Skip to content
anlyon.devby Anlyon

Dropspace MCP server

io.github.JCLVSH/dropspaceJCLVSHstreamable-httpv2.54.3Scanned

Create, schedule, and publish social media launches across platforms, then read the analytics.

40 tools: 13 can delete or cancel things, 1 do something that can't be undone, 9 change things and 17 only read.

Tools: 13 delete, 1 irreversible, 9 write, 17 read.
  • Reads private data · 1
  • Reads text others write · 4
  • Can send data out · 1
  • 1 finding

Tools listed without sign-in. Remote posture

With Anlyon

13 tools here can delete or cancel things and 1 does something that can't be undone. Govern them.

  • Anlyon lists the tools and adopts none.
  • Each tool you adopt gets approvals and receipts.
  • Your agent never holds the key.
Govern this server →

A tool your agent calls directly is not routed through Anlyon and is not governed by it. anlyon.dev only lists and labels, and these labels are the same either way.

Compare with similar serversMarkdownJSONReport this listing

What the Dropspace MCP server can do

The Dropspace MCP server is published by the GitHub account JCLVSH. It has 40 tools. It can delete or cancel things (13 tools: create_launch, update_launch, delete_launch, publish_launch and 9 more), do things that cannot be undone, such as sending, paying or publishing (finalize_persona) and create or change data (9 tools: generate_content, retry_launch_content, create_persona, update_persona and 5 more). 17 tools only read.

1 tool reads private data (get_changelog); 4 tools bring in text other people can write (get_launch_analytics, get_autopilot, list_autopilot_review and 1 more); 1 tool can send data out of your system (publish_launch). On its own it has all three parts of a prompt-injection exfiltration path: private data, text others write, and a way out.

The fixed checks matched 1 finding (long-description). Each one comes with the text it matched.

Its remote endpoint lists its tools without sign-in.

Last scanned Nov 13, 2026, version 2.54.3.

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

40 tools

Deletes or cancels 13Claude Code: deny
  • approve_autopilot_draftapprove an autopilot draft - schedules it for publishing (a stale scheduled date rolls forward to the next posting slot).No findings

    Why it is in this group

    • The name "approve_autopilot_draft" says "approve": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    approve an autopilot draft - schedules it for publishing (a stale scheduled date rolls forward to the next posting slot).

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
  • configure_autopilotcreate or update the autopilot config.No findings

    Why it is in this group

    • The description's first verb is "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    create or update the autopilot config. merge semantics: only the fields you send change. enabling requires at least one platform with a connected account.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
  • create_launchcreate a new launch for publishing to social platformsNo findings

    Why it is in this group

    • The name "create_launch" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    create a new launch for publishing to social platforms

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
  • delete_all_postsDelete all published posts for a launch from their platforms.No findings

    Why it is in this group

    • The name "delete_all_posts" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete all published posts for a launch from their platforms. Only deletes from Twitter, Facebook, LinkedIn, Reddit, and YouTube. Instagram and TikTok posts are skipped (require manual deletion).

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
  • delete_launchdelete a launch (cannot delete running launches)No findings

    Why it is in this group

    • The name "delete_launch" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    delete a launch (cannot delete running launches)

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
  • delete_personadelete a personaNo findings

    Why it is in this group

    • The name "delete_persona" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    delete a persona

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
  • delete_postDelete a single published post from its platform.No findings

    Why it is in this group

    • The name "delete_post" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete a single published post from its platform. Only works for Twitter, Facebook, LinkedIn, Reddit, and YouTube. Instagram and TikTok do not support API deletion.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
  • publish_launchpublish a launch to all configured platforms (queued async)Can send data outNo findings

    Why it is in this group

    • The name "publish_launch" says "publish": a word for a change that another call does not undo.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • outboundThe name "publish_launch" says "publish": it sends or publishes something to other people.
    Description, as the server wrote it
    publish a launch to all configured platforms (queued async)

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
  • reject_autopilot_draftreject an autopilot draft - deletes it and refunds the launch slot.No findings

    Why it is in this group

    • The name "reject_autopilot_draft" says "reject": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    reject an autopilot draft - deletes it and refunds the launch slot. optional feedback teaches future runs what to avoid.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
  • retry_launchretry failed platforms for a launch.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    retry failed platforms for a launch. by default every failed platform is retried; pass `subreddit` to retry ONE reddit destination (leaving its siblings — succeeded or failed — untouched), and add `account_id` when that destination belongs to a secondary connected reddit account rather than your primary.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
  • run_autopilot_nowtrigger a manual autopilot run immediately instead of waiting for the nightly run.No findings

    Why it is in this group

    • The name "run_autopilot_now" says "run": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    trigger a manual autopilot run immediately instead of waiting for the nightly run. steps already completed today are skipped (limited to 2 per hour).

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
  • update_connection_profileedit the connected account's profile ON the platform.No findings

    Why it is in this group

    • The name "update_connection_profile" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    edit the connected account's profile ON the platform. youtube only today: sets the channel description (max 1,000 characters; an empty string clears it) via channels.update. instagram's api can read a profile but not write it, facebook page "about" needs a permission dropspace does not hold, and tiktok / x / linkedin expose no profile write - those return an error with the reason. requires the write scope.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
  • update_launchupdate a launch (cannot update running/completed/partial launches)No findings

    Why it is in this group

    • The name "update_launch" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    update a launch (cannot update running/completed/partial launches)

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
Can't be undone 1Claude Code: ask
  • finalize_personacommit a persona's pending analysis after review (the analyzed voice becomes usable)No findings

    Why it is in this group

    • The name "finalize_persona" says "finalize": a word for a change that another call does not undo.
    Description, as the server wrote it
    commit a persona's pending analysis after review (the analyzed voice becomes usable)

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
Changes things 9Claude Code: ask
  • analyze_personatrigger AI analysis of a persona's writing style (queued async)No findings

    Why it is in this group

    • The name "analyze_persona" says "analyze": a word for reading.
    • The description's first verb is "trigger": a word for a change.
    Description, as the server wrote it
    trigger AI analysis of a persona's writing style (queued async)

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
  • apply_recommendationapply a recommendation's one-click action.No findings

    Why it is in this group

    • The name "apply_recommendation" says "apply": a word for a change.
    Description, as the server wrote it
    apply a recommendation's one-click action. repost_winner and cross_post create a DRAFT launch seeded with the winning content (nothing publishes until scheduled); boost_winner creates a PAUSED meta boost and requires ad_account_id (activation, and therefore spend, is a separate step); promote_winner queues the winner into autopilot; pause_underperformer adds a standing directive to the autopilot config.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
  • create_personacreate a new persona for AI content generation tone/styleNo findings

    Why it is in this group

    • The name "create_persona" says "create": a word for a change.
    Description, as the server wrote it
    create a new persona for AI content generation tone/style

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
  • discard_persona_analysisdiscard a persona's pending analysis without committing (preserves any previously saved analysis)No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    discard a persona's pending analysis without committing (preserves any previously saved analysis)

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
  • dismiss_recommendationdismiss a pending recommendation so it stops showing everywhere.No findings

    Why it is in this group

    • The name "dismiss_recommendation" says "dismiss": a word for a change.
    Description, as the server wrote it
    dismiss a pending recommendation so it stops showing everywhere.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
  • generate_contentgenerate AI content for a launch's platforms using ClaudeNo findings

    Why it is in this group

    • The name "generate_content" says "generate": a word for a change.
    Description, as the server wrote it
    generate AI content for a launch's platforms using Claude

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
  • generate_mediasubmit an AI image or video generation job for a launch.No findings

    Why it is in this group

    • The name "generate_media" says "generate": a word for a change.
    Description, as the server wrote it
    submit an AI image or video generation job for a launch. Returns 202 with a job_id; poll get_media_job for completion. Requires generate scope. script_video requires platform=instagram|tiktok and prompt is required (not just product_description). video and script_video only support 16:9 and 9:16 aspect ratios.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
  • retry_launch_contentretry AI content generation for failed platforms (requires generate scope)No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    retry AI content generation for failed platforms (requires generate scope)

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
  • update_personaupdate a persona's name or writing samplesNo findings

    Why it is in this group

    • The name "update_persona" says "update": a word for a change.
    Description, as the server wrote it
    update a persona's name or writing samples

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
Only reads 17Show 17 read-only tools
  • get_audiencefollower counts + growth for every connected instagram / youtube / tiktok / twitter account and facebook page.1 finding

    Why it is in this group

    • The name "get_audience" says "get": a word for reading.

    Findings

    • Info

      The description is 2,153 characters long, over the 2,000 this check looks for.

      Matched text

      description ends: "...instagram reports none of it for accounts under 100 followers (available: false)."

      What this check looks for
    Description, as the server wrote it
    follower counts + growth for every connected instagram / youtube / tiktok / twitter account and facebook page. one entry per ACCOUNT, not per platform: "entity_id" is null for your primary account on a platform and set for each additional one, so a user with two instagram accounts returns two instagram entries. counts come from each platform's official API and are cached for 15 minutes. youtube works differently: each youtube read spends a shared daily quota, so while you keep reading a creator's audience, their youtube count is refreshed in the background about once an hour, and an on-demand read re-fetches at most every 6 hours if that refresh is delayed; if the daily quota is exhausted, a youtube read returns the most recent successful count instead of null. "current.captured_at" is always when that count was actually read from the platform, never when it was served: use it to judge freshness. "series" is the stored history; youtube history is kept for 30 days (youtube's API storage limit), so youtube growth reaches back about 30 days whatever window_days says, while other platforms keep full history. growth is measured from the OLDEST stored point inside the window, which — because history points are recorded when you read, at most one per account per day — can be much younger than window_days: read "effective_window_days" (the span the delta actually covers) and "baseline_captured_at" before comparing growth across accounts. linkedin is not covered (its API exposes no personal-profile follower count). set include_instagram_insights to add instagram growth analytics to each instagram entry: follows, unfollows, net, and reach split into followers and non-followers per pacific-time day (the last 7 days are settled: false because instagram still revises them), followers_over_time (an estimate rebuilt back from the current count), weekly velocity with a trend, non_follower_reach_share, and contact-button taps. it reads up to 31 days per call, newest first, so a longer window fills over a few calls (days_pending says how many are left); instagram reports none of it for accounts under 100 followers (available: false).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • get_autopilotget autopilot status: config, queued ideas, and drafts pending review.Reads text others writeNo findings

    Why it is in this group

    • The name "get_autopilot" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "get" and "review": it reads comments, which other people can write.
    Description, as the server wrote it
    get autopilot status: config, queued ideas, and drafts pending review. autopilot is the autonomous content engine that drafts and schedules posts nightly (pro/premium plans).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • get_batch_launch_analyticsget cached analytics for multiple launches in one request (no live refresh, max 100 IDs)No findings

    Why it is in this group

    • The name "get_batch_launch_analytics" says "get": a word for reading.
    Description, as the server wrote it
    get cached analytics for multiple launches in one request (no live refresh, max 100 IDs)

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • get_changelogmachine-readable release history (public) - version, date, type, summary, migration notes on breaking entries.Reads private dataNo findings

    Why it is in this group

    • The name "get_changelog" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "note": it reads notes.
    Description, as the server wrote it
    machine-readable release history (public) - version, date, type, summary, migration notes on breaking entries. the X-Notice header's structured backstory.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • get_dropspace_statuscheck which platforms have a connected dropspace official account (requires read scope)No findings

    Why it is in this group

    • The name "get_dropspace_status" says "get": a word for reading.
    Description, as the server wrote it
    check which platforms have a connected dropspace official account (requires read scope)

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • get_launchget a launch by ID with posting status per platformNo findings

    Why it is in this group

    • The name "get_launch" says "get": a word for reading.
    Description, as the server wrote it
    get a launch by ID with posting status per platform

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • get_launch_analyticsget publishing analytics with per-post engagement metrics (likes, views, shares, etc.).Reads text others writeNo findings

    Why it is in this group

    • The name "get_launch_analytics" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "get" and "post": it reads posts, which other people can write.
    Description, as the server wrote it
    get publishing analytics with per-post engagement metrics (likes, views, shares, etc.). metric fields vary by platform: facebook reports reactions, likes (mirroring reactions.total), comments and shares - it has no impressions or reach, and facebook story metrics are unavailable. an instagram story reports views, reach, replies and frames only while it is live (24 hours, no backfill); under 5 viewers it returns story_insights_withheld instead of numbers

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • get_launch_statusget detailed posting status with per-platform logsNo findings

    Why it is in this group

    • The name "get_launch_status" says "get": a word for reading.
    Description, as the server wrote it
    get detailed posting status with per-platform logs

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • get_media_jobpoll the status of a media generation job.No findings

    Why it is in this group

    • The name "get_media_job" says "get": a word for reading.
    Description, as the server wrote it
    poll the status of a media generation job. Returns the result_url when complete.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • get_personaget a persona by ID with analysis details and writing samplesNo findings

    Why it is in this group

    • The name "get_persona" says "get": a word for reading.
    Description, as the server wrote it
    get a persona by ID with analysis details and writing samples

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • get_usageget your current plan, usage limits, and billing period (requires read scope)No findings

    Why it is in this group

    • The name "get_usage" says "get": a word for reading.
    Description, as the server wrote it
    get your current plan, usage limits, and billing period (requires read scope)

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • list_autopilot_reviewlist autopilot drafts awaiting approval (review mode).Reads text others writeNo findings

    Why it is in this group

    • The name "list_autopilot_review" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe name "list_autopilot_review" says "list" and "review": it reads comments, which other people can write.
    • untrusted-inputThe description's first sentence says "list" and "review": it reads comments, which other people can write.
    Description, as the server wrote it
    list autopilot drafts awaiting approval (review mode). each item is a draft launch - approve, reject, or edit it via update_launch first.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • list_autopilot_runsrecent autopilot run history - one row per run step (refresh_insights, generate_blueprints, schedule_slots) with stats and errors.No findings

    Why it is in this group

    • The name "list_autopilot_runs" says "list": a word for reading.
    Description, as the server wrote it
    recent autopilot run history - one row per run step (refresh_insights, generate_blueprints, schedule_slots) with stats and errors.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • list_connectionslist your connected social media accounts.No findings

    Why it is in this group

    • The name "list_connections" says "list": a word for reading.
    Description, as the server wrote it
    list your connected social media accounts. each row has a "platform" and an "entity_id" (null for your primary account on that platform, set for additional accounts). to target a specific account in create_launch when you have more than one on instagram / tiktok / youtube / twitter / reddit, pass "{platform}:{entity_id}" as a user_platform_accounts key (the bare "{platform}" key targets your primary). the same entity_id is what disconnect_connection and retry_launch take as account_id

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • list_launcheslist your launches with paginationNo findings

    Why it is in this group

    • The name "list_launches" says "list": a word for reading.
    Description, as the server wrote it
    list your launches with pagination

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • list_personaslist your personas with paginationNo findings

    Why it is in this group

    • The name "list_personas" says "list": a word for reading.
    Description, as the server wrote it
    list your personas with pagination

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • list_recommendationslist actionable recommendations computed from your organic post performance: winners to repost, cross-post, or boost, autopilot promote signals, and underperformer pause signals.Reads text others writeNo findings

    Why it is in this group

    • The name "list_recommendations" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "list" and "post": it reads posts, which other people can write.
    Description, as the server wrote it
    list actionable recommendations computed from your organic post performance: winners to repost, cross-post, or boost, autopilot promote signals, and underperformer pause signals. dropspace sweeps post metrics every 30 minutes and compares each post to your own per-platform baseline.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

4 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write4
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__dropspace__publish_launch"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Tools listed without sign-in

Looked at Nov 10, 2026, 08:19 UTC, unchanged since Nov 10, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable
yes
HTTP status of an anonymous initialize
200
tools/list served without credentials
yes
Tools that change things, listed without credentials
23
Protocol version
2025-06-18
WWW-Authenticate on 401
not observed
resource_metadata in WWW-Authenticate
not observed
RFC 9728 protected resource metadata
not observed
Authorization servers
not observed
Legacy HTTP+SSE transport
no
Dynamic client registration
not observed
Client ID metadata documents
not observed
  • HighThe whole server

    The endpoint served tools/list without credentials, and the list has 23 tools that change things (13 destructive, 1 irreversible, 9 write). Whether a call also works without credentials was not tested: tools are never called.

    Matched text

    https://api.dropspace.dev/mcp: tools/list returned 40 tools to an anonymous client, including create_launch (destructive), update_launch (destructive), delete_launch (destructive), publish_launch (destructive), retry_launch (destructive) and 18 more

    What this check looks for

Findings

Matches of fixed checks, with the text they matched.

1 info
  • Infoget_audience

    The description is 2,153 characters long, over the 2,000 this check looks for.

    Matched text

    description ends: "...instagram reports none of it for accounts under 100 followers (available: false)."

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 2.54.3. Values in angle brackets are yours to fill in.

claude mcp add --transport http dropspace https://api.dropspace.dev/mcp --header 'Authorization: <your-authorization>'
claude mcp add --transport http dropspace https://api.dropspace.dev/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__dropspace__list_launches",
      "mcp__dropspace__get_launch",
      "mcp__dropspace__get_launch_analytics",
      "mcp__dropspace__get_batch_launch_analytics",
      "mcp__dropspace__get_launch_status",
      "mcp__dropspace__list_personas",
      "mcp__dropspace__get_persona",
      "mcp__dropspace__list_connections",
      "mcp__dropspace__get_dropspace_status",
      "mcp__dropspace__get_usage",
      "mcp__dropspace__get_changelog",
      "mcp__dropspace__get_media_job",
      "mcp__dropspace__get_autopilot",
      "mcp__dropspace__list_autopilot_review",
      "mcp__dropspace__list_autopilot_runs",
      "mcp__dropspace__list_recommendations",
      "mcp__dropspace__get_audience"
    ],
    "ask": [
      "mcp__dropspace__generate_content",
      "mcp__dropspace__retry_launch_content",
      "mcp__dropspace__create_persona",
      "mcp__dropspace__update_persona",
      "mcp__dropspace__analyze_persona",
      "mcp__dropspace__finalize_persona",
      "mcp__dropspace__discard_persona_analysis",
      "mcp__dropspace__generate_media",
      "mcp__dropspace__apply_recommendation",
      "mcp__dropspace__dismiss_recommendation"
    ],
    "deny": [
      "mcp__dropspace__create_launch",
      "mcp__dropspace__update_launch",
      "mcp__dropspace__delete_launch",
      "mcp__dropspace__publish_launch",
      "mcp__dropspace__retry_launch",
      "mcp__dropspace__delete_post",
      "mcp__dropspace__delete_all_posts",
      "mcp__dropspace__delete_persona",
      "mcp__dropspace__update_connection_profile",
      "mcp__dropspace__configure_autopilot",
      "mcp__dropspace__approve_autopilot_draft",
      "mcp__dropspace__reject_autopilot_draft",
      "mcp__dropspace__run_autopilot_now"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as dropspace. Review it before you use it.

Capability tags behind 6 rules
  • mcp__dropspace__publish_launch outbound
  • mcp__dropspace__get_launch_analytics untrusted-input
  • mcp__dropspace__get_changelog private-data
  • mcp__dropspace__get_autopilot untrusted-input
  • mcp__dropspace__list_autopilot_review untrusted-input
  • mcp__dropspace__list_recommendations untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.JCLVSH/dropspace/verify?hash=a38b6914cfcaf47257ea67cc833df74ea9fd7b2edec87441e7f973ea619f6e80" | jq -e '.changed == false'

Pinned hash a38b6914cfca, from Nov 13, 2026, 17:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.JCLVSH/dropspace/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.github.JCLVSH/dropspace
[![anlyon.dev](https://anlyon.dev/badge/io.github.JCLVSH/dropspace.svg)](https://anlyon.dev/servers/io.github.JCLVSH/dropspace)

Source: MCP Registry. Synced Nov 13, 2026, 17:17 UTC.

Dropspace MCP server: questions and answers

Answered from the scan above, not from the publisher's description.

Is the Dropspace MCP server safe?

No scan can promise that. What its definitions show: 40 tools, 23 of which can change, send or delete something, and 1 finding from fixed checks. Allow the reads, ask before each change, and deny the deletes; the permissions block on this page does that.

Can the Dropspace MCP server delete data?

Yes. 13 tools can delete, cancel or revoke something: create_launch, update_launch, delete_launch, publish_launch, retry_launch, delete_post and 7 more.

Can the Dropspace MCP server do things that cannot be undone?

Yes. 1 tool can send, pay, publish or merge: finalize_persona.

What tools does the Dropspace MCP server have?

40 tools: 13 destructive, 1 irreversible, 9 write, 17 read. create_launch, update_launch, delete_launch, publish_launch, retry_launch, delete_post, delete_all_posts, delete_persona and 32 more.

Does the Dropspace MCP server need sign-in or OAuth?

Its remote endpoint listed its tools to an anonymous client, without sign-in.

Does the Dropspace MCP server send data to outside services?

1 tool can carry data out (it sends, posts or publishes, or takes a recipient, channel or URL): publish_launch.

Has the Dropspace MCP server changed its tools?

Not since anlyon.dev started tracking it. Last scanned Nov 13, 2026.