# Sentry Relay (sentryrelay.com)

> The Out-of-Band 2FA, OTP, Magic-Link & Authenticator (TOTP) Relay for Unattended Autonomous Agents, Headless Browsers (Playwright, Stagehand, Browser Use, Skyvern), and Multi-Client RPA Agencies.

Sentry Relay eliminates authentication walls for autonomous software. While password managers (like 1Password) inject static usernames and passwords, Sentry Relay intercepts live inbound Email & carrier-grade US SMS verification codes in `<200ms` via Redis Pub/Sub long-polling (`/wait`), generates live Cloud KMS envelope-encrypted RFC 6238 TOTP codes with expiring-window rollover protection, and routes non-auth SMS/voice anomalies to human operators via the Human-Fallback Safety Bridge™.

## Quick Install for AI Agents & Coding Assistants

- **Hosted Streamable HTTP MCP (Zero-Install):** `https://sentryrelay.com/api/mcp` (Header: `Authorization: Bearer $SENTRY_RELAY_API_KEY`)
- **Claude Code CLI (MCP Server):** `claude mcp add sentryrelay -e SENTRY_RELAY_API_KEY=sr_live_... -- npx -y @sentryrelay/mcp`
- **Agent Skill (Cursor / Claude Code / Codex / Windsurf):** `npx skills add https://sentryrelay.com/skills/sentryrelay/SKILL.md`
- **CLI (`srelay`):** `npm install -g sentryrelay` (Binary: `srelay` — e.g. `CODE=$(srelay wait my-bot --raw)`)
- **TypeScript / Node.js SDK:** `npm install @sentryrelay/sdk`
- **Python SDK (Sync, Async & 12 Agent Frameworks):** `pip install sentryrelay-sdk`
- **Public Ecosystem Repository (SDKs, MCP, CLI & Skills):** [https://github.com/sentryrelay/sentryrelay](https://github.com/sentryrelay/sentryrelay)

## Authentication

All SDKs, CLI commands, REST endpoints, and MCP tools authenticate via the `SENTRY_RELAY_API_KEY` environment variable (`sr_live_...` for production or `sr_test_...` for deterministic sandbox testing) passed as `Authorization: Bearer <api_key>`.

## Canonical MCP Tools (`@sentryrelay/mcp` & `/api/mcp`)

1. `wait_for_verification_code`: Long-poll up to 45s (`<200ms` push latency) for an unconsumed inbound Email or SMS OTP / magic link (`identity`, `channel`, `sender`, `subject`, `timeoutSeconds`, `consume`).
2. `get_latest_verification_code`: Instant non-blocking Redis ZSET timeline check (`lookbackSeconds`, default 60s).
3. `get_totp_code`: Generate a live 6/8-digit RFC 6238 authenticator code from the Cloud KMS vault with automatic expiring-window rollover (`autoWaitFreshWindow: true`).
4. `list_identities`: List accessible agent Identities (`@in.sentryrelay.com` email addresses, Telnyx US DIDs, and TOTP secret counts).
5. `create_identity`: Provision a new isolated Identity inbox (`<handle>@in.sentryrelay.com`).
6. `store_totp_secret`: Vault an `otpauth://totp/...` URI or Base32 secret into Cloud KMS envelope encryption.

## Machine-Readable Documentation & Discovery Endpoints

- [Complete Single-File LLM Documentation (`/llms-full.txt`)](https://sentryrelay.com/llms-full.txt): Full technical reference, SDK/CLI/MCP code patterns, 1Password co-deployment, and REST API payloads.
- [OpenAPI 3.1 Specification (`/openapi.json`)](https://sentryrelay.com/openapi.json): Canonical machine-readable REST & MCP JSON-RPC schema.
- [MCP Discovery Manifest (`/.well-known/mcp.json`)](https://sentryrelay.com/.well-known/mcp.json): Auto-discovery metadata for local (`stdio`) and remote (`streamable-http`) MCP clients.
- [Installable Agent Skill (`/skills/sentryrelay/SKILL.md`)](https://sentryrelay.com/skills/sentryrelay/SKILL.md): Portable `SKILL.md` definition for autonomous coding and browser agents.

## Human & Developer Guides

- [Quickstart Guide (`https://sentryrelay.com/docs`)](https://sentryrelay.com/docs): 5-minute setup for Identities, `@in.sentryrelay.com` email routing, TOTP vaulting, and SDK/CLI usage.
- [MCP Server Reference (`https://sentryrelay.com/docs/mcp`)](https://sentryrelay.com/docs/mcp): Configuration for Claude Code, Claude Desktop, Cursor, Windsurf, and hosted `/api/mcp`.
- [Playwright, Stagehand & 1Password Guide (`https://sentryrelay.com/docs/guides/playwright-stagehand`)](https://sentryrelay.com/docs/guides/playwright-stagehand): End-to-end headless browser 2FA automation and 1Password + Browserbase co-deployment.
- [Email Forwarding, Agency Isolation & Human-Fallback (`https://sentryrelay.com/docs/guides/email-forwarding`)](https://sentryrelay.com/docs/guides/email-forwarding): Forwarding Gmail/Google Workspace/M365 to `<slug>@in.sentryrelay.com`, `scopedIdentityIds` client isolation, and Human-Fallback Safety Bridge™.
- [REST API Reference (`https://sentryrelay.com/docs/api-reference`)](https://sentryrelay.com/docs/api-reference): Interactive endpoint reference with full `POST`/`PATCH` request and response schemas.