diff --git a/docs/api.md b/docs/api.md
index a9b7243..80f69b4 100644
--- a/docs/api.md
+++ b/docs/api.md
@@ -1,6 +1,10 @@
 # Direct product API
 
 Local API root: `http://127.0.0.1:18000/nl2sql/api`.
+Hosted API root: `https://futuresmart.ai/database-agent/api`, with the same routes
+below and an interactive reference at
+[/database-agent/api/docs](https://futuresmart.ai/database-agent/api/docs). The
+hosted `https://app.futuresmart.ai/nl2sql/api` root keeps working.
 Interactive reference: [/nl2sql/api/docs](http://127.0.0.1:18000/nl2sql/api/docs).
 Machine contract: [/nl2sql/api/openapi.json](http://127.0.0.1:18000/nl2sql/api/openapi.json).
 The UI calls the same product API through its same-origin proxy. MCP clients
diff --git a/docs/mcp.md b/docs/mcp.md
index 9f55ead..b40e351 100644
--- a/docs/mcp.md
+++ b/docs/mcp.md
@@ -52,7 +52,7 @@ curl -s -X POST "http://127.0.0.1:18000/nl2sql/api/v1/agents/$AGENT_ID/api-keys"
 
 | Setting | Purpose |
 |---|---|
-| `DATABASE_AGENT_URL` | API root; default `http://127.0.0.1:18000/nl2sql/api`. Plain HTTP is refused for non-loopback hosts unless `DATABASE_AGENT_ALLOW_INSECURE_HTTP=1` |
+| `DATABASE_AGENT_URL` | API root; default `http://127.0.0.1:18000/nl2sql/api`. For the hosted product use `https://futuresmart.ai/database-agent/api` with a key issued there. Plain HTTP is refused for non-loopback hosts unless `DATABASE_AGENT_ALLOW_INSECURE_HTTP=1` |
 | `DATABASE_AGENT_AGENT_KEYS` | `AGENT_ID=KEY` pairs, comma- or newline-separated. Recommended |
 | `DATABASE_AGENT_API_KEY` | Operator (master) key, `FASTAPI_SECRET_KEY`. Reaches every agent; only for a trusted single-operator installation |
 | `DATABASE_AGENT_TIMEOUT_SECONDS` | Per-request timeout; default 180 |