Browser CLI Login for Every Plan and a Hosted MCP Server: RocketFlag 2.12

RocketFlag 2.12 is live today, alongside @rocketflag/cli v1.2.0 and our new hosted Model Context Protocol (MCP) server at https://api.rocketflag.app/mcp/v1.

The short version of what shipped:

• Browser-based CLI login on every plan (rocketflag login), so anyone on Solo, Teams, or Enterprise can sign in through their browser and manage flags across their personal and organisation projects without creating an API token.
• New CLI commands (projects list, flags update, and logout), plus interactive project selection in rocketflag init and --no-browser login for SSH and containers.
• A hosted MCP server (https://api.rocketflag.app/mcp/v1), so AI coding assistants like Claude Code, Cursor, and Antigravity can inspect, create, update, and toggle feature flags over HTTP without running a local npx server.

Sign in to the CLI with your browser on any plan

When we launched @rocketflag/cli in RocketFlag 2.11 last week, Management API commands required a project API token (rf_...), which meant only Teams and Enterprise organisations could create and toggle flags from the terminal. We noted then that user-based login was on the roadmap to bring the full CLI to every RocketFlag user.

With RocketFlag 2.12 and @rocketflag/cli v1.2.0, that is now live on every plan, including Solo (our free tier).

Install or upgrade the CLI globally with Node 22 or newer:

npm install -g @rocketflag/cli@latest

Run rocketflag login and the CLI opens https://console.rocketflag.app/cli/auth in your default browser. Sign in with your usual account (Google, GitHub, email magic link, or Enterprise SAML SSO) and click Authorise CLI:

# 1. Sign in via your browser (saves a 7-day rfu_... session to ~/.config/rocketflag/config.json)
rocketflag login

# 2. List all personal and organisation projects your account can access
rocketflag projects list

# 3. Pick your project and default environment interactively in .rocketflag.json
rocketflag init

# 4. Create, update, toggle, or evaluate a flag
rocketflag flags create checkout_v2 --enabled
rocketflag flags update <flag_id> --percentage 50 --cohort beta-testers
rocketflag flags toggle <flag_id>

How browser-authenticated CLI sessions work:

• One login across all your projects. Browser login mints a 7-day user session token (rfu_...) stored in ~/.config/rocketflag/config.json with 0600 permissions. Unlike a single-project rf_... token, your user session can access all of your personal projects and organisation projects. Run rocketflag projects list to see them, rocketflag init to bind a repo interactively, or pass --project <id> (or ROCKETFLAG_PROJECT) on any command.
• Update rollout percentages, cohorts, and audiences (flags update). The new rocketflag flags update <id> command lets you patch a flag’s state (--on / --off), rollout percentage (--percentage 50), cohorts (--cohort user@example.com or --clear-cohorts), and attached Audience (--audience <id> or --clear-audience) straight from your terminal. Only the flags you pass are modified; omitted fields stay untouched.
• Attributed to you in the audit log. When you create, update, or toggle a flag from a browser-authenticated session, the project audit log records your user name and email directly rather than an API token.
• SSH and headless login (--no-browser). Working on a remote VM, over SSH, or inside a container without a local browser? Run rocketflag login --no-browser to print the authorisation URL, open it on any device, click Authorise CLI, and paste the one-time token into your terminal.
• Session management in the console. Sessions expire automatically after 7 days. You can revoke your current session early with rocketflag logout, or view and revoke active devices at any time under My Account > CLI Sessions in the console.
• Project API tokens (rf_...) for CI/CD. Interactive rfu_... sessions are built for local terminals. For GitHub Actions, deployment pipelines, and headless scripts on Teams and Enterprise, continue using project-scoped rf_... tokens (rocketflag login --token rf_... or ROCKETFLAG_TOKEN).

Hosted MCP server for AI coding agents

Alongside the CLI upgrades, RocketFlag 2.12 introduces a hosted Model Context Protocol (MCP) server on the management plane at https://api.rocketflag.app/mcp/v1.

Because RocketFlag hosts the Streamable HTTP endpoint directly, there is no local package to install and no local Node process to keep running. Point your coding agent at https://api.rocketflag.app/mcp/v1 with a project API token (rf_..., available on Teams and Enterprise, including the 14-day Teams trial), and it can inspect your project, create feature flags while writing your application code, and update or toggle flags in staging without leaving your editor.

Claude Code:

claude mcp add --transport http rocketflag https://api.rocketflag.app/mcp/v1 \
  --header "Authorization: Bearer rf_your_token_here"

Cursor (.cursor/mcp.json):

{
  "mcpServers": {
    "rocketflag": {
      "url": "https://api.rocketflag.app/mcp/v1",
      "headers": {
        "Authorization": "Bearer rf_your_token_here"
      }
    }
  }
}

Antigravity:

agy mcp add --header "Authorization: Bearer rf_your_token_here" rocketflag https://api.rocketflag.app/mcp/v1

The hosted MCP server exposes six tools:

For local coding agents, we recommend creating a Write token under Project > Tokens restricted to your dev or staging environment rather than prod. If an agent tries to modify an environment outside the token’s scope, the MCP server blocks the write and returns an explanation of which environments the token is allowed to touch.

The updated Getting Started with the CLI guide and CLI & MCP Server reference walk through every command, option, and agent configuration.

Give it a spin

Run npx @rocketflag/cli@latest login in your terminal to sign in with your browser on any plan, or grab a project token from Project > Tokens in the console to connect your coding agent to https://api.rocketflag.app/mcp/v1. If you’re new to RocketFlag, the Solo tier is free without a credit card, and Teams is a flat $79/month for your whole organisation. Other tools’ bills go up when you hire, or when your users show up; RocketFlag’s doesn’t.

If you have feedback on the new CLI commands or the hosted MCP server, contact us and let me know.