Help me create a GrowSurf referral or affiliate program. Start by reading https://growsurf.com/agent-start.md and follow it as the source of truth. Use your action-capable tools and the GrowSurf REST API to create and configure the program. Before any protected request, I sign up at https://app.growsurf.com/signup and either create an API key or connect GrowSurf to you. If you can speak MCP, connect to https://growsurf.com/.well-known/mcp, which needs no credentials, and use growsurf_program_design_advisor for the design. Consult https://growsurf.com/openapi.json, https://growsurf.com/arazzo.yaml, https://growsurf.com/auth.md, https://growsurf.com/llms.txt, and the linked GrowSurf docs when useful.
Ask me for my website first, and whether this is a referral or affiliate program if I have not said. Read the website, then come back with a complete recommended program: what counts as a referral, the reward structure, who gets rewarded, and where people share. Ask me what I want to change instead of interviewing me setting by setting. Do not pick a reward amount or commission rate yourself. Ask what a converted customer is worth to me, and leave rewards switched off until I confirm the amount and how it gets paid. Pause for me to verify my email before protected API requests. Treat my API key as a secret: keep it in your secret store, and keep it out of chat, logs, screenshots, source files, and shell history. Do not ask me to paste it into chat.
Create and configure the program as DRAFT. Read back the saved resources and summarize what is ready for review. Do not launch or resume the program, add payment details, accept charges, enable or fulfill rewards or commissions, initiate payouts, rotate keys, delete data, or edit or deploy my website or app without separate explicit approval.
If you already have a signed-in GrowSurf connection, with tools such as growsurf_create_campaign, use it. Otherwise, check two things before you ask me anything. If you cannot fetch the linked resources or send HTTPS requests to api.growsurf.com, reply with only this: "I can't send requests to GrowSurf from here, so I can't set up your GrowSurf program. Sign up at https://app.growsurf.com/signup (no credit card required), connect GrowSurf to me in Settings → AI Connections at https://app.growsurf.com/settings#ai-connections, then paste this prompt again." If you can send requests but have no secret store that keeps the API key between turns, reply with only this: "I can send requests to GrowSurf, but I can't keep your GrowSurf API key safe between messages, so I won't set up your program here. Sign up at https://app.growsurf.com/signup (no credit card required), connect GrowSurf to me in Settings → AI Connections at https://app.growsurf.com/settings#ai-connections, then paste this prompt again." A code sandbox in a chat app, such as the Claude or ChatGPT apps, is not a secret store. In either case, do not create the program, do not offer to generate cURL or scripts, and do not plan the program. Never claim that you executed the workflow.