Skip to content

Boat House

by boathousecloud.com · remote · no sign-in to list tools · v1.0.0 · published by com.boathousecloud

Deploy and share small apps with team login, persistent data, versioned updates and domains.

Deletes · 3Final · 3Changes · 26
CompareRegistry entry

41 tools: 3 can delete or cancel things, 3 do something that can't be undone, 26 change things and 9 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http boathouse https://mcp.boathousecloud.com/mcp --header 'Authorization: <your-authorization>'

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

41 tools

Deletes or cancels 3Claude Code: deny
  • delete_toolDelete a tool: its container, its releases and its sharing.No findings

    Why it is in this group

    • The name "delete_tool" says "delete": a word for removing or ending something.
    Description, as the server wrote it
    Delete a tool: its container, its releases and its sharing. By default the tool's database and files are kept. purge true also destroys them forever, and then requires purge_confirm true as well.
  • secrets_deleteRemove one secret from a tool.No findings

    Why it is in this group

    • The name "secrets_delete" says "delete": a word for removing or ending something.
    Description, as the server wrote it
    Remove one secret from a tool. It disappears on the tool's next restart or deploy.
  • users_removeRemove a person from the workspace.No findings

    Why it is in this group

    • The name "users_remove" says "remove": a word for removing or ending something.
    Description, as the server wrote it
    Remove a person from the workspace. Their sessions, project keys, invites and tool grants stop working immediately. Owners only.
Can't be undone 3Claude Code: ask
  • rollbackPut an earlier release back in service.No findings

    Why it is in this group

    • The description's first verb is "put": a word for a change.
    • The input addresses people (input.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Put an earlier release back in service. With no `to`, goes back to the release before the live one. This rolls back the software, never the database.
  • topupOpen secure Stripe checkout to add prepaid hosting credit; the owner completes payment there.No findings

    Why it is in this group

    • The name "topup" says "topup": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Open secure Stripe checkout to add prepaid hosting credit; the owner completes payment there. Without confirm it only quotes and returns operation_id. Confirm the same cents and operation_id after user approval; reuse the ID on retries. Between $5.00 (500) and $1,000.00 (100000). Owners only.
  • users_inviteResend an invitation to someone in the workspace.No findings

    Why it is in this group

    • The name "users_invite" says "invite": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Resend an invitation to someone in the workspace. New accounts confirm their mailbox through the emailed link; established accounts receive a normal sign-in URL. Password recovery is self-service on that page, and only the account holder's mailbox receives a reset link. Check emailed before offering a fallback.
Changes things 26Claude Code: ask
  • access_requestsEveryone waiting to be let into one of this workspace's tools: request id, email, tier asked for, and their message.No findings

    Why it is in this group

    • The name "access_requests" says "request": a word for a change.
    Description, as the server wrote it
    Everyone waiting to be let into one of this workspace's tools: request id, email, tier asked for, and their message. Owners and tool admins.
  • allow_requestLet a waiting person in at the tier they asked for.No findings

    Why it is in this group

    • The name "allow_request" says "request": a word for a change.
    Description, as the server wrote it
    Let a waiting person in at the tier they asked for. Their tool grant is made and they get an email saying what to do next. Owners and tool admins.
  • billingThe workspace's money: prepaid balance, whether it is paused, how fast running tools burn credit, how many days are left, whether a card is on file, and the last ledger lines.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    The workspace's money: prepaid balance, whether it is paused, how fast running tools burn credit, how many days are left, whether a card is on file, and the last ledger lines.
  • capacityQuote additional app storage.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Quote additional app storage. Show the maximum extra monthly price and get owner approval before confirming. No automatic upgrade. Owners only.
  • deployDeploy a folder as a tool and make it live at https://<tool>.<workspace domain>.No findings

    Why it is in this group

    • The name "deploy" says "deploy": a word for a change.
    Description, as the server wrote it
    Deploy a folder as a tool and make it live at https://<tool>.<workspace domain>. Send the whole folder in `files`, which MUST include a top-level Dockerfile whose process listens on $PORT (8080). Creates the tool on the first deploy; afterwards it replaces the running container. If you got these files from `pull`, pass the release number you pulled as `base` so a deploy someone else made in the meantime is not silently overwritten.
  • domain_attachBring a domain the workspace already owns elsewhere: Boathouse starts answering on it and returns the DNS records to make at the current DNS host.No findings

    Why it is in this group

    • The name "domain_attach" says "attach": a word for a change.
    Description, as the server wrote it
    Bring a domain the workspace already owns elsewhere: Boathouse starts answering on it and returns the DNS records to make at the current DNS host. Optionally point it at one tool at the same time. Owners only.
  • domain_buyBuy a domain through Boathouse's registrar and point it at this box, paid from the workspace's prepaid balance.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Buy a domain through Boathouse's registrar and point it at this box, paid from the workspace's prepaid balance. Without confirm it only returns the quote (cost now, renewal price, your balance) and buys nothing. Owners only.
  • domain_checkAsk the registrar whether a domain is free and what it costs per year.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Ask the registrar whether a domain is free and what it costs per year. Buys nothing. total_cents is the price the workspace pays (registrar_cents plus Boathouse's margin_cents); show that one.
  • domain_detachStop serving a domain.No findings

    Why it is in this group

    • The name "domain_detach" says "detach": a word for a change.
    Description, as the server wrote it
    Stop serving a domain. The registration itself is untouched and domain_attach brings it back. Owners only.
  • domain_dnsThe DNS records the registrar currently holds for a domain Boathouse bought or manages.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    The DNS records the registrar currently holds for a domain Boathouse bought or manages. Changes nothing.
  • domain_pointMake a domain (and its www) open one tool instead of the workspace's tool list.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Make a domain (and its www) open one tool instead of the workspace's tool list. An empty tool clears it. Owners only.
  • domain_primaryMake one of the workspace's domains the primary one: the address tool URLs and emails use.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Make one of the workspace's domains the primary one: the address tool URLs and emails use. Owners only.
  • domain_renewal_setSet automatic renewal and a maximum prepaid renewal charge.No findings

    Why it is in this group

    • The name "domain_renewal_set" says "set": a word for a change.
    Description, as the server wrote it
    Set automatic renewal and a maximum prepaid renewal charge. Quote the change first, then require explicit approval with confirm true. Turning renewal off lets the domain expire. Owners only.
  • domain_repointRewrite a Boathouse-managed domain's DNS records to point at this Boathouse again (after a move, or if someone changed them).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Rewrite a Boathouse-managed domain's DNS records to point at this Boathouse again (after a move, or if someone changed them). Owners only.
  • pricesWhat Boathouse charges, in plain words: one organization plan for up to five lightweight tools, shared limits, storage, and the domain margin.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    What Boathouse charges, in plain words: one organization plan for up to five lightweight tools, shared limits, storage, and the domain margin.
  • referralThis person's referral code and link, the deal in words, and what each referred workspace has earned them so far (10% of usage charges, paid monthly in cash).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    This person's referral code and link, the deal in words, and what each referred workspace has earned them so far (10% of usage charges, paid monthly in cash).
  • releasesThe last 20 releases of a tool: number, status (live/superseded/failed), when, who and the note.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    The last 20 releases of a tool: number, status (live/superseded/failed), when, who and the note. A failed release shows the last line of its build log.
  • request_accessAsk to be let into a tool in someone else's workspace, at viewer, editor or admin.No findings

    Why it is in this group

    • The name "request_access" says "request": a word for a change.
    Description, as the server wrote it
    Ask to be let into a tool in someone else's workspace, at viewer, editor or admin. Its owners get an email with one Allow button; nobody there runs a command. The person is emailed when it is allowed.
  • restartRestart the tool's container with its current release and current secrets.No findings

    Why it is in this group

    • The name "restart" says "restart": a word for a change.
    Description, as the server wrote it
    Restart the tool's container with its current release and current secrets.
  • secrets_setSet one secret on a tool.No findings

    Why it is in this group

    • The name "secrets_set" says "set": a word for a change.
    Description, as the server wrote it
    Set one secret on a tool. It is injected as an environment variable of that name and the tool is restarted. Names are UPPER_SNAKE_CASE. Never echo the value back to the user.
  • set_accessSet who a tool is open to by default: 'members' means anyone in the workspace (at the given tier), 'listed' means only the people it has been explicitly shared with.No findings

    Why it is in this group

    • The name "set_access" says "set": a word for a change.
    Description, as the server wrote it
    Set who a tool is open to by default: 'members' means anyone in the workspace (at the given tier), 'listed' means only the people it has been explicitly shared with. Use 'listed' for anything sensitive.
  • shareGive one person access to one tool by email, at a tier: viewer (read only; the gateway blocks their writes), editor (may change the data), admin (may change the software, secrets, …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Give one person access to one tool by email, at a tier: viewer (read only; the gateway blocks their writes), editor (may change the data), admin (may change the software, secrets, sharing). If the person is new, Boat House emails a secure invitation when email is configured. Check emailed in the result; if delivery failed, share the invitation page so the person can request their secure email.
  • unshareTake away one person's access to one tool.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Take away one person's access to one tool. They keep their workspace account.
  • usageCheck storage, memory, CPU and the reason an app is paused.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check storage, memory, CPU and the reason an app is paused. Tool admins only.
  • users_addAdd a person to the workspace, or change their role.No findings

    Why it is in this group

    • The name "users_add" says "add": a word for a change.
    Description, as the server wrote it
    Add a person to the workspace, or change their role. owner = may spend money, buy domains and manage people, and is admin on every tool; member = may see tools open to members and deploy their own; guest = sees only what is explicitly shared with them. Returns a one-time invite link for someone new. Owners only.
Only reads 9Claude Code: allow
  • domain_renewalsRead domain expiry dates, renewal status, spending limits and billing problems.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read domain expiry dates, renewal status, spending limits and billing problems. Owners only.
  • domains_listThe addresses this workspace answers on: the free <workspace>.boathousecloud.com address, the primary domain, and every custom domain with its DNS state.No findings

    Why it is in this group

    • The name "domains_list" says "list": a word for reading.
    Description, as the server wrote it
    The addresses this workspace answers on: the free <workspace>.boathousecloud.com address, the primary domain, and every custom domain with its DNS state.
  • get_toolOne tool in detail: URL, container state, current release, who it is visible to, and the list of people it has been shared with.No findings

    Why it is in this group

    • The name "get_tool" says "get": a word for reading.
    Description, as the server wrote it
    One tool in detail: URL, container state, current release, who it is visible to, and the list of people it has been shared with.
  • list_toolsEvery tool in the workspace with its state (running/absent), current release, public URL and who can see it.No findings

    Why it is in this group

    • The name "list_tools" says "list": a word for reading.
    Description, as the server wrote it
    Every tool in the workspace with its state (running/absent), current release, public URL and who can see it. A 'tool' is one small web app Boathouse runs behind the workspace login.
  • logsThe tool container's recent log lines, newest last.No findings

    Why it is in this group

    • The name "logs" says "log": a word for reading.
    Description, as the server wrote it
    The tool container's recent log lines, newest last. Use this to find out why a tool is failing.
  • pullFetch the exact source folder a release was built from, so you can edit it and deploy it back.No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch the exact source folder a release was built from, so you can edit it and deploy it back. Returns the release number and the files as text (binary files come back base64 encoded). Tool admins only.
  • secrets_listThe names of a tool's secrets (API keys and the like), when each was last set and by whom.No findings

    Why it is in this group

    • The name "secrets_list" says "list": a word for reading.
    Description, as the server wrote it
    The names of a tool's secrets (API keys and the like), when each was last set and by whom. Values are never returned.
  • users_listEveryone in the workspace: role (owner, member or guest), name, and whether they have set a password yet.No findings

    Why it is in this group

    • The name "users_list" says "list": a word for reading.
    Description, as the server wrote it
    Everyone in the workspace: role (owner, member or guest), name, and whether they have set a password yet.
  • whoamiWho this project key belongs to: the email, the workspace, the domain its tools live on, and the prepaid balance.No findings

    Why it is in this group

    • The name "whoami" says "whoami": a word for reading.
    Description, as the server wrote it
    Who this project key belongs to: the email, the workspace, the domain its tools live on, and the prepaid balance. Call it first if you are not sure which workspace you are acting in.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http boathouse https://mcp.boathousecloud.com/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__boathouse__whoami",
      "mcp__boathouse__list_tools",
      "mcp__boathouse__get_tool",
      "mcp__boathouse__pull",
      "mcp__boathouse__logs",
      "mcp__boathouse__secrets_list",
      "mcp__boathouse__users_list",
      "mcp__boathouse__domains_list",
      "mcp__boathouse__domain_renewals"
    ],
    "ask": [
      "mcp__boathouse__deploy",
      "mcp__boathouse__releases",
      "mcp__boathouse__rollback",
      "mcp__boathouse__restart",
      "mcp__boathouse__share",
      "mcp__boathouse__unshare",
      "mcp__boathouse__request_access",
      "mcp__boathouse__access_requests",
      "mcp__boathouse__allow_request",
      "mcp__boathouse__set_access",
      "mcp__boathouse__secrets_set",
      "mcp__boathouse__users_add",
      "mcp__boathouse__users_invite",
      "mcp__boathouse__domain_check",
      "mcp__boathouse__domain_buy",
      "mcp__boathouse__domain_renewal_set",
      "mcp__boathouse__domain_attach",
      "mcp__boathouse__domain_point",
      "mcp__boathouse__domain_primary",
      "mcp__boathouse__domain_dns",
      "mcp__boathouse__domain_repoint",
      "mcp__boathouse__domain_detach",
      "mcp__boathouse__usage",
      "mcp__boathouse__capacity",
      "mcp__boathouse__billing",
      "mcp__boathouse__prices",
      "mcp__boathouse__referral",
      "mcp__boathouse__topup",
      "mcp__boathouse__card_link"
    ],
    "deny": [
      "mcp__boathouse__secrets_delete",
      "mcp__boathouse__users_remove",
      "mcp__boathouse__delete_tool"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as boathouse. Review it before you use it.