How ArduMaker works

What each tool does, what changes on your server and how to verify it. Written from the code, for people and AI agents.

For AI agents

Every document is also available in Markdown, and the full index is in llms.txt. The MCP tool reference with its parameters is at /mcp/docs.

MCP reference · llms.txt

Servers and infrastructure

Linux VPS with root, deploys, containers, databases, networking and everything that runs on your server.

  • VPS servers: Your own Ubuntu Linux server with root, the plan's resources and full control from the dashboard or over MCP.
  • Web terminal: VPS console in the browser that stays alive when you disconnect: tmux inside the server, with per-user permissions.
  • Docker: Docker daemon on the VPS and apps as Compose projects: image, private registry, repo or Compose, with optional HTTPS.
  • GitHub deploy: Clones, builds and publishes a GitHub repo on the VPS; redeploys on every push, phase history and rollback.
  • n8n: n8n in queue mode on Docker, with workers, task runners, its own PostgreSQL and Redis, HTTPS and updates with backup.
  • WordPress: Native WordPress sites with their own PHP-FPM and MySQL, HTTPS, backups, staging, migration and full editing over MCP.
  • WooCommerce: WooCommerce store on your WordPress: products, orders, customers, shipping, taxes and reports, also over MCP.
  • Elementor: Elementor visual builder on your WordPress: pages, templates and global styles editable element by element over MCP.
  • PostgreSQL: PostgreSQL databases on the VPS with their own least-privilege user, TLS and external access limited by an IP allowlist.
  • MySQL: MySQL 8 or MariaDB databases on the VPS with their own TLS-only account, grants on its database only and IP-based external access.
  • Redis: Native Redis, one per VPS, with its own ACL user, RDB persistence, TLS and external access limited by an IP allowlist.
  • Database manager: Browse and edit the VPS PostgreSQL and MySQL from the dashboard or over MCP, through a private tunnel, with guards and auditing.
  • Nginx: Two-layer reverse proxy: TLS on the host and per-domain server blocks inside the VPS, with testing and automatic rollback.
  • SSL certificates: HTTPS for every VPS domain: the ArduMaker zone wildcard or a Let's Encrypt certificate issued when the domain is activated.
  • Domains and DNS: Company DNS zones in Cloudflare, records with guards for MX, NS and apex, and subdomains of the ArduMaker zone.
  • Firewall and ports: VPS port forwards, SSH with expiry and allowed or excluded IP lists in the host firewall.
  • systemd services: Create, edit, control and delete systemd services on a VPS, with rollback if they fail to start and journal logs.
  • Scheduled tasks: Commands on a schedule on the VPS through a systemd service and timer, with minute shortcuts, manual runs and logs.
  • Backups: Complete weekly backup of every VPS without stopping it, with 4 kept, manual backups and a download link valid for 72 hours.
  • SSH tunnels: Persistent SSH tunnel between two VPS with autossh: a receiver service shows up on the initiator's localhost without being exposed.
  • Monitoring: VPS status measured by its agent, nginx, systemd and task logs, live network and 30-day uptime on the status page.
  • Linux users: System users on the VPS with a private home, optional sudo, forced password change and deletion with confirmation.

AI and agents

The MCP server, its permissions and the AI services: model router, search and code review.

  • MCP server: MCP server with OAuth and human approval so AI agents can operate ArduMaker, with profiles, safe retries and limits.
  • MCP agent permissions: What an MCP agent can do: its human's permissions, scope by project and VPS, read-only mode and operations that are always forbidden.
  • Router IA: OpenRouter keys in the company's name, with usage charged to the ArduMaker balance and automatic pause on negative balance.
  • Search API: Web search API for apps and agents: search, extract, crawl, map and parallel requests, charged to the company balance.
  • AI keys: Create Router IA keys with a spending cap, a token shown only once, limits for new companies, revocation and reactivation.
  • Code checker: The `ardumaker check` binary: ArduMaker standard rules on your repository, Git hooks and JSON output for CI and AI agents.
  • Agent audit: Log of every MCP agent call with its result, ongoing operations and command history, without storing values.

Projects and companies

Each company's workspace: projects, stages, tasks, files, permissions and signatures.

  • Companies: The team and billing container: admins, members, associated projects and closure reversible for 30 days.
  • Projects and kanban board: Projects with stages and tasks on a six-column board, computed progress and reversible deletion.
  • Stages: Phases that group tasks, with order, dependencies, board column and average progress.
  • Tasks: Tasks with owner, hours, dates, priority and comments that schedule themselves within the owner's working hours.
  • Checklists: Steps inside a task that compute its progress automatically and can reference project attachments.
  • Dependencies: Which stage or task waits for which: no cycles, they order the board and set the earliest day a task can be scheduled.
  • Project calendar: The project timeline with each task in its owner's real working hours, plus team meetings.
  • Attachments: Project links, files and notes in folders, with comments, secret attachments and authenticated downloads.
  • Notes and specifications: Project text notes for specs, decisions and access details, with attached files and MCP reading.
  • Project templates: A company's mould for its projects: roles, policies, folders and notes copied into each new one.
  • Roles and permissions: Per-project roles with five levels across fourteen sections, trimming access without ever adding permissions.
  • Action audit log: Each project's history: who created, edited, deleted, restored or purged what and when, people and MCP agents.
  • Document signing: Project policies and documents signed with name and signature, with immutable versions and a verifiable PDF.
  • Financial management: Project budget, agreements, collections, payments and expenses, with each person seeing only what their role opens.

Meetings and productivity

Scheduling, Google meetings, recordings, transcripts and summaries.

  • Booking links: A public link so anyone can book a free slot in your schedule or a project's, with Meet and email notices.
  • Google Calendar: Two-way sync with Google Calendar: events that reduce availability and tasks that appear in your calendar.
  • Google Meet: A Google Meet link generated when creating events, project meetings or bookings, shared by all participants.
  • Shared availability: Crosses several people's real availability to find a common slot, without showing what fills anyone's schedule.
  • Meeting recording: Record meetings from Chrome and store them in your profile or a project, with permissions, clips and 30-day deletion.
  • Transcription: Transcription of recorded meetings in one-minute windows, with search, corrections and export.
  • AI summaries: A draft of each meeting with summary, decisions, requirements and possible tasks, each point with its minute.
  • Agreements to tasks: Turns a possible task from a meeting summary into a project task, linked to the minute it was said.

Communication

Professional email, webmail, email API and WhatsApp Business.

  • Professional email: Mailboxes on your company domain, with guided DNS (MX, SPF, DKIM, DMARC) and a plan per mailbox.
  • Webmail: Read, send and organise a mailbox's email from the browser, with folders, filters and aliases.
  • SMTP and IMAP: Use ArduMaker mailboxes from any email client over IMAP (993) and SMTP (587).
  • Email API: Send and read email from a program with an `am_` key, through a queue with per-company turns.
  • Email aliases: Extra addresses that forward to a mailbox, temporary aliases and domain-level forwards.
  • Bot accounts: Email addresses for programs, with a real mailbox and their own token, used with the email API.
  • WhatsApp Business API: Send and receive WhatsApp from the company's numbers, with a test sandbox and audio transcription.
  • WhatsApp webhooks: Forward WhatsApp messages and statuses to your own URL, instantly, with a debounce or at intervals.
  • Chat history: Each number's WhatsApp conversations, with messages, files, statuses and transcriptions.

Payments and administration

Balance, top-ups, billing, plans, members, sessions and notifications.

  • Balance per company: Each company has its own balance, the sum of its movements, with automatic charging and an authorised negative margin.
  • Balance top-ups: Add balance to the company with its payment method: it is charged first and only added if it succeeds.
  • Auto top-up: One rule per company: when the balance drops below a minimum, a fixed amount is charged to the payment method.
  • Invoicing: Company tax details, movement history and PDF invoices for payments.
  • Service usage: Which services the company has, at what price, what it uses on demand and how to prepay months.
  • VPS plans: The plans that set each VPS's CPU, RAM and disk, who can choose them and how to change plan.
  • Member management: Add people to the company, give them admin or member role and remove them, with rules that protect the account.
  • Sessions and devices: One session per device, with its IP, single or bulk sign-out, IP blocking and CLI authorisation with a code.
  • Notifications: Platform emails by category: who gets them, how often and how they are chosen or turned off.

Community and extra services

Profiles, blog, creator programs, schools and the rest of the account.

  • Public profiles: A public page per person with their ArduMaker activity, integrations and blogs.
  • Personal blog: Write and publish section-based articles, with files and translation to Spanish, English and Portuguese.
  • Creator program: For people who recommend ArduMaker: application, referral link, monthly commission, cashback for referrals and free services.
  • Ambassador program: The collaborator program category with the most benefits: higher commission, more free services and more usage credit.
  • Schools: Program for educational institutions: agreed plans for students, invitation links, wallet and commission.
  • Custom development: ArduMaker's commercial service to build custom software inside the customer's company.
  • External sign-in: Sign in and link the account with Google, GitHub or 42, with clear rules to merge or move accounts.
  • Trash: What is deleted in a project or company can be restored for 30 days before it is removed for good.