Superzero gives an application its database, hosting, authentication and mobile push from a single declarative file. No dashboard steps, no console clicking, no second vendor. An agent writes one file and runs one command.
Writing the code stopped being the bottleneck. Connecting the infrastructure did — and that work lives in dashboards, which is exactly where agents are weakest.
SMS authentication and push notifications are the real hole. Outside Firebase, essentially no modern developer platform has either. Push in particular costs almost nothing to run — APNs and FCM are free — and no competitor offers it.
The schema is strict: unknown keys are rejected rather than silently
ignored, so a typo fails loudly instead of quietly doing nothing. Secrets are
$SECRET references — never values in the file.
import { defineApp } from '@superzerodev/config'
export default defineApp({
name: 'shopping-app',
region: 'ap-northeast-1',
database: { extensions: ['pgvector'] },
compute: {
framework: 'auto', // detected by Nixpacks
envFrom: ['database', 'auth'],
idleTimeout: '15m', // scale to zero
},
auth: {
providers: ['email', 'google'],
},
push: {
ios: { bundleId: 'com.example.shop', keyId: '$SECRET', teamId: '$SECRET' },
// projectId is the Firebase project id, not the package name
android: { packageName: 'com.example.shop', projectId: 'shop-12345' },
},
})
$ superzero plan + database:default create Neon project (postgres, pgvector) + compute:default build and start container + auth:default enable email, google, sms(JP) $ superzero apply ok database:default ready 4.2s ok compute:default ready 38.1s ok auth:default ready 0.9s https://shopping-app.superzero.dev
No prompts, no TTY assumptions, no browser step. The same operations are
exposed as MCP tools — superzero_plan, superzero_apply,
superzero_verify, superzero_status — so an agent uses the
product without shelling out at all.
A human reads a stack trace and infers the next move. An agent needs that
move as data. Every failure returns a stable code and a suggestedFix naming
the command to run and what to change.
This is the discipline the whole product is organised around: if a failure cannot say how to recover, it is not finished.
{
"code": "COMPUTE_CONTAINER_EXITED",
"message": "The container started but exited immediately (id: c2a4f9b2e1de).",
"suggestedFix": {
"command": "superzero logs",
"description": "Read the container logs to see why the process exited.
Set compute.startCommand in superzero.config.ts if the
framework was detected incorrectly."
}
}
No card is needed to sign up.
You can stay on Free indefinitely. Pro is charged on the day you register a card and
renews monthly. You can cancel at any time; cancellation takes effect at the end of the
current billing period, and fees for periods already elapsed are not refunded.
We accept Visa / Mastercard / American Express / JCB / Diners Club / Discover. Payments are processed by Stripe, Inc.; we never receive your card
number.
Full terms are in the Terms of Service and, for Japanese law, the
特定商取引法に基づく表記.
This is a P0 prototype. What follows is what has actually been run end to end, not a roadmap.
| Capability | State | Verified against |
|---|---|---|
| Provisioning engine | working | plan / apply / destroy, idempotent re-apply, partial-failure recovery |
| Postgres | working | Real Neon projects created and deleted through the API |
| Container hosting | working | Nixpacks build, Docker Engine API, Caddy routing, scale-to-zero activator |
| Secret storage | working | Envelope encryption against real AWS KMS |
| Auth (email) | working | Argon2id and JWT, from apply through to a session |
| Auth (Google, Apple) | blocked | Implemented with PKCE, state and nonce checks. Works once the credentials are set
with superzero secrets set; not yet verified against the real providers |
| CLI and MCP | working | Both drive a full apply against the control plane |
| SMS OTP | working | Delivered to and verified on a real Japanese handset (2026-09-10), with five abuse-prevention layers |
| Push (APNs, FCM) | blocked | Declaring and verifying work; sending awaits APNs and FCM credentials |
Machine-readable descriptions of this project, kept in step with the source:
| /llms.txt | Short index. What this is, and where the detail lives. |
| /llms-full.txt | Full reference: config schema, commands, MCP tools, error codes. |