com.shipstatic/mcp

Est-ce que com.shipstatic/mcp est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.shipstatic/mcp » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 15 outils

• deployments_delete≈ 240 tokens

  Permanently deletes a deployment and its files.

  Paramètres, retour & exemple (1)

  Paramètres

  • deployment · string · requis
    Deployment hostname to delete (e.g. "happy-cat-abc1234.shipstatic.com")

  Exemple d'appel

  {"name": "deployments_delete", "arguments": {"deployment": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "deployment": "texte"}}

• deployments_get≈ 710 tokens

  Get deployment details including URL, status, file count, size, labels, and password protection state.

  Paramètres, retour & exemple (1)

  Paramètres

  • deployment · string · requis
    Deployment hostname (e.g. "happy-cat-abc1234.shipstatic.com"). Returned by deployments_upload or deployments_list.

  Exemple d'appel

  {"name": "deployments_get", "arguments": {"deployment": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "via": "texte", "size": 1, "files": 1, "config": true, "labels": [], "status": "texte", "created": 1, "expires": "texte", "password": true, "deployment": "texte", "screenshot": "texte"}}

• deployments_list≈ 841 tokens

  List all deployments with their URLs, status, labels, and password protection state. The response's `cursor` is null on the last page; pass it back as `cursor` to fetch the next.

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
    Maximum number of items to return in one page. Omit for the server default.
  • cursor · string · optionnel
    Opaque position from the previous response's `cursor` field; omit for the first page.

  Exemple d'appel

  {"name": "deployments_list", "arguments": {"limit": 1, "cursor": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cursor": "texte", "deployments": []}}

• deployments_set≈ 740 tokens

  Update deployment labels. Replaces all existing labels.

  Paramètres, retour & exemple (2)

  Paramètres

  • labels · array · requis
    Labels to set. Replaces all existing labels. Pass empty array to clear.
  • deployment · string · requis
    Deployment hostname (e.g. "happy-cat-abc1234.shipstatic.com"). Use deployments_list to find deployments.

  Exemple d'appel

  {"name": "deployments_set", "arguments": {"labels": [], "deployment": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "via": "texte", "size": 1, "files": 1, "config": true, "labels": [], "status": "texte", "created": 1, "expires": "texte", "password": true, "deployment": "texte", "screenshot": "texte"}}

• deployments_upload≈ 1443 tokens

  Deploy a static site to a live URL: free, no account or API key required. **File content is plain text by default.** Pass HTML/CSS/JS/JSON/SVG/etc. directly in each file's `content` as a regular string. Only set `encoding: "base64"` per-file for binary content (images, fonts) — do not base64-encode text. Returns the live URL. Without a connected account, the response also includes a one-time claim URL, and the site expires in 3 days unless claimed. Pass `password` to make the site private.

  Paramètres, retour & exemple (5)

  Paramètres

  • ttl · number · optionnel
    Seconds until this deployment expires and the platform reclaims it; omit for one that never does. Only for authenticated deploys — an anonymous deployment already expires on the platform's schedule, and a requested ttl on one is refused. A deployment carrying a ttl cannot be linked to any domain: deploy without one if the site needs a domain.
  • files · array · requis
    Files that make up the site. The site root is implied by these paths.
  • labels · array · optionnel
    Labels for organizing deployments (e.g. ["env:production", "v1.2"]). Each is a word, or a key and a value split by one ":". Lowercase, 3-63 chars, allows . _ - inside a word. Up to 10.
  • password · string · optionnel
    Optional password to gate the deployment behind an unlock prompt (6–128 characters; whitespace significant). Visitors must enter this password before viewing the site, including on any custom domains pointing at it.
  • idempotencyKey · string · optionnel
    Makes this deploy replayable instead of repeatable. A deploy is not naturally idempotent: if a call times out you cannot tell "it never landed" from "it landed and the response was lost", and retrying creates a second deployment. Send the same key on the retry and you get back the deployment the first try made, if it went live in the last 24 hours. A key works only within the account that sent it: without an account it is ignored, and a retry deploys again. Key the ATTEMPT (a run id, a commit sha, a uuid minted before the first try), never one minted fresh on each retry, which would defeat the point.

  Exemple d'appel

  {"name": "deployments_upload", "arguments": {"files": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "via": "texte", "size": 1, "claim": "texte", "files": 1, "config": true, "labels": [], "status": "texte", "created": 1, "expires": "texte", "password": true, "deployment": "texte"}}

• domains_delete≈ 180 tokens

  Permanently deletes a domain.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Domain name to delete (e.g. "www.example.com")

  Exemple d'appel

  {"name": "domains_delete", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"domain": "texte"}}

• domains_dns≈ 413 tokens

  Returns the DNS provider recorded for the domain, if known (e.g. Cloudflare, Namecheap): where its DNS records are configured. Custom domains only, and only while the domain is unverified; once its DNS is right there is nothing left to locate.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Domain name (e.g. "www.example.com"). Must be a domain previously created with domains_set.

  Exemple d'appel

  {"name": "domains_dns", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"dns": "texte", "domain": "texte"}}

• domains_get≈ 844 tokens

  Get domain details including URL, linked deployment, labels, and `status`: the one word saying what the domain needs from its owner (`unverified`, `unlinked`, `live`, `paused`).

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Domain name (e.g. "www.example.com"). Use domains_list to find names.

  Exemple d'appel

  {"name": "domains_get", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "links": 1, "domain": "texte", "labels": [], "linked": "texte", "paused": "texte", "status": "texte", "created": 1, "verified": "texte", "deployment": "texte", "verification": "texte", "verifications": 1}}

• domains_list≈ 962 tokens

  List all domains with their URLs, linked deployment, and `status`. The response's `cursor` is null on the last page; pass it back as `cursor` to fetch the next.

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
    Maximum number of items to return in one page. Omit for the server default.
  • cursor · string · optionnel
    Opaque position from the previous response's `cursor` field; omit for the first page.

  Exemple d'appel

  {"name": "domains_list", "arguments": {"limit": 1, "cursor": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cursor": "texte", "domains": []}}

• domains_records≈ 377 tokens

  Returns the DNS records to configure at the domain's DNS provider. Call after domains_set. Custom domains only: a ShipStatic domain has no records to configure.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Domain name. Must be a domain previously created with domains_set.

  Exemple d'appel

  {"name": "domains_records", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"apex": "texte", "domain": "texte", "records": []}}

• domains_set≈ 1018 tokens

  Create or update a domain: a ShipStatic domain (e.g. "yourname.shipstatic.com"), live as soon as a deployment is linked, or a custom domain (e.g. "www.example.com"), which needs DNS records first. Can reserve a name (omit deployment), link it to a deployment, switch deployments, or update labels. For a custom domain, domains_records then returns the DNS records to configure.

  Paramètres, retour & exemple (3)

  Paramètres

  • domain · string · requis
    Domain name: a ShipStatic domain (e.g. "yourname.shipstatic.com") or a custom domain (e.g. "www.example.com")
  • labels · array · optionnel
    Labels for organizing domains (e.g. ["production"]).
  • deployment · string · optionnel
    Deployment to serve on this domain (e.g. "happy-cat-abc1234.shipstatic.com"). Omit to reserve the domain without linking.

  Exemple d'appel

  {"name": "domains_set", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "links": 1, "domain": "texte", "labels": [], "linked": "texte", "paused": "texte", "status": "texte", "created": 1, "isCreate": true, "verified": "texte", "deployment": "texte", "verification": "texte"}}

• domains_share≈ 268 tokens

  Returns a shareable DNS setup URL that needs no API key, for whoever manages the domain's DNS. Custom domains only, and only while the domain is unverified; a verified domain has no setup left to share.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Domain name to generate a share link for. Must be a domain previously created with domains_set.

  Exemple d'appel

  {"name": "domains_share", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "domain": "texte"}}

• domains_validate≈ 336 tokens

  Check if a domain name is valid and available before creating it. Returns the normalized form and availability.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Domain name to check (e.g. "yourname.shipstatic.com" or "www.example.com"). Call before domains_set to check availability.

  Exemple d'appel

  {"name": "domains_validate", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"valid": true, "reason": "texte", "available": true, "normalized": "texte"}}

• domains_verify≈ 334 tokens

  Trigger DNS verification for a custom domain. Call after the user has configured DNS records from domains_records. Custom domains only, and refused once the domain is verified: read domains_get instead. Verification is asynchronous: read the domain again with domains_get to learn the verdict, since its `status` has not moved yet when this returns. A verified domain serves nothing until a deployment is linked with domains_set.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Domain name to verify DNS for. Must be a domain previously created with domains_set.

  Exemple d'appel

  {"name": "domains_verify", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"domain": "texte"}}

• whoami≈ 736 tokens

  Returns your email and name, and the account's plan, usage and caps.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "whoami", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"caps": {}, "name": "texte", "plan": "texte", "email": "texte", "usage": {}}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.shipstatic.com