Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "public-mcp": {
      "type": "http",
      "url": "https://mcp.spala.ai/mcp",
      "headers": {
        "Accept": "application/json, text/event-stream"
      }
    }
  }
}

claude mcp add --transport http public-mcp https://mcp.spala.ai/mcp --header "Accept: application/json, text/event-stream"

[mcp_servers.public-mcp]
url = "https://mcp.spala.ai/mcp"
http_headers = { "Accept" = "application/json, text/event-stream" }

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "public-mcp": {
      "type": "remote",
      "url": "https://mcp.spala.ai/mcp",
      "enabled": true,
      "headers": {
        "Accept": "application/json, text/event-stream"
      }
    }
  }
}

{
  "mcpServers": {
    "public-mcp": {
      "type": "http",
      "url": "https://mcp.spala.ai/mcp",
      "headers": {
        "Accept": "application/json, text/event-stream"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=public-mcp&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWNwLnNwYWxhLmFpL21jcCIsImhlYWRlcnMiOnsiQWNjZXB0IjoiYXBwbGljYXRpb24vanNvbiwgdGV4dC9ldmVudC1zdHJlYW0ifX0%3D"
}

{
  "servers": {
    "public-mcp": {
      "type": "http",
      "url": "https://mcp.spala.ai/mcp",
      "headers": {
        "Accept": "application/json, text/event-stream"
      }
    }
  }
}

{
  "mcpServers": {
    "public-mcp": {
      "httpUrl": "https://mcp.spala.ai/mcp",
      "headers": {
        "Accept": "application/json, text/event-stream"
      }
    }
  }
}

extensions:
  "public-mcp":
    enabled: true
    name: "public-mcp"
    type: streamable_http
    uri: "https://mcp.spala.ai/mcp"
    headers:
      "Accept": "application/json, text/event-stream"
    timeout: 300

Quality 75 / 100good

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene100 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations16 of 16 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
pass
tools.token_costabout 5,737 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability25 · weight 15

warn
stability.changes9 tool changes in 30 days
fail
stability.rug_pull1 tools kept their name but changed most of their description in 30 days; review before trusting them

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

16 tools, about 5,737 tokens to load them all · tool set aa93f23c7f65 · tools last changed 2026-10-08 · checked 2026-10-20 18:38 UTC

Tool changes

2026-10-08project_get_public_contextchangeddescription, output schemameaning changed
before
AUTH REQUIRED; READ-ONLY. Returns documented MCP handoff fields for one accessible project without exposing tokens, private source code, unrelated customer data, or executable installer arguments.
after · 34% of words in common
For embeddings and similarity search, use Vector fields and native Similarity Search with owner/tenant filters. Do not store search embeddings as JSON arrays or compute cosine similarity in Custom Code. Keep embedding dimensions/model consistent. If pgvector is unavailable, request database administrator setup; do not substitute JSON. Migrating existing embeddings requires approval. Includes native-block and filter guidance, addon discovery, and the requirement to justify narrowly scoped Custom Code. AUTH REQUIRED; READ-ONLY. Returns documented MCP handoff fields for one accessible project without exposing tokens, private source code, unrelated customer data, or executable installer arguments.
2026-10-08addon_listchangeddescription
before
Lists public Spala addons and integrations matching an optional query. Invoke to discover capabilities such as webhooks, outbound HTTP API calls, transactional email, media uploads, and realtime messaging. Returns addon ids, names, descriptions, and tags.
after · 62% of words in common
Lists public Spala addons and integrations matching an optional query. Curated public subset; use project addons_search/addons_get to verify availability and installed status. Invoke for Telegram bots and CRM, webhooks, outbound HTTP API calls, transactional email, media uploads, and realtime messaging. Returns addon ids, names, descriptions, and tags.
2026-10-08docs_searchchangeddescription
before
Searches the public Spala agent-facing documentation index by query. Invoke for setup, OAuth, installer, public-versus-project MCP, pricing, limits, security, templates, addons, or project handoff questions. Returns ranked docs entries with URLs and summaries.
after · 85% of words in common
Searches the public Spala agent-facing documentation index by query. Invoke for setup, OAuth, installer, public-versus-project MCP, pricing, limits, security, templates, addons, native blocks, filters, Custom Code alternatives, or project handoff questions. Returns ranked docs entries with URLs and summaries.
2026-10-08spala_get_onboardingchangedinput schema
2026-10-08project_connectchangeddescription
before
AUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Prepares one accessible Spala project for agent access. Accepts one installer client (codex, roo, claude-code, cursor, a2a); when omitted, returns a client-selection response without executable arguments. Returns a client-specific workspace binding plan: protected one-time bootstrap for Codex, Roo, and Cursor; verifier-bound delegated bootstrap for Claude Code.
after · 66% of words in common
AUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Prepares one accessible Spala project for agent access. Accepts one installer client (codex, roo, claude-code, cursor, a2a); when omitted, returns a client-selection response without executable arguments. Pending projects return project_provisioning with status 202 and retryAfterSeconds; retry the same call within the stated budget. Active projects do not need a manifest before connect. Returns a client-specific workspace binding plan: protected one-time bootstrap for Codex, Roo, and Cursor; verifier-bound delegated bootstrap for Claude Code.
2026-10-08project_createchangeddescription
before
AUTH REQUIRED; WRITES TO THE SPALA CONTROL PLANE. Creates a real Spala project with the supplied project name in an accessible organization. Accepts an organization id when multiple organizations are available and automatically scopes a sole organization. This operation is not idempotent.
after · 76% of words in common
AUTH REQUIRED; WRITES TO THE SPALA CONTROL PLANE. Creates a real Spala project with the supplied project name in an accessible organization. Provisioning is asynchronous; follow the returned retry interval and bounded retry guidance, never create a duplicate. Accepts an organization id when multiple organizations are available and automatically scopes a sole organization. This operation is not idempotent.
2026-09-25project_get_mcp_manifestchangedinput schema, output schema
2026-09-25project_selectchangedinput schema, output schema
2026-09-25project_connectchangedinput schema, output schema

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 92 / 100

provenance85

liveness99

freshness85

hygiene100

+repository +dns-namespace +website +reachable +uptime-97% ~updated-89d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://mcp.spala.ai/mcp` streamable-http	none	yes	97%	564 ms	2025-11-25	2026-10-20

Tools (16)

`account_setup`destructive	AUTH REQUIRED; WRITES MISSING ACCOUNT DATA TO THE SPALA CONTROL PLANE. Fills missing first and last name fields and creates the first company or workspace organization when none exists. Invoke only with real account and organization values supplied by the user.
`account_status`read-only	AUTH REQUIRED; READ-ONLY. Verifies the current public MCP OAuth identity and account readiness. Returns the authenticated identity, available organizations, and exact missing account fields without exposing OAuth or dashboard credentials.
`addon_list`read-only	Lists public Spala addons and integrations matching an optional query. Curated public subset; use project addons_search/addons_get to verify availability and installed status. Invoke for Telegram bots and CRM, webhooks, outbound HTTP API calls, transactional email, media uploads, and realtime messaging. Returns addon ids, names, descriptions, and tags.
`docs_search`read-only	Searches the public Spala agent-facing documentation index by query. Invoke for setup, OAuth, installer, public-versus-project MCP, pricing, limits, security, templates, addons, native blocks, filters, Custom Code alternatives, or project handoff questions. Returns ranked docs entries with URLs and summaries.
`organization_create`destructive	AUTH REQUIRED; WRITES A NEW SPALA ORGANIZATION FOR THE SIGNED-IN ACCOUNT. Creates an additional company or workspace organization using the supplied name.
`project_connect`destructive	AUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Prepares one accessible Spala project for agent access. Accepts one installer client (codex, roo, claude-code, cursor, a2a); when omitted, returns a client-selection response without executable arguments. Pending projects return project_provisioning with status 202 and retryAfterSeconds; retry the same call within the stated budget. Active projects do not need a manifest before connect. Returns a client-specific workspace binding plan: protected one-time bootstrap for Codex, Roo, and Cursor; verifier-bound delegated bootstrap for Claude Code.
`project_create`destructive	AUTH REQUIRED; WRITES TO THE SPALA CONTROL PLANE. Creates a real Spala project with the supplied project name in an accessible organization. Provisioning is asynchronous; follow the returned retry interval and bounded retry guidance, never create a duplicate. Accepts an organization id when multiple organizations are available and automatically scopes a sole organization. This operation is not idempotent.
`project_get_mcp_manifest`destructive	AUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Prepares one accessible project and returns its exact platform-provided project MCP manifest URL, MCP URL, and client-specific workspace binding plan. Accepts one installer client (codex, roo, claude-code, cursor, a2a); when omitted, returns a client-selection response without executable arguments.
`project_get_public_context`read-only	For embeddings and similarity search, use Vector fields and native Similarity Search with owner/tenant filters. Do not store search embeddings as JSON arrays or compute cosine similarity in Custom Code. Keep embedding dimensions/model consistent. If pgvector is unavailable, request database administrator setup; do not substitute JSON. Migrating existing embeddings requires approval. Includes native-block and filter guidance, addon discovery, and the requirement to justify narrowly scoped Custom Code. AUTH REQUIRED; READ-ONLY. Returns documented MCP handoff fields for one accessible project without exposing tokens, private source code, unrelated customer data, or executable installer arguments.
`project_list`read-only	AUTH REQUIRED; READ-ONLY. Lists projects accessible to the authenticated Spala user in one organization. Accepts an organization id when multiple organizations are available and automatically scopes a sole organization.
`project_select`destructive	AUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Compatibility alias for project_connect. Prepares one accessible project and returns the same client-specific workspace binding contract as project_connect.
`spala_get_onboarding`read-only	Returns machine-readable Spala onboarding information for MCP clients. Includes product scope, OAuth metadata, supported installer client identifiers, authenticated project-handoff status, workflow stages, and canonical links.
`spala_get_tool_map`read-only	Returns a machine-readable routing map for Spala MCP clients. Identifies public and authenticated tools, supported installer clients, OAuth endpoints, project handoff rules, and project-MCP entry points.
`spala_help`read-only	Returns a human-readable overview of Spala, canonical start URLs, and the boundary between public discovery and project-scoped backend MCPs. Invoke for product, setup, or integration orientation. This read-only tool requires no authentication and does not access or modify project data.
`spala_start`read-only	AUTH REQUIRED; READ-ONLY STARTUP. Invoke after OAuth to begin Spala account or project setup. Returns a versioned startup phase with account readiness, organizations, safely scoped project discovery, and one explicit next action. Reports missing account fields, automatically scopes a sole organization, and returns all accessible choices when multiple organizations exist.
`template_list`read-only	Lists public Spala backend templates matching an optional query. Invoke to discover available backend starting points such as marketplace, dashboard API, reservation, inventory, or document management. Returns template ids, names, descriptions, and tags.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "ai.spala/public-mcp",
  "_meta": {
    "io.modelcontextprotocol.registry/publisher-provided": {
      "contact": "[email protected]",
      "boundary": "Public MCP handles browser OAuth, authenticated account status, project selection/creation, and idempotent project MCP preparation. Backend resource changes happen on the selected project MCP.",
      "smokeTest": "https://spala.ai/mcp-smoke-test/",
      "maintainer": "Spala AI",
      "publicProfile": "https://spala.ai/mcp-profile/",
      "installManifest": "https://mcp.spala.ai/mcp/install-manifest",
      "projectCreateEffect": "project_create performs a real authenticated project creation.",
      "projectMcpResolution": "Call project_connect, execute its workspace-only project bind argv, and send bootstrap.consumeUrl as the installer's single stdin line. Never place the capability in argv or shell text; do not use project OAuth or install globally.",
      "oauthProtectedResource": "https://mcp.spala.ai/.well-known/oauth-protected-resource",
      "oauthAuthorizationServer": "https://mcp.spala.ai/.well-known/oauth-authorization-server",
      "projectMcpPreparationEffect": "project_connect, project_select, and project_get_mcp_manifest perform an idempotent authenticated control-plane write that verifies access and billing, enables MCP, prepares project agent instructions, and returns one-time installer bootstrap."
    }
  },
  "icons": [
    {
      "src": "https://spala.ai/brand/icon-square-1024.png",
      "sizes": [
        "1024x1024"
      ],
      "theme": "dark",
      "mimeType": "image/png"
    },
    {
      "src": "https://spala.ai/brand/icon-square.svg",
      "sizes": [
        "any"
      ],
      "theme": "dark",
      "mimeType": "image/svg+xml"
    }
  ],
  "title": "Spala Public MCP",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://mcp.spala.ai/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "Accept",
          "value": "application/json, text/event-stream",
          "isRequired": true,
          "description": "Required for raw Streamable HTTP JSON-RPC clients."
        }
      ]
    }
  ],
  "version": "1.0.2",
  "repository": {
    "id": "1297760292",
    "url": "https://github.com/spala-ai/spala-public-mcp",
    "source": "github"
  },
  "websiteUrl": "https://spala.ai/mcp-profile/",
  "description": "Discovery, OAuth, project operations, and exact project MCP handoff for Spala backend projects."
}