EventOptions Platform — URLs & Artefacts

Live URLs

Surface	URL	Status
Platform app & admin	api.eventoptions-platform.workers.dev	200 · Live
— Sign in	/login	200
— Public event page (demo)	/e/demo	Live
— Health check	/health	200
JSON API v1	/api/v1	401 · Key required
MCP server Claude	eo-mcp.eventoptions-platform.workers.dev	9 tools live
Design system review	eventoptions-design-review.pages.dev/review/	200
On-site offline PWA (spike)	eventoptions-onsite-spike.pages.dev	200

Demo access & notes

Demo workspace access

Admin loginadmin@demo.eventoptions.co.za

PasswordShared with the team separately (not published here).

API keyDemo key seeded in the repo (scripts/seed.mjs) — request if needed.

MFAOff on the demo account for frictionless testing. Turn on per-account in Settings → Two-factor.

Two things to know

BRS Word document is not in git — it lives in EventOptions' OneDrive by design; the repo holds Markdown requirements and real configs.
MCP connector needs OAuth to attach in Claude web — it works over raw JSON-RPC today but isn't web-connectable until MCP OAuth is built (an open item, with the audit-log viewer).

MCP server — drive the platform from Claude

Endpointhttps://eo-mcp.eventoptions-platform.workers.dev

ProtocolJSON-RPC 2.0 (MCP) · 9 tools live

Exposes the API as tools so Claude can run the whole journey in natural language — admin config, a delegate registering, and on-site check-in:

Tool	Role it serves
`list_events` · `create_event` · `update_event` · `get_event`	Admin — event setup
`add_question`	Admin — registration form
`register_delegate`	Delegate — the user journey
`list_delegates`	Admin / support
`check_in`	On-site / support
`get_reports`	Admin — totals

Status: live over raw JSON-RPC (tested end-to-end). Adding it as a custom connector in Claude web needs OAuth on the server — that's a tracked open item; until then it drives the demo tenant via its API key.

Repository & deployments

Item	Reference
Git repository	github.com/Event-Options/eventoptions-platform
Cloudflare account	e30587b9…519 · Workers + Pages + Hyperdrive
Worker · `api`	The platform — public pages, admin, and `/api/v1`
Worker · `eo-mcp`	MCP server (service-bound to `api`)
Pages · design review	Design system sign-off microsite
Pages · onsite spike	Offline check-in PWA de-risk spike
Database	Postgres (Neon dev) · row-level security · `app_rls` least-privilege role · 10 migrations

Documents — in `docs/`

Document	Purpose
AUTH-Architecture.md	Identity, roles & MFA design; SEC-04 gap tracker
Security-Compliance-Gap-Map	Gap-map answering the blue-chip vendor questionnaires (.md + .docx)
BRS-SEC-Addendum.md	Security requirements SEC-01…12
BRS-Change-Assessment.html	Scope-change review vs. baselined BRS
Architecture.html / .docx	System architecture
Onsite-Offline-Architecture.html	On-site module technology & offline model
Feature-Parity-Spec · Build-Breakdown · Code-Inventory	Parity mapping, build plan and code inventory
Product-Naming-Options.html / .docx	Product naming one-pager
GitHub-Setup-Guide.docx	Repo & contributor onboarding

Design system & notable code

Design system — `design/`

brand-kit.html — visual brand kit (logo, colour, type)
tokens.css · palette.md — design tokens & colour reference
system/ — component library (Claude Design export)
review/ — the sign-off microsite (linked above)

Auth & security — `src/auth/`

roles.ts — 6-role model + permission matrix
mfa.ts — email OTP (TOTP-ready)
audit.ts — access/change audit log (SEC-04)
session.ts · apikey.ts · password.ts — sessions, API keys, PBKDF2