Tencent Cloud Web Deploy

What the agent's sub-account can and cannot do

• ✓Purchase link preselects the right configuration
• ✓Only picks up the newly purchased instance
• ✓Can check domain availability and price
• ✓Cannot buy a server (verified with DryRun)
• ✓Cannot read real-name identity templates (privacy)
• ✓Health check reports the expected permission matrix
• ✓Permissions are an allow-list, not wildcards
• ✓CLI errors include the action name

Private atomic credential writes, rejects malformed input

• ✓Credentials written privately and atomically
• ✓Non-standard HTTP errors are not treated as success
• ✓Refuses to write through symlinks
• ✓Rejects invalid profile names
• ✓Rejects non-Tencent-Cloud service names

Shows a first-run setup card when no credentials exist

• ✓No credentials → setup card

Real API errors → the right next action

• ✓An empty record list is not a failure
• ✓Billing actions are human-only
• ✓Malformed parameters → fix arguments
• ✓Missing or bad credentials → onboarding
• ✓No ICP filing → switch deployment route
• ✓Parses the action from Chinese denial messages
• ✓Parses the action from English denial messages
• ✓Purchases denied by policy go to a human
• ✓Deleting a CDN zone is human-only
• ✓Unauthorized sensitive service → goes to a human

Runs commands on the server

• ✓Read-only command output and exit codes

Submit, validate and save via a local web page

• ✓Rejects bad input, saves a valid key

TC3 signatures match the official Tencent Cloud SDK

• ✓Signature matches the official SDK byte for byte

Single-use tokens, rejects cross-origin and oversized requests

• ✓Rejects foreign origins and oversized bodies
• ✓Tokens are single-use