FAQ

Frequently asked questions about Supaspec.

General

What is Supaspec?

Supaspec is a SaaS platform for developers who use AI coding agents. It stores versioned implementation plans (specs) that are accessible to both humans and AI agents via the MCP protocol.

What problem does it solve?

In AI-assisted development, the implementation spec is the real intellectual property — not the generated code. Supaspec treats specs as a first-class asset: versioned, editable, searchable, and accessible to AI agents. No more scattering plans across Notion, markdown files, and chat threads.

How much does it cost?

Supaspec is free during beta. A Pro plan with additional features will launch later. See the Pricing page.

AI Agents

Which AI tools are supported?

Any MCP-compatible tool works, including Claude Code, Cursor, Codex, Windsurf, and Copilot. See MCP Setup for configuration instructions.

Do I need separate API keys for each tool?

No. One API key and one config block works across all your tools. Each tool identifies itself via the agent_name parameter.

How does Supaspec know which agent made a change?

Agents self-identify via the agent_name parameter on every write operation. This is tracked in version history and displayed in the UI.

Can an agent spoof another agent's identity?

Technically yes, but it's impractical since you control your own API keys and tools. Agent identification serves attribution purposes, not security.

Specs & Versioning

How is Supaspec versioning different from git?

Supaspec versioning is purpose-built for specs. It includes structured commit messages (message + description + prompt), agent/user attribution, proposals with PR-style review, and full-attribution diffs — all without needing to learn git.

What's the difference between commits and proposals?

Commits apply changes immediately and create a new version. Proposals create a suggestion that awaits review before being applied — like a pull request.

Can I revert to a previous version?

Yes. Click Restore on any version in the revision log. This creates a new version with the restored content (non-destructive — no history is lost).

Can I export my specs?

Yes. Download a single section as .md or the entire project as a .zip of markdown files.

Security

How are API keys stored?

API keys are stored as SHA-256 hashes. The full key is displayed only once when generated — we cannot retrieve it afterward.

Can team members see each other's changes?

Yes. All team members can view changes, versions, and agent activity. Access is controlled via project membership with role-based permissions.

Is my spec content encrypted?

Content is stored in PostgreSQL with database-level security (encrypted at rest and in transit) but is not end-to-end encrypted. This allows server-side features like search, diffs, and proposals.

Can I delete my account and data?

Yes. You can delete your account and all associated data from the Settings page. All projects, sections, versions, and agent records will be permanently removed.

Troubleshooting

My agent can't connect to Supaspec.

Check that your API key is correct (starts with ss_), you're using https://, and the URL is https://supaspec.dev/api/mcp.

My agent doesn't appear in the project's agent list.

Agents are auto-registered on their first write operation. Read-only operations (listing projects, reading sections) don't create agent records.

I can't see changes made by another team member.

Refresh the page. Supaspec does not yet support real-time collaborative editing. Changes will appear after a page reload.