Appifio Creator · Lesson T12 · Technical
sandbox · token · bridge
Three MCP ideas people often mash into one. Separate them and you’ll see why the IDE “already fixed” the site while live hasn’t changed - and why you get 403 after ~24 hours.
Goal: Define sandbox / token / bridge; know the 60-day and ~24h limits; follow the required UI order.
Before: H02, T01 · After: K / X series · UI: Enable MCP integration · Save MCP state · Create / resume session · Create token · Revoke · Download Appifio Aura MCP package (.zip)
1. Three-layer diagram
2. Glossary
| Term | Meaning | UI label |
|---|---|---|
| Sandbox | Temporary file space for the IDE - not the live site yet | Edit sandbox session |
| Token | Key for the local bridge | Create token · Revoke · Token label |
| Bridge / MCP package | Zip with bridge runtime, mcp-config examples, and README | Download package… (.zip) |
| Session ID | Session identifier; "No session yet" if empty | Session ID |
| Need API key first | MCP depends on the Backend key | no_api_key |
3. Steps (required order)
- "Backend" tab - have an API key (T06).
- "MCP" tab → enable "Enable MCP integration" → "Save MCP state".
- "Create / resume session" (required before token - UI: “Create an edit sandbox session before creating a token”).
- Token label (e.g. placeholder Dev machine) → "Create token" → copy immediately.
- Enter the extract folder (no spaces) → "Download Appifio Aura MCP package (.zip)".
- Configure the IDE with Method A
/or Method B escaped paths · Node 18+. - After IDE edits: open Creator → review "Changes" → "Save changes" to go live.
4. Comparisons · Limits · Security
- Cursor / Claude MCP servers: same protocol; Appifio adds sandbox → Creator Save.
- Git remote push: MCP edit ≈ local commit; Save changes ≈ push to production.
You can: use a strong IDE on the sandbox. You cannot: have MCP publish by itself; see the token a second time; keep the bridge forever (~24h).
Security: keep zip/token private; if leaked → "Revoke"; never commit mcp-config with a token to a public repo.
5. Issues · Tips · Series T checklist
| Issue | Fix |
|---|---|
| 403 after a day | Download the zip package again (~24h) |
| IDE edited but visitors don’t see it | Save changes from Creator |
| Windows JSON path errors | Method A with forward slashes / |
End-of-series T checklist (T01-T12):
- Can you tell virtual disk / live, flat / indexed, Easy / Advanced Soft Storage apart?
- Do you know which system files are blocked and when the CMS manifest matters with Aura CMS on?
- Do you pick Checkpoint / History / Versions correctly, and know MCP sandbox ≠ live?
End of series T
Suggested next: series K (hands-on) or X (troubleshooting).
Internal navigation (same language)
Appifio Creator · User guide · T12
