Create Web Page
com.create-web-page/create-web-pagecreate-web-page.comstreamable-httpv0.1.0Scanned
Create, edit, preview, publish, and manage web pages from MCP-capable AI clients.
27 tools: 3 can delete or cancel things, 1 do something that can't be undone, 16 change things and 7 only read.
- Reads private data · 0
- Reads text others write · 4
- Can send data out · 1
- 5 findings
Tools listed without sign-in. Remote posture
Anlyon alternative
20 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
27 tools
Deletes or cancels 3Claude Code: deny
block_deleteDelete one block by stable blockId.No findings
Why it is in this group
- The name "block_delete" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Delete one block by stable blockId. Use page_get first if unsure which id to remove. For already-published pages, this saves an unpublished latest revision only. Do not call page_publish in the same assistant turn after this edit. Stop and tell the user the draft/preview was updated, then wait for a separate user message that explicitly asks to update the live link, publish, or make the changes public before calling page_publish. Do NOT call page_unpublish either — the live page should stay public; only unpublish when the user explicitly asks to take it down.
Annotations the server declares
- title: Delete Landing Page Block
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: true
- idempotentHint: true
media_deleteSoft-delete a media asset and remove all references to it from the page content.No findings
Why it is in this group
- The name "media_delete" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Soft-delete a media asset and remove all references to it from the page content.
Annotations the server declares
- title: Delete Page Image
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: true
- idempotentHint: true
page_unpublishRemove a published landing page from public availability while keeping its draft and revision history.No findings
Why it is in this group
- The description's first verb is "remove": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Remove a published landing page from public availability while keeping its draft and revision history.
Annotations the server declares
- title: Unpublish Landing Page
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: true
- idempotentHint: true
Can't be undone 1Claude Code: ask
page_publishPublish the latest page revision.Can send data outNo findings
Why it is in this group
- The name "page_publish" says "publish": a word for a change that another call does not undo.
What it can reach
- outboundThe name "page_publish" says "publish": it sends or publishes something to other people.
Description, as the server wrote it Publish the latest page revision. Call this only when the user's latest message explicitly asks to publish, make the page live, or get a public share link. Do not call this immediately after page_create or page_create_from_brief just because the draft is publish-ready. For anonymous demo pages, include the editToken returned by page_create. The response includes nextSteps: always share these with the user after publishing — they include the claim reminder and any remaining improvements.
Annotations the server declares
- title: Publish Landing Page
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
Changes things 16Claude Code: ask
block_addAppend a new content block to a link-in-bio page.No findings
Why it is in this group
- The name "block_add" says "add": a word for a change.
Description, as the server wrote it Append a new content block to a link-in-bio page. The block must match one of the 14 allowed types (link, social_row, whatsapp, phone_call, email_contact, image, gallery, video_embed, text, map_embed, product_card, lead_form, reviews, save_contact) with that type's strict props. The server generates the block id and returns it in the response. For already-published pages, this saves an unpublished latest revision only. Do not call page_publish in the same assistant turn after this edit. Stop and tell the user the draft/preview was updated, then wait for a separate user message that explicitly asks to update the live link, publish, or make the changes public before calling page_publish. Do NOT call page_unpublish either — the live page should stay public; only unpublish when the user explicitly asks to take it down. The response includes nextSteps: after adding a block, share these hints with the user so they know what else would make the page more complete.
Annotations the server declares
- title: Add Content Block
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
- idempotentHint: false
block_reorderMove a block to a new zero-based index in the page main slot.No findings
Why it is in this group
- The description's first verb is "move": a word for a change.
Description, as the server wrote it Move a block to a new zero-based index in the page main slot. For already-published pages, this saves an unpublished latest revision only. Do not call page_publish in the same assistant turn after this edit. Stop and tell the user the draft/preview was updated, then wait for a separate user message that explicitly asks to update the live link, publish, or make the changes public before calling page_publish. Do NOT call page_unpublish either — the live page should stay public; only unpublish when the user explicitly asks to take it down.
Annotations the server declares
- title: Reorder Landing Page Block
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
block_updatePatch one content block by stable blockId.No findings
Why it is in this group
- The name "block_update" says "update": a word for a change.
Description, as the server wrote it Patch one content block by stable blockId. Provide a props patch (merged into existing props) and/or a new type. Block types and props are validated against the strict per-type schema. For already-published pages, this saves an unpublished latest revision only. Do not call page_publish in the same assistant turn after this edit. Stop and tell the user the draft/preview was updated, then wait for a separate user message that explicitly asks to update the live link, publish, or make the changes public before calling page_publish. Do NOT call page_unpublish either — the live page should stay public; only unpublish when the user explicitly asks to take it down.
Annotations the server declares
- title: Update Landing Page Block
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
media_attachAttach a ready media asset to the page.No findings
Why it is in this group
- The name "media_attach" says "attach": a word for a change.
Description, as the server wrote it Attach a ready media asset to the page. placement determines where: avatar (header), block_image (image inside a specific block — requires blockId), gallery_item (appended to a gallery — optional blockId targets a specific gallery; otherwise the first one is used), background (theme background).
Annotations the server declares
- title: Attach Image To Page
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
media_uploadAdd an image to a page.Reads text others writeNo findings
Why it is in this group
- The name "media_upload" says "upload": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Add an image to a page. PREFERRED for any image already on the web: pass its imageUrl and the server fetches it directly (no size limit, no attachment needed in chat). imageBase64 is ONLY for very small inline images — large base64 payloads are rejected by request-size limits and waste context, so never paste a photo's bytes; for a file on the user's device use media_upload_link_create instead. After a successful upload, call media_attach to place it (unless this returned content already showing it).
Annotations the server declares
- title: Upload Page Image
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
- idempotentHint: false
media_upload_link_createGet an upload link for a photo on the user's own device (phone/computer) — the right tool whenever the image is not already at a public URL.No findings
Why it is in this group
- The name "media_upload_link_create" says "upload": a word for a change.
Description, as the server wrote it Get an upload link for a photo on the user's own device (phone/computer) — the right tool whenever the image is not already at a public URL. Pass pageId (+ editToken for demo pages) and the placement (e.g. header_photo). Then show the returned uploadPageUrl to the user as a clickable link and ask them to open it and pick their photo: the page resizes the image for the web automatically and attaches it to the page, so you do NOT call media_attach afterward. The link expires (see expiresAt). After the user says they've uploaded, call page_get to confirm the photo is on the page.
Annotations the server declares
- title: Create Image Upload Link
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
- idempotentHint: false
page_claimClaim an anonymous demo page into an AUTHENTICATED account.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Claim an anonymous demo page into an AUTHENTICATED account. This requires the signed-in user's OAuth — an anonymous chat/agent session cannot call it and will get an OAuth-required error. So in a normal agent conversation, do NOT call this to 'save' a demo page: instead share the claimUrl from the page_create/page_publish result with the user, who opens it, signs in, and keeps the page. Only call page_claim when the request already runs under the owner's OAuth.
Annotations the server declares
- title: Claim Demo Page
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
page_createLow-level/legacy: create a blank link-in-bio scaffold from a style preset (title, displayName, preset or 'auto').No findings
Why it is in this group
- The name "page_create" says "create": a word for a change.
Description, as the server wrote it Low-level/legacy: create a blank link-in-bio scaffold from a style preset (title, displayName, preset or 'auto'). Not for normal page requests — use page_create_from_brief, which builds the page from the user's details. The scaffold starts with empty placeholder blocks to fill via block_update — do not invent content. This tool intentionally creates a draft only and does not return a publish action. After calling it, stop and show the preview URL. Do not call page_publish in the same turn unless the user's current message explicitly asks to publish, make the page live, or get a public share link. Anonymous demo pages expire unless claimed.
Annotations the server declares
- title: Create Landing Page
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
- idempotentHint: false
page_create_from_briefThe main tool for creating a page.1 finding
Why it is in this group
- The name "page_create_from_brief" says "create": a word for a change.
Findings
- Info
The description is 2,224 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...offer after the user has seen the preview; only 'required' ones block publishing."
Description, as the server wrote it The main tool for creating a page. Call it directly when the request already has the business/page name and the main visitor action with its real destination (WhatsApp number with country code, booking/order link, phone, address or email); if the request is vague, ask at most one round of questions first (page_intake_start lists them). Creates a private draft and returns previewUrl, pageId, editToken (anonymous pages), claimUrl and expiresAt. Planning fields (audience, offer, primaryGoal, location, businessType, style, mustInclude) are context only and are not rendered as public body copy. Draft previews are customer-facing: do not pass owner instructions, section-planning labels, or placeholder copy as public content. Keep sparse briefs sparse: use only facts supplied by the user or imported public sources, plus light wording polish; never invent menus, services, hours, facilities, locations, testimonials, guarantees, staff details, prices, or operational claims. If a requested action lacks its real destination, ask for it, or use fallbackLeadForm with destinationEmail (ask the user which email should receive enquiries — without it the form cannot deliver anything and cannot be the page's only action at publish). Personal, gift or event pages (birthday, invitation, tribute, a poem) need no contact form and no action at all: a page with real text (bio + publicSections) can be published as is; add a link (primaryActionUrl, e.g. RSVP, gift list or playlist) only if the user has one, never primaryActionId 'lead'. After calling it, show the preview URL and stop; call page_publish only when the user explicitly asks to publish, make it live, or get a public link. Anonymous pages are deleted after expiresAt unless the user claims them via claimUrl. Passing onboardingMainCategory picks the matching template. The draft also seeds the preset's starter blocks (empty placeholder links, social row, save-contact) — they never block publishing and are pruned if left empty. Use the returned previewUrl directly (no need for page_preview). nextSteps marked recommended/optional (bio, photo, social links) are improvements to offer after the user has seen the preview; only 'required' ones block publishing.
Annotations the server declares
- title: Create Landing Page From Brief
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
- idempotentHint: false
page_header_updateUpdate the link-in-bio page header: displayName, bio, verified checkmark, business-card display style ("photo_hero" large top photo or "avatar"), a short role label (e.g.No findings
Why it is in this group
- The name "page_header_update" says "update": a word for a change.
Description, as the server wrote it Update the link-in-bio page header: displayName, bio, verified checkmark, business-card display style ("photo_hero" large top photo or "avatar"), a short role label (e.g. "Barber · Madrid"), labelPosition, and the header photo (photoUrl; null removes it). Use only the fields you want to change. For already-published pages, this saves an unpublished latest revision only. Do not call page_publish in the same assistant turn after this edit. Stop and tell the user the draft/preview was updated, then wait for a separate user message that explicitly asks to update the live link, publish, or make the changes public before calling page_publish. Do NOT call page_unpublish either — the live page should stay public; only unpublish when the user explicitly asks to take it down.
Annotations the server declares
- title: Update Page Header
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
page_intake_startOptional first step for a vague page request (e.g.1 finding
Why it is in this group
- The name "page_intake_start" says "start": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "page_intake_start" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "page_intake_start" says "start": a word for a change.
Description, as the server wrote it Optional first step for a vague page request (e.g. 'make me a website for my barbershop'). Returns at most one round of questions to ask together: the name, the main visitor action AND where it goes (WhatsApp number with country code, booking/order link, phone or address), and must-have facts. Skip it when the request already has a name and the main action's destination — call page_create_from_brief directly. Call at most once per request; if the user gave a public link, read it yourself or use source_import instead. Does not create a page.
Annotations the server declares
- title: Start Landing Page Intake
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
page_meta_updateUpdate internal page title, URL slug, and SEO title/description.No findings
Why it is in this group
- The name "page_meta_update" says "update": a word for a change.
Description, as the server wrote it Update internal page title, URL slug, and SEO title/description. For already-published pages, this saves an unpublished latest revision only. Do not call page_publish in the same assistant turn after this edit. Stop and tell the user the draft/preview was updated, then wait for a separate user message that explicitly asks to update the live link, publish, or make the changes public before calling page_publish. Do NOT call page_unpublish either — the live page should stay public; only unpublish when the user explicitly asks to take it down.
Annotations the server declares
- title: Update Page Meta
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
page_onboarding_startGuided visual setup (category, layout, palette, primary action) that does NOT create a page.1 finding
Why it is in this group
- The name "page_onboarding_start" says "start": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "page_onboarding_start" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "page_onboarding_start" says "start": a word for a change.
Description, as the server wrote it Guided visual setup (category, layout, palette, primary action) that does NOT create a page. Use it ONLY when the user explicitly wants to choose the style/layout step by step; for normal requests call page_create_from_brief (asking at most one round of questions first). IMPORTANT: this flow is STATELESS — page_onboarding_update does not remember earlier calls, so each update must resend the FULL set of selections + knownFields gathered so far. As soon as you have a business name and a primary action, stop and call page_create_from_brief (you do not need to reach a 'ready' step).
Annotations the server declares
- title: Start Guided Page Onboarding
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
page_onboarding_updateValidate onboarding selections and return the remaining checklist.1 finding
Why it is in this group
- The name "page_onboarding_update" says "update": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "page_onboarding_update" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "page_onboarding_update" says "update": a word for a change.
Description, as the server wrote it Validate onboarding selections and return the remaining checklist. STATELESS: it does not remember previous calls, so every call must include the FULL accumulated selection (mainCategory, subCategory, layout, palette, primaryAction) plus all knownFields (name, description, action destination, etc.) gathered so far — not just the latest answer, or earlier choices will look 'missing'. You do not need to loop to a 'ready' state: once you have a name and a primary action, call page_create_from_brief with those values.
Annotations the server declares
- title: Update Guided Page Onboarding
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
page_theme_updateApply a partial theme patch.No findings
Why it is in this group
- The name "page_theme_update" says "update": a word for a change.
Description, as the server wrote it Apply a partial theme patch. Theme fields are enum-constrained (button variant/radius/shadow, font family/weight, density, icon_size). Use presets_list first if the user wants a complete restyle. For already-published pages, this saves an unpublished latest revision only. Do not call page_publish in the same assistant turn after this edit. Stop and tell the user the draft/preview was updated, then wait for a separate user message that explicitly asks to update the live link, publish, or make the changes public before calling page_publish. Do NOT call page_unpublish either — the live page should stay public; only unpublish when the user explicitly asks to take it down.
Annotations the server declares
- title: Update Page Theme
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
source_importFetch a public website URL and extract a structured brief with business name, description, contact links, and suggested page blocks.Reads text others write1 finding
Why it is in this group
- The name "source_import" says "import": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
The server marks "source_import" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "source_import" says "import": a word for a change.
Description, as the server wrote it Fetch a public website URL and extract a structured brief with business name, description, contact links, and suggested page blocks. Only works with public HTTP/HTTPS pages. Does not bypass login, CAPTCHA, or paywalls. Returns extracted fields and suggestedBlocks for use with page_create_from_brief.
Annotations the server declares
- title: Import Public Source
- readOnlyHint: true
- openWorldHint: true
- destructiveHint: false
- idempotentHint: true
Only reads 7Show 7 read-only tools
account_page_manageRead a claimed account page without requiring an editToken.No findings
Why it is in this group
- The description's first verb is "read": a word for reading.
Description, as the server wrote it Read a claimed account page without requiring an editToken. Use after OAuth when the user wants to manage a durable website.
Annotations the server declares
- title: Manage Claimed Page
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
account_pages_listList landing pages saved to the signed-in account.No findings
Why it is in this group
- The name "account_pages_list" says "list": a word for reading.
Description, as the server wrote it List landing pages saved to the signed-in account. Safe to call without sign-in: an anonymous chat gets ok=true, authenticated=false and an empty list (not an error) because it has no saved pages — then create the page directly with page_create_from_brief. Sign-in is only needed later to keep or manage a page.
Annotations the server declares
- title: List Claimed Pages
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
account_whoamiReturn the current Create Web Page account context.Reads text others writeNo findings
Why it is in this group
- The name "account_whoami" says "whoami": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "return" and "web": it reads web pages, which anyone can write.
Description, as the server wrote it Return the current Create Web Page account context. Use this to check whether the user is authenticated or using an anonymous expiring demo.
Annotations the server declares
- title: Current Account
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
layouts_listList supported page layouts.No findings
Why it is in this group
- The name "layouts_list" says "list": a word for reading.
Description, as the server wrote it List supported page layouts. Currently ships link_in_bio only.
Annotations the server declares
- title: List Available Layouts
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
page_getRead a landing page draft, including its latest content JSON.No findings
Why it is in this group
- The name "page_get" says "get": a word for reading.
Description, as the server wrote it Read a landing page draft, including its latest content JSON. For anonymous demo pages, include the editToken.
Annotations the server declares
- title: Get Landing Page
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
page_previewReturn the current preview URL for a page.Reads text others writeNo findings
Why it is in this group
- The name "page_preview" says "preview": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "return" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it Return the current preview URL for a page. You usually do not need this: page_create and page_create_from_brief already return a ready-to-open previewUrl. For an anonymous demo page you must pass the editToken from the create result; calling this with pageId alone fails.
Annotations the server declares
- title: Preview Landing Page
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
presets_listList the 12 curated style presets (theme + starter blocks) for link-in-bio.No findings
Why it is in this group
- The name "presets_list" says "list": a word for reading.
Description, as the server wrote it List the 12 curated style presets (theme + starter blocks) for link-in-bio. Use to offer the user a choice or to confirm a preset:auto selection.
Annotations the server declares
- title: List Style Presets
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write4
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out1
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Remote posture
What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.
Looked at Oct 22, 2026, 14:30 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.
- Reachable
- yes
- HTTP status of an anonymous initialize
- 200
- tools/list served without credentials
- yes
- Tools that change things, listed without credentials
- 20
- Protocol version
- 2025-06-18
- WWW-Authenticate on 401
- not observed
- resource_metadata in WWW-Authenticate
- not observed
- RFC 9728 protected resource metadata
- https://create-web-page.com/.well-known/oauth-protected-resource
- Authorization servers
- https://create-web-page.com
- Legacy HTTP+SSE transport
- no
- Dynamic client registration
- yes
- Client ID metadata documents
- no
- HighThe whole server
The endpoint served tools/list without credentials, and the list has 20 tools that change things (3 destructive, 1 irreversible, 16 write). Whether a call also works without credentials was not tested: tools are never called.
What this check looks forMatched text
https://create-web-page.com/mcp: tools/list returned 27 tools to an anonymous client, including media_delete (destructive), page_unpublish (destructive), block_delete (destructive), page_publish (irreversible), page_intake_start (write) and 15 more
Findings
Matches of fixed checks, with the text they matched.
The server marks "page_intake_start" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "page_intake_start" says "start": a word for a change.
The server marks "page_onboarding_start" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "page_onboarding_start" says "start": a word for a change.
The server marks "page_onboarding_update" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "page_onboarding_update" says "update": a word for a change.
- Warnsource_import
The server marks "source_import" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "source_import" says "import": a word for a change.
The description is 2,224 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...offer after the user has seen the preview; only 'required' ones block publishing."
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 0.1.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http create-web-page https://create-web-page.com/mcpclaude mcp add --transport http create-web-page https://create-web-page.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__create-web-page__account_whoami",
"mcp__create-web-page__layouts_list",
"mcp__create-web-page__presets_list",
"mcp__create-web-page__page_get",
"mcp__create-web-page__account_pages_list",
"mcp__create-web-page__account_page_manage",
"mcp__create-web-page__page_preview"
],
"ask": [
"mcp__create-web-page__page_intake_start",
"mcp__create-web-page__page_onboarding_start",
"mcp__create-web-page__page_onboarding_update",
"mcp__create-web-page__source_import",
"mcp__create-web-page__page_create",
"mcp__create-web-page__page_create_from_brief",
"mcp__create-web-page__block_add",
"mcp__create-web-page__media_upload",
"mcp__create-web-page__media_upload_link_create",
"mcp__create-web-page__media_attach",
"mcp__create-web-page__page_claim",
"mcp__create-web-page__page_header_update",
"mcp__create-web-page__page_theme_update",
"mcp__create-web-page__page_meta_update",
"mcp__create-web-page__page_publish",
"mcp__create-web-page__block_update",
"mcp__create-web-page__block_reorder"
],
"deny": [
"mcp__create-web-page__media_delete",
"mcp__create-web-page__page_unpublish",
"mcp__create-web-page__block_delete"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as create-web-page. Review it before you use it.
Capability tags behind 5 rules
- mcp__create-web-page__account_whoami untrusted-input
- mcp__create-web-page__source_import untrusted-input
- mcp__create-web-page__media_upload untrusted-input
- mcp__create-web-page__page_preview untrusted-input
- mcp__create-web-page__page_publish outbound
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/com.create-web-page/create-web-page/verify?hash=af1df7333c1c795dbb11d701dda8cfd7dbb39cc99c13f3cd1a9ce20ea9c29027" | jq -e '.changed == false'Pinned hash af1df7333c1c, from Oct 21, 2026, 18:33 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/com.create-web-page/create-web-page/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/com.create-web-page/create-web-page)Source: MCP Registry · repository. Synced Oct 21, 2026, 17:53 UTC.