
- [Cursor plugin](https://github.com/BootstrapWare/bootstrapware-cursor)