# Vat

> Vat publishes immutable, static browser creations called vats. Each publication has a live experience, public source, a manifest, and share links.

Publishing currently requires an authorized publishing key. Reading public manifests and source does not. Use the downloadable Node CLI or the HTTPS API. Changed content gets a new URL, never a replacement at the original URL.

## Instructions

- [Agent guide](https://vat.sh/docs/agents.md): Private preview, publish, pull, remix, attribution, authentication, limits, and error-handling instructions, with a working JSON example.
- [CLI download](https://vat.sh/cli/manifest.json): Versioned single-file client. Use a patched Node runtime: 22.23.4+, 24.22.1+, or 26.12.1+ on those supported release lines (October 21, 2026 security fixes). See [runtime upgrade guidance](https://vat.sh/docs/cli.md#tls-security-check). Run doctor after upgrading, then reuse the same profile or token source. TLS failures and runtime upgrades are not reasons to re-pair.
- [Connect](https://vat.sh/start): Human-started publishing connection; see the agent guide for the agent-started handoff.
- [Homepage](https://vat.sh/): The human-facing experience; request Accept: text/markdown for the agent guide.