Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "submitator": {
      "type": "http",
      "url": "https://mcp.submitator.com/mcp",
      "headers": {
        "Authorization": "Bearer ${api_key}"
      }
    }
  }
}

claude mcp add --transport http submitator https://mcp.submitator.com/mcp --header "Authorization: Bearer ${api_key}"

[mcp_servers.submitator]
url = "https://mcp.submitator.com/mcp"
bearer_token_env_var = "api_key"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "submitator": {
      "type": "remote",
      "url": "https://mcp.submitator.com/mcp",
      "enabled": true,
      "headers": {
        "Authorization": "Bearer {env:api_key}"
      }
    }
  }
}

{
  "mcpServers": {
    "submitator": {
      "type": "http",
      "url": "https://mcp.submitator.com/mcp",
      "headers": {
        "Authorization": "Bearer ${api_key}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=submitator&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWNwLnN1Ym1pdGF0b3IuY29tL21jcCIsImhlYWRlcnMiOnsiQXV0aG9yaXphdGlvbiI6IkJlYXJlciAke2FwaV9rZXl9In19"
}

{
  "servers": {
    "submitator": {
      "type": "http",
      "url": "https://mcp.submitator.com/mcp",
      "headers": {
        "Authorization": "Bearer ${api_key}"
      }
    }
  }
}

{
  "mcpServers": {
    "submitator": {
      "httpUrl": "https://mcp.submitator.com/mcp",
      "headers": {
        "Authorization": "Bearer ${api_key}"
      }
    }
  }
}

extensions:
  "submitator":
    enabled: true
    name: "submitator"
    type: streamable_http
    uri: "https://mcp.submitator.com/mcp"
    headers:
      "Authorization": "Bearer ${api_key}"
    timeout: 300

Placeholders to fill from your own secret store: ${api_key}. The registry never accepts secret values.

Quality 76 / 100good

protocol88 · weight 25

pass
protocol.modernsupports 2026-07-28 (server/discover)
pass
protocol.statelessanswers without a session
pass
protocol.transportstreamable HTTP
warn
protocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every use

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene93 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations23 of 23 tools declare readOnlyHint or destructiveHint
warn
tools.directory_hints12 of 23 tools declare all four hints; missing: whoami (idempotentHint); get_report (idempotentHint); project_directories (idempotentHint); …
pass
tools.token_costabout 6,449 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability25 · weight 15

warn
stability.changes19 tool changes in 30 days
fail
stability.rug_pull3 tools kept their name but changed most of their description in 30 days; review before trusting them

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvabledeps.dev does not know [email protected]

23 tools, about 6,449 tokens to load them all · tool set 3b06d37e25a0 · tools last changed 2026-10-31 · checked 2026-11-07 16:55 UTC

Tool changes

2026-10-31get_share_linkchangedannotations
2026-10-31get_reportchangedannotations
2026-10-31create_reportchangeddescription
before
Builds a PDF or XLSX report of a project, branded for the agency. Building takes a moment: then call get_report.
after · 70% of words in common
Builds a PDF or XLSX report of a project, branded for the agency. Building takes a moment; get_report says when it is ready.
2026-10-31verify_badgechangeddescription
before
Checks the client's site for the badge now. Up to 10 checks an hour per project, so check once after the client says it is installed.
after · 56% of words in common
Checks the client's site for the badge now. Each project gets up to 10 checks an hour.
2026-10-31get_badgechangeddescription, annotations
before
The agency-branded badge some directories require on the client's site: its status, a message to forward to the client, and install code for one platform. Call without platform to see the platforms.
after · 77% of words in common
The agency-branded badge some directories require on the client's site: its status, a message to forward to the client, the platforms it has install code for, and the code for the one named in platform.
2026-10-31list_eventschangeddescription, annotations
before
Changes to projects and listings. The feed keeps 90 days and reads oldest first, so one call scans up to 1,000 events from the cursor (or from the start) and returns the newest ones since `since` (7 days ago by default). Keep next_cursor and pass it next time to read only what came after. For the current state of a project, get_project and list_listings are cheaper.
after · 83% of words in common
Changes to projects and listings. The feed keeps 90 days and reads oldest first, so one call scans up to 1,000 events from the cursor (or from the start) and returns the newest ones since `since` (7 days ago by default). Passed back in a later call, its next_cursor reads only what came after. For the current state of a project, get_project and list_listings are cheaper.
2026-10-31list_listingschangedannotations
2026-10-31add_directorieschangeddescription, input schema, annotationsmeaning changed
before
Submits a launched project to more directories from its free allowance (no launch is spent). Call preview_launch with the same arguments first and get the user to agree. An include longer than the free allowance answers allowance_exhausted; a directory already listed answers invalid_directories.
after · 42% of words in common
Submits a launched project to more directories from its free allowance (no launch is spent). Refuses unless confirm_selected equals the directory count preview_launch returns for the same arguments. With a live key, a client on MCP protocol 2026-07-28 that supports elicitation also gets a question to confirm, and the answer does not pass through the model. This remote server keeps no session, so a client on an earlier protocol version is not asked. An include longer than the free allowance answers allowance_exhausted; a directory already listed answers invalid_directories.
2026-10-31launch_projectchangeddescription, input schemameaning changed
before
Starts submissions and spends one launch of the agency (a test launch with a sbm_test_ key). Call preview_launch with the same arguments first and get the user to agree; confirm_selected is the count they agreed to. With a live key, clients that can ask their user get a confirmation question too.
after · 32% of words in common
Starts submissions and spends one of the agency's paid launches; with a sbm_test_ key it spends a test launch and submits nothing. Refuses unless confirm_selected equals the directory count preview_launch returns for the same arguments. With a live key, a client on MCP protocol 2026-07-28 that supports elicitation also gets a question to confirm, and the answer does not pass through the model. This remote server keeps no session, so a client on an earlier protocol version is not asked.
2026-10-31project_directorieschangedannotations

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 100 / 100

provenance100

liveness100

freshness100

hygiene100

+repository +namespace-matches-repo +dns-namespace +website +reachable +uptime-100% +updated-7d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

[email protected] npmthis version is not known to the dependency resolver

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://mcp.submitator.com/mcp` streamable-http	api_key `${api_key}`	yes	100%	295 ms	2026-07-28	2026-11-07

package	registry	version	runtime	secrets
`submitator-mcp`	npm	0.1.1	–	`SUBMITATOR_API_KEY`

Tools (23)

`add_directories`destructive	Submits a launched project to more directories from its free allowance (no launch is spent). Refuses unless confirm_selected equals the directory count preview_launch returns for the same arguments. With a live key, a client on MCP protocol 2026-07-28 that supports elicitation also gets a question to confirm, and the answer does not pass through the model. This remote server keeps no session, so a client on an earlier protocol version is not asked. An include longer than the free allowance answers allowance_exhausted; a directory already listed answers invalid_directories.
`add_screenshot`	Adds one screenshot to a project (5 at most), from a public image URL. Each call adds another one: a repeated call adds the same image twice.
`create_project`	Creates a project for a client's product from its URL. Name, tagline and description are filled from the site in the background when left out. Costs nothing: a launch is spent only by launch_project.
`create_report`	Builds a PDF or XLSX report of a project, branded for the agency. Building takes a moment; get_report says when it is ready.
`create_share_link`destructive	Gives the project's client page link. Returns the current link when there is one; replace: true issues a new link and turns the old one off.
`delete_draft`destructive	Deletes a project that was never launched. A launched project cannot be deleted.
`delete_share_link`destructive	Turns the project's client page link off. Anyone holding it sees nothing afterwards.
`find_directories`read-only	Searches the directories Submitator submits to, highest Domain Rating first, or reads one by id. Before the agency first buys launches, only the top 20 are shown.
`get_badge`read-only	The agency-branded badge some directories require on the client's site: its status, a message to forward to the client, the platforms it has install code for, and the code for the one named in platform.
`get_project`read-only	One project in full: status, what it waits for, progress counts, allowance, readiness, texts, images and the image candidates found on its site.
`get_report`read-only	Whether a report is ready, and how to get the file.
`get_share_link`read-only	The project's client page link (a read-only progress page in the agency's brand), with its views.
`launch_project`destructive	Starts submissions and spends one of the agency's paid launches; with a sbm_test_ key it spends a test launch and submits nothing. Refuses unless confirm_selected equals the directory count preview_launch returns for the same arguments. With a live key, a client on MCP protocol 2026-07-28 that supports elicitation also gets a question to confirm, and the answer does not pass through the model. This remote server keeps no session, so a client on an earlier protocol version is not asked.
`list_events`read-only	Changes to projects and listings. The feed keeps 90 days and reads oldest first, so one call scans up to 1,000 events from the cursor (or from the start) and returns the newest ones since `since` (7 days ago by default). Passed back in a later call, its next_cursor reads only what came after. For the current state of a project, get_project and list_listings are cheaper.
`list_listings`read-only	A project's listings, one per directory, highest DR first, with status and the live link once published. Or one listing in full by its id.
`list_projects`read-only	Lists the agency projects, newest first. q finds one by part of its name or URL, and external_id by the agency's own id.
`preview_launch`read-only	Free dry run of launch_project (or of add_directories on a launched project) with the same arguments: how many directories it would submit to, what is missing, what would unlock more and what it costs, plus the top and median DR of the auto pick. Its would_submit count is the confirm_selected that launch_project or add_directories requires for the same arguments.
`project_directories`read-only	Every catalog directory as seen by one project: suggested (the auto pick), open, locked (with what unlocks it), excluded or listed. Shows suggested, open and locked by default; the counts cover all.
`remove_image`destructive	Removes the logo ("logo") or one screenshot (its img_ id). A launched project keeps at least its logo and one screenshot.
`set_logo`destructive	Sets or replaces a project's logo from a public image URL, fetched right away (a failed fetch answers image_unreachable).
`update_project`destructive	Changes the project fields it is sent and leaves the others as they are; null clears a field, and a list replaces the whole list. contact_email cannot change after launch, and after launch an edit reaches only the listings that have not been sent to their directory.
`verify_badge`	Checks the client's site for the badge now. Each project gets up to 10 checks an hour.
`whoami`read-only	Shows the agency and mode (live or test) behind the key, its permissions, launches left and the hourly request budget.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "com.submitator/mcp",
  "title": "Submitator",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://mcp.submitator.com/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "Authorization",
          "value": "Bearer {api_key}",
          "isSecret": true,
          "variables": {
            "api_key": {
              "isSecret": true,
              "isRequired": true,
              "description": "Agency API key (sbm_live_ or sbm_test_)"
            }
          },
          "isRequired": true,
          "description": "Bearer and your Submitator agency API key"
        }
      ]
    }
  ],
  "version": "0.1.1",
  "packages": [
    {
      "version": "0.1.1",
      "transport": {
        "type": "stdio"
      },
      "identifier": "submitator-mcp",
      "registryType": "npm",
      "environmentVariables": [
        {
          "name": "SUBMITATOR_API_KEY",
          "isSecret": true,
          "isRequired": true,
          "description": "Agency API key from the Submitator agency console (sbm_live_ or sbm_test_)"
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/submitator/submitator-mcp",
    "source": "github"
  },
  "websiteUrl": "https://submitator.com/white-label",
  "description": "Launch your clients' products on up to 100 directories each from Claude, ChatGPT, Cursor or VS Code."
}