protogrid

Search / to.sprawl/sprawl

Sprawl

R2· OAuth, once

Stand up ops from Cursor/Claude/Codex; fleets keep running after your session ends.

v1.2.0 · active · website · descriptor JSON · versions

An agent can connect after a one-time OAuth consent by a human.Remote endpoint behind OAuth 2. Tokens stay with the agent; the registry only exposes the authorization metadata.
Quality100strong
Trust83of 100
Uptime, 30 days100%
Latency p501162 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "sprawl": {
      "type": "http",
      "url": "https://sprawl.to/api/mcp",
      "headers": {
        "Authorization": "Bearer ${api_key}"
      }
    }
  }
}
claude mcp add --transport http sprawl https://sprawl.to/api/mcp --header "Authorization: Bearer ${api_key}"
[mcp_servers.sprawl]
url = "https://sprawl.to/api/mcp"
bearer_token_env_var = "api_key"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "sprawl": {
      "type": "remote",
      "url": "https://sprawl.to/api/mcp",
      "enabled": true,
      "headers": {
        "Authorization": "Bearer {env:api_key}"
      }
    }
  }
}
{
  "mcpServers": {
    "sprawl": {
      "type": "http",
      "url": "https://sprawl.to/api/mcp",
      "headers": {
        "Authorization": "Bearer ${api_key}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=sprawl&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vc3ByYXdsLnRvL2FwaS9tY3AiLCJoZWFkZXJzIjp7IkF1dGhvcml6YXRpb24iOiJCZWFyZXIgJHthcGlfa2V5fSJ9fQ%3D%3D"
}
{
  "servers": {
    "sprawl": {
      "type": "http",
      "url": "https://sprawl.to/api/mcp",
      "headers": {
        "Authorization": "Bearer ${api_key}"
      }
    }
  }
}
{
  "mcpServers": {
    "sprawl": {
      "httpUrl": "https://sprawl.to/api/mcp",
      "headers": {
        "Authorization": "Bearer ${api_key}"
      }
    }
  }
}
extensions:
  "sprawl":
    enabled: true
    name: "sprawl"
    type: streamable_http
    uri: "https://sprawl.to/api/mcp"
    headers:
      "Authorization": "Bearer ${api_key}"
    timeout: 300

Placeholders to fill from your own secret store: ${api_key}. The registry never accepts secret values.

Quality 100 / 100strong

protocoln/a · weight 25
  • n/a
    protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)
authorization100 · weight 15
  • pass
    auth.prmProtected Resource Metadata (RFC 9728) published
  • pass
    auth.as_metadataauthorization server metadata reachable
  • pass
    auth.cimdClient ID Metadata Documents supported
  • n/a
    auth.secret_in_urlno templated URL
tool hygienen/a · weight 30
  • n/a
    tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)
stabilityn/a · weight 15
  • n/a
    stability.changes, stability.rug_pulltool list unknown
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

Tool list unknown · checked 2026-10-20 04:41 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 83 / 100

no-repository
provenance55
liveness100
freshness100
hygiene80

+dns-namespace +website +reachable +uptime-100% +updated-6d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://sprawl.to/api/mcp streamable-httpoauth2 AS: https://sprawl.toyes100%1162 ms–2026-10-20

Tools (0)

No tools observed. Tools appear once a credential-free probe can list them.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "to.sprawl/sprawl",
  "title": "Sprawl",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://sprawl.to/api/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "Authorization",
          "value": "Bearer {api_key}",
          "isSecret": true,
          "variables": {
            "api_key": {
              "format": "string",
              "isSecret": true,
              "description": "Your Sprawl API key (prefix sprawl_sk_), for headless callers only — browser-based clients should use OAuth instead and skip this entirely. Create a free account and generate one at https://sprawl.to/docs/mcp."
            }
          },
          "description": "OPTIONAL. This server supports OAuth 2.1 with PKCE, discovered automatically at /.well-known/oauth-protected-resource — browser-based clients (Claude Code, Cursor, Claude.ai connectors, and similar) should use that and need no header at all. Supply this header only for headless, CLI, or CI callers that have no browser to complete consent: a Sprawl API key as a bearer token. Create a free account and generate one at https://sprawl.to/docs/mcp."
        }
      ]
    }
  ],
  "version": "1.2.0",
  "websiteUrl": "https://sprawl.to",
  "description": "Stand up ops from Cursor/Claude/Codex; fleets keep running after your session ends."
}