# OneClient

> OneClient is a managed product platform for auth, data, storage, hosting, jobs, email, analytics, AI, domains, and prepaid usage control.

## Canonical documentation
- Home: https://one-client.com/
- Documentation: https://one-client.com/docs
- Quickstart: https://one-client.com/docs/quickstart
- AI and MCP: https://one-client.com/docs/ai
- OpenAPI reference: https://console.one-client.com/api-reference
- Agent skill: https://one-client.com/skill.md
- Pricing and spend safety: https://one-client.com/pricing
- Privacy matrix: https://one-client.com/legal/privacy-matrix

## Package
- Install: npm install oneclient
- CLI: npx oneclient --help
- SDK: import { createClient } from "oneclient"

## Resource model
organization -> project -> development | production

## Credential model
- pk_*: public environment identifier; no authority by itself.
- sk_*: secret, scoped server credential; never expose to a client.
- dp_*: deployment/CI token restricted to selected resources.

## Agent rules
1. Default to the development environment.
2. Use deny-by-default data policies; clients never send raw SQL.
3. Never expose server keys, deploy tokens, secrets, or provider credentials.
4. Create immutable previews before production promotion.
5. Require human approval for billing, domain purchase, destructive deletion, and production promotion.
6. Send Idempotency-Key for billable mutations.
7. Read the live model and price catalog; do not hard-code model availability or cost.
8. Treat PAYMENT_REQUIRED, SUBSCRIPTION_REQUIRED, PROJECT_SUSPENDED, POLICY_DENIED, RATE_LIMITED, and REGION_UNAVAILABLE as structured control states.