Pugi

Shows the credit balance of this account in USD, what this key spent today, its daily spend cap, and the price of each tool. Paid tools spend this balance; when it runs out, ask a person to add credit with buy_credits_link, or pay with add_credit (a business purchase).

Returns a card checkout link for this account. A person opens it and pays there. This tool never charges anything by itself. Tax, where it applies, is added at checkout.

A free, passive, read-only check of a public website: HTTPS and the redirect to it, five security headers, cookie flags, and the page's own scripts read for leaked keys. Returns a grade from A+ to F, counts by severity and the most serious finding. 10 checks a day per key. It is not a pentest and does not prove a site is secure.

Draws four whole logos for a business name: the name set as lettering with a drawn mark (a lockup, a wordmark, an emblem and a second lockup), PNG on white, returned as images. New choices also carry a stable, account-scoped logos[].logo_id. Three free calls a day per key (512 px logos), then $0.25 a call from prepaid credit (1024 px logos), charged only when at least one logo comes out; if none d

Lists the apps this account has published, newest first, with their status and live address. Pass project_id to see one project.

Free. Searches the public Pugi catalogue of published sites and apps people built with Pugi. Filter by words in the title or description, tags (a card must carry all of them) and one category. Each result has a title, a short description, tags, a preview image, its public page on pugi.io and a start_from_this_url: the Pugi console with a brief for a new project like it (a person signs in there; it

Checks a public GitHub repository branch for leaked secrets, vulnerable or malicious dependencies and risky code, and returns each finding with its severity, rule, file and line (or package) and a short fix hint, plus a summary. No code is run. $1 from prepaid credit, charged only when the check finishes; a failed check costs nothing. Pass an idempotency_key: a check can take a few minutes, and wh

Builds a web app from a brief using the same Vite scaffold and metered runner as build_site. Returns a job_id; use job_status for progress and a preview, edit for changes and publish to put it live. A verified security check of the pushed commit must pass before the app is delivered. Billed by usage, never above max_usd (default 5, from 1 to 25 USD); the usual minimum estimate is $8, not a fixed c

Builds a website from a brief in a Pugi workspace and returns a job_id. Billed by usage, never above max_usd (default 5, from 1 to 25 USD). max_usd is reserved from your credit before the build starts and the unused part is released when it ends; a build that produces nothing costs nothing. The answer includes estimate_usd_range from recent builds. A build takes several minutes: the call waits up

Makes one change to a site or app this account built with build_site or build_app, in the same workspace, and returns a job_id. Billed by usage, never above max_usd (default 2, from 0.5 to 25 USD); a change that touches nothing costs nothing. Follow it with job_status like a build.

Free. The state of a build_site, build_app or edit job: running, finished, stopped (at its spending limit, what was built is kept) or failed; a short progress line; charged_usd so far (final once the job ends); and, when it is built, a view-only preview_url that only shows the site and expires after 15 minutes (call again for a fresh one).

Free. Puts a site this account built live on its pugi.app address, after the same security check of the exact code every Pugi publish runs. The account's hosting rules apply (the number of live apps it may have). Answers the live url, or status "building" while the address comes up (then use publish_status).