MCP

What it can reach

From its install config and its own description; a sandbox run will confirm this later.

Checks on v1.0.0

1. Real tool

   passrules 2026-09-29.1 · 3 hours ago

2. Static scan

   failrules 2026-09-29.1 · 3 hours ago
   • criticalPairs a secret with an instruction to send data.tool:publish_site.description

Install

Each app still asks you to confirm. Everything is pinned to the version checked above.

{
  "servers": {
    "mcp": {
      "type": "http",
      "url": "https://dataecho.ai/mcp"
    }
  }
}

Tools it offers

As the server describes them. This text comes from the publisher and is shown as-is.

• platform_info

  DataEcho platform overview: what it can host, auth state of this connection, docs links. Call this first if unsure.

• request_login_code

  Start sign-in: email a one-time code to the user. Follow with verify_login_code.

• verify_login_code

  Complete sign-in with the emailed code. Returns the apiKey ONCE — configure it as the `Authorization: Bearer <key>` header of this MCP connection (and/or save to ~/.artifact/credentials for the CLI scripts). Never echo it into chat.

• publish_site

  Deploy files to a live URL. No slug → create a NEW site (works without auth; anonymous sites expire in 24h — always show the user the claimUrl). With slug → UPDATE that site (complete snapshot: send ALL files). A Dockerfile in the files makes it a server-side app (auth required; listen on process.env.PORT; persist under /data; poll app_status). Total payload ≤ 8 MB — for bigger sites use the dataecho skill scripts.

• claim_site

  Make a previously-anonymous site permanent under the authenticated account (requires auth + the claimToken from publish_site).

• list_sites

  List all sites owned by the authenticated account.

• search_sites

  Full-text search across the authenticated account's sites (names, metadata, and text content).

• get_site

  Full details + current file manifest of an owned site.

• update_site_metadata

  Patch site settings without redeploying: viewer title/description, SPA mode, TTL, password (string sets, null removes).

• delete_site