Skip to content

DropTheHassle

by bosmdavid-gif · remote · local (npm) · no sign-in to list tools · v0.5.2 · published by GitHub user bosmdavid-gif

Your AI publishes your site: free HTTPS link, or a .com for €19 that goes live with no DNS.

Deletes · 20Final · 4Changes · 13
CompareRegistry entry

52 tools: 20 can delete or cancel things, 4 do something that can't be undone, 13 change things and 15 only read.

Scanned Oct 21, 2026

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http dropthehassle https://dropthehassle.com/mcp

Findings

Matches of fixed checks, with the text they matched.

4 warn
  • Warndomain_email

    The server marks "domain_email" read-only (readOnlyHint: true), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "drop": a word for removing or ending something.

    What this check looks for
  • Warndomain_email

    The server marks "domain_email" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "drop": a word for removing or ending something.

    What this check looks for
  • Warnget_checkout_link

    The server marks "get_checkout_link" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_checkout_link" says "get": a word for reading.

    What this check looks for
  • Warnget_email_checkout_link

    The server marks "get_email_checkout_link" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_email_checkout_link" says "get": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

52 tools

Deletes or cancels 20Claude Code: deny
  • clear_site_password(needs account token) Removes the password from a claimed site so anyone can open it.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Removes the password from a claimed site so anyone can open it. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • delete_site(needs account token) Deletes a site, including its files and versions.No findings

    Why it is in this group

    • The name "delete_site" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Deletes a site, including its files and versions. Not reversible. A site with a domain registered here, or with email still on, is refused until those are settled. A suspended site is refused. confirm=true applies it. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • deploy_siteUploads site files and returns a live HTTPS link (name.dropthehassle.app) and a claim link (claim_url).No findings

    Why it is in this group

    • The name "deploy_site" says "deploy": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Uploads site files and returns a live HTTPS link (name.dropthehassle.app) and a claim link (claim_url). Works without an account. Files are sent inline as path, content and encoding (utf8 or base64). This server cannot read a folder on the caller's computer. The published files are index.html at the top, or the built folder dist/, build/, out/, _site/, .output/public or docs/. With an account, site names the site to update and name is omitted; without site the oldest reserved address on the account is filled. Does not buy a name. Size limits: 25 MB and 1,000 files before the site is claimed, 100 MB and 5,000 files when signed in.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • domain_emailDropTheHassle turns on email for a domain already on DropTheHassle, such as info@yourdomain.com.2 findings

    Why it is in this group

    • The description's first verb is "drop": a word for removing or ending something.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "domain_email" read-only (readOnlyHint: true), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "drop": a word for removing or ending something.

      What this check looks for
    • Warn

      The server marks "domain_email" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "drop": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    DropTheHassle turns on email for a domain already on DropTheHassle, such as info@yourdomain.com. The address sends and receives. The price is shown and confirmed before anything is enabled. Needs sign-in. The main inbox is €5 / $5 a month, including VAT in the EU.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • domain_renewal(needs account token) Returns when each domain of a site renews, the price, and whether auto-renew is on.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Returns when each domain of a site renews, the price, and whether auto-renew is on. autorenew false with confirm=true stops the renewal. autorenew true is refused, because it commits a charge. Does not pay.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • edit_site_file(needs account token) Replaces one file on a live site, or adds it.No findings

    Why it is in this group

    • The name "edit_site_file" says "edit": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Replaces one file on a live site, or adds it. Other files stay as they are. This is not a full folder Update. Restore undoes the last Update or Edit files save. site is the address. path is the file. content is the new text, or base64 when encoding is base64. A site token for that site works, including before the site is claimed, the same way an update with that token does. Without a token, claim the site first. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • make_primary_domain(needs account token) Chooses which of a site's domains is its main name: the one that serves the site and that search engines and shared links use.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Chooses which of a site's domains is its main name: the one that serves the site and that search engines and shared links use. The site's other domains redirect (301) to it. confirm=true applies it. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • point_domain(needs account token) Moves a domain that is already on the account to another of its sites, or back onto a site it was split from.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Moves a domain that is already on the account to another of its sites, or back onto a site it was split from. Does not buy a name and does not edit DNS at another registrar. confirm=true applies the move. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • remove_email_address(needs account token) Removes one email address from a site's domain.No findings

    Why it is in this group

    • The name "remove_email_address" says "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Removes one email address from a site's domain. Mail to it stops. A mailbox's stored mail is deleted. The main inbox is not removed here. confirm=true applies it. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • rename_main_inbox(needs account token) Renames the main email address of a site's domain, for example hello@ to info@.No findings

    Why it is in this group

    • The name "rename_main_inbox" says "rename": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Renames the main email address of a site's domain, for example hello@ to info@. Same mailbox, same mail, same price. confirm=true applies it.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • rollback_site(needs account token) Restores the previous version of a site.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Restores the previous version of a site. Restore undoes the last Update or Edit files save. Doing it again restores the version that was replaced. confirm=true applies it. Refused for a suspended or inactive site. Does not charge. After the site is claimed, the human can Restore from the site's Update screen.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • set_analytics_level(needs account token) Switches a site's statistics between standard (cookieless, no banner, the default) and enhanced (adds a cookie consent banner for every visitor, and the click…No findings

    Why it is in this group

    • The name "set_analytics_level" says "set": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Switches a site's statistics between standard (cookieless, no banner, the default) and enhanced (adds a cookie consent banner for every visitor, and the click heatmap). Enhanced changes what visitors see. confirm=true applies enhanced. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • set_backend(needs account token) Links an HTTPS backend hosted on AWS, Google Cloud, DigitalOcean or your own server to a DropTheHassle name.No findings

    Why it is in this group

    • The name "set_backend" says "set": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Links an HTTPS backend hosted on AWS, Google Cloud, DigitalOcean or your own server to a DropTheHassle name. url is an HTTPS origin with no path, port 443, and a hostname that has an IPv4 address. Paths pass through unchanged. With uploaded files, only the path rules (default /api/*) go to the backend and the rest is served from the files. Without uploaded files, the whole site comes from the backend. Without site, a new site is created in the account. With site, the site is already on the account. An empty url with site removes the link. confirm=true applies a change to an existing site. A new site does not use confirm. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • set_site_image(needs account token) Sets or removes a site's browser icon (favicon) or share image (the picture shown when a link is shared).No findings

    Why it is in this group

    • The name "set_site_image" says "set": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Sets or removes a site's browser icon (favicon) or share image (the picture shown when a link is shared). content is the image as base64. clear true removes the current image. Available once the site has its own domain. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • set_site_password(needs account token) Sets a password visitors type before a claimed site opens.No findings

    Why it is in this group

    • The name "set_site_password" says "set": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Sets a password visitors type before a claimed site opens. An empty password makes the site public. Works on the free link and on a custom domain. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • split_domain(needs account token) Moves one domain off a site that has several, onto a new site that shows a coming-soon page.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Moves one domain off a site that has several, onto a new site that shows a coming-soon page. confirm=true applies it. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • transfer_domain_out(needs account token) Starts moving a domain registered here to another registrar.No findings

    Why it is in this group

    • The name "transfer_domain_out" says "transfer": a word for a change that another call does not undo.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Starts moving a domain registered here to another registrar. Auto-renew goes off and the transfer code is emailed to the account within a day. The domain keeps working until it moves. confirm=true applies it. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • turn_off_email(needs account token) Turns off email for a site's domain.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Turns off email for a site's domain. It stops renewing and keeps working until the end of the month already paid. Turning it back on is not done here. confirm=true applies it. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • update_site_settings(needs account token) Sets how a site appears in search results and when a link is shared: site name, brand colour, search title and description, share title and description.No findings

    Why it is in this group

    • The name "update_site_settings" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    (needs account token) Sets how a site appears in search results and when a link is shared: site name, brand colour, search title and description, share title and description. Applies to the whole site, or to one domain when domain is set. Available once the site has its own domain. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
Can't be undone 4Claude Code: ask
  • resend_owner_verification(needs account token) Sends the registry's owner-confirmation email again for a domain registered here.No findings

    Why it is in this group

    • The name "resend_owner_verification" says "resend": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    (needs account token) Sends the registry's owner-confirmation email again for a domain registered here. The account holder confirms it from that email. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • resend_receipt(needs account token) Emails the most recent receipt again to the account email address.No findings

    Why it is in this group

    • The name "resend_receipt" says "resend": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    (needs account token) Emails the most recent receipt again to the account email address. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • send_claim_mailSends the claim mail for an unclaimed site.No findings

    Why it is in this group

    • The name "send_claim_mail" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Sends the claim mail for an unclaimed site. site_id and site_token are the values from the deploy reply. email is the address that receives the mail. The site stays unclaimed until the link in the mail is opened. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • send_feedback(needs account token) Sends the DropTheHassle team a note about a site, in the account holder's words.No findings

    Why it is in this group

    • The name "send_feedback" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    (needs account token) Sends the DropTheHassle team a note about a site, in the account holder's words. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Changes things 13Claude Code: ask
  • award_readiness(needs account token) Returns whether a site on this account is ready to be considered for an award: favicon, share image, title and description, mobile viewport, page weight, cust…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    (needs account token) Returns whether a site on this account is ready to be considered for an award: favicon, share image, title and description, mobile viewport, page weight, custom domain, https, and a real page rather than the DropTheHassle placeholder. Each item includes a fix hint. Read-only. Does not charge.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • check_live(needs account token) Checks, at the time of the call, whether the site's address points here, has a valid certificate and loads.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    (needs account token) Checks, at the time of the call, whether the site's address points here, has a valid certificate and loads. backend true sends one request to the linked backend instead. Read-only.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • check_trademarkLook up live identical or very similar word marks for a name in USPTO and EUIPO.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Look up live identical or very similar word marks for a name in USPTO and EUIPO. Read-only. Does not charge. Works with no account. Each hit includes its Nice classes. When intended_use is given, each hit also includes a relevance note for that use. Tell the human the Nice classes and any relevance note, not only that a mark exists. The result lists the registers that answered and the ones not checked. USPTO is checked. EUIPO is checked only when keys are set. National offices are not checked; the result includes a TMview link for them. This is not legal advice.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • claim_site(needs account token) Attaches an unclaimed site to this account using its claim link (the link ends with # and a code).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    (needs account token) Attaches an unclaimed site to this account using its claim link (the link ends with # and a code). One claim, and not a site already on another account. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • connect_domain(needs account token) Attaches a domain registered at another registrar to a site.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    (needs account token) Attaches a domain registered at another registrar to a site. Nothing is transferred or bought. The reply includes the A record and the TXT ownership record to set at that registrar. On a site that already has a domain, the name is an extra that redirects (301) to the main one. A repeat with the same domain re-checks whether the name points here. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • enable_form(needs account token) Turns lead collection on or off for a claimed site.No findings

    Why it is in this group

    • The name "enable_form" says "enable": a word for a change.
    Description, as the server wrote it
    (needs account token) Turns lead collection on or off for a claimed site. Visitors can send a name, email and message. Each message is emailed to the owner's mailbox and kept for the dashboard. Claim the site first. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • request_google_business(needs account token) Sends the DropTheHassle team a request to set up a Google Business Profile for a site.No findings

    Why it is in this group

    • The name "request_google_business" says "request": a word for a change.
    Description, as the server wrote it
    (needs account token) Sends the DropTheHassle team a request to set up a Google Business Profile for a site. The team follows up by email. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • set_site_indexing(needs account token) Asks search engines to skip a claimed site, or to list it again.No findings

    Why it is in this group

    • The name "set_site_indexing" says "set": a word for a change.
    Description, as the server wrote it
    (needs account token) Asks search engines to skip a claimed site, or to list it again. mode is allow or noindex. Claim the site first. Does not charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • site_analytics(needs account token) Returns visitor numbers for a site on this account: visitors, page views, top pages, referrers, countries and devices, plus a one-sentence summary.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    (needs account token) Returns visitor numbers for a site on this account: visitors, page views, top pages, referrers, countries and devices, plus a one-sentence summary. Same numbers as the dashboard. Read-only.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • site_of_the_day_badge(needs account token) Returns the embed line for a Site of the Month award.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    (needs account token) Returns the embed line for a Site of the Month award. The ribbon names the award and the period and links to the verification page. site selects a site on this account. host selects a confirmed winner. With neither, the reply lists awards this account has earned. Read-only. Does not charge.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 15Claude Code: allow
  • design_inspirationReturns a link to the gallery of customer sites picked as Site of the Month.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Returns a link to the gallery of customer sites picked as Site of the Month. Works without an account. Read-only.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • email_status(needs account token) Returns the email on a site's own domain: each address, whether it is a mailbox that sends and receives or forwards to another address, status, the monthly pr…No findings

    Why it is in this group

    • The name "email_status" says "status": a word for reading.
    Description, as the server wrote it
    (needs account token) Returns the email on a site's own domain: each address, whether it is a mailbox that sends and receives or forwards to another address, status, the monthly price, and the next step. No passwords. Read-only. Does not charge.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_site_file(needs account token) Returns one file from a site you can update, as utf8 text or base64.No findings

    Why it is in this group

    • The name "get_site_file" says "get": a word for reading.
    Description, as the server wrote it
    (needs account token) Returns one file from a site you can update, as utf8 text or base64. site is the address. path is the file, such as index.html or css/site.css. A site token for that site works, including before the site is claimed, the same way an update with that token does. Without a token, claim the site first. Read-only. Does not charge.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_site_metrics(needs account token) Visitors, page views, top pages, referrers, countries, devices, and a one-sentence summary for one claimed site.No findings

    Why it is in this group

    • The name "get_site_metrics" says "get": a word for reading.
    Description, as the server wrote it
    (needs account token) Visitors, page views, top pages, referrers, countries, devices, and a one-sentence summary for one claimed site. period is day, week, month or year. Month is the default. Read-only. Does not charge. Does not promise a ranking.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_site_readiness(needs account token) Award readiness checklist for one claimed site: favicon, share image, title and description, mobile viewport, page weight, custom domain, https, and a real pa…No findings

    Why it is in this group

    • The name "get_site_readiness" says "get": a word for reading.
    Description, as the server wrote it
    (needs account token) Award readiness checklist for one claimed site: favicon, share image, title and description, mobile viewport, page weight, custom domain, https, and a real page. Read-only. Does not charge. Does not promise a ranking.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_site_status(needs account token) Whether one claimed site is live, its domains and renewals, its email, and whether the previous version can be restored.No findings

    Why it is in this group

    • The name "get_site_status" says "get": a word for reading.
    Description, as the server wrote it
    (needs account token) Whether one claimed site is live, its domains and renewals, its email, and whether the previous version can be restored. Read-only. Does not charge.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_form_submissions(needs account token) Lists recent messages from a claimed site's contact form.No findings

    Why it is in this group

    • The name "list_form_submissions" says "list": a word for reading.
    Description, as the server wrote it
    (needs account token) Lists recent messages from a claimed site's contact form. Read-only.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_invoices(needs account token) Lists the account's invoices with date, amount and a printable link.No findings

    Why it is in this group

    • The name "list_invoices" says "list": a word for reading.
    Description, as the server wrote it
    (needs account token) Lists the account's invoices with date, amount and a printable link. Read-only. Does not charge.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_site_files(needs account token) Lists file paths on a site you can update.No findings

    Why it is in this group

    • The name "list_site_files" says "list": a word for reading.
    Description, as the server wrote it
    (needs account token) Lists file paths on a site you can update. site is the address, for example myproject.dropthehassle.app. A site token for that site works, including before the site is claimed, the same way an update with that token does. Without a token, claim the site first. Read-only. Does not charge.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_site_leads(needs account token) Latest form messages for one claimed site.No findings

    Why it is in this group

    • The name "list_site_leads" says "list": a word for reading.
    Description, as the server wrote it
    (needs account token) Latest form messages for one claimed site. limit is how many to return, at most 50. Read-only. Does not charge.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_sites(needs account token) Lists the account's sites with live link, status and the domains on each.No findings

    Why it is in this group

    • The name "list_sites" says "list": a word for reading.
    Description, as the server wrote it
    (needs account token) Lists the account's sites with live link, status and the domains on each.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • search_domainChecks one domain name with the domain registry and returns whether it is available and what it costs.No findings

    Why it is in this group

    • The name "search_domain" says "search": a word for reading.
    Description, as the server wrote it
    Checks one domain name with the domain registry and returns whether it is available and what it costs. One name per call. A name without an ending, such as mybakery, is checked as .com, .nl and .app in that call. Read-only. Does not register, reserve or charge. A registered name is returned as Unavailable, or as For sale by another party when a marketplace lists it. A registry premium name is returned as premium, separate from a marketplace listing. A single-name result can include a trademark note, which is not legal advice. Works without an account. When the exact name is taken, offer the human the free variant names.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • sign_inReturns a link the user opens to sign in to DropTheHassle.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Returns a link the user opens to sign in to DropTheHassle. They enter their email, the 6-digit code, and approve. The next call in this chat is signed in. Nothing to copy.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • site_status(needs account token) One read of a site: whether it is live, its links, recent deploys, whether the previous version can be restored, its domains with renewal date and auto-renew,…No findings

    Why it is in this group

    • The name "site_status" says "status": a word for reading.
    Description, as the server wrote it
    (needs account token) One read of a site: whether it is live, its links, recent deploys, whether the previous version can be restored, its domains with renewal date and auto-renew, and its email. Read-only.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • whoamiReports the DropTheHassle connection.No findings

    Why it is in this group

    • The name "whoami" says "whoami": a word for reading.
    Description, as the server wrote it
    Reports the DropTheHassle connection. Without an account it reports which actions are available with no sign-in. With an account it names the account.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.5.2. Values in angle brackets are yours to fill in.

claude mcp add --transport http dropthehassle https://dropthehassle.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__dropthehassle__whoami",
      "mcp__dropthehassle__list_sites",
      "mcp__dropthehassle__search_domain",
      "mcp__dropthehassle__sign_in",
      "mcp__dropthehassle__list_site_files",
      "mcp__dropthehassle__get_site_file",
      "mcp__dropthehassle__site_status",
      "mcp__dropthehassle__email_status",
      "mcp__dropthehassle__list_invoices",
      "mcp__dropthehassle__design_inspiration",
      "mcp__dropthehassle__list_form_submissions",
      "mcp__dropthehassle__get_site_metrics",
      "mcp__dropthehassle__list_site_leads",
      "mcp__dropthehassle__get_site_status",
      "mcp__dropthehassle__get_site_readiness"
    ],
    "ask": [
      "mcp__dropthehassle__check_trademark",
      "mcp__dropthehassle__send_claim_mail",
      "mcp__dropthehassle__get_checkout_link",
      "mcp__dropthehassle__site_of_the_day_badge",
      "mcp__dropthehassle__award_readiness",
      "mcp__dropthehassle__site_analytics",
      "mcp__dropthehassle__get_email_checkout_link",
      "mcp__dropthehassle__connect_domain",
      "mcp__dropthehassle__check_live",
      "mcp__dropthehassle__resend_owner_verification",
      "mcp__dropthehassle__claim_site",
      "mcp__dropthehassle__resend_receipt",
      "mcp__dropthehassle__gallery_preference",
      "mcp__dropthehassle__send_feedback",
      "mcp__dropthehassle__request_google_business",
      "mcp__dropthehassle__enable_form",
      "mcp__dropthehassle__set_site_indexing"
    ],
    "deny": [
      "mcp__dropthehassle__domain_email",
      "mcp__dropthehassle__deploy_site",
      "mcp__dropthehassle__edit_site_file",
      "mcp__dropthehassle__point_domain",
      "mcp__dropthehassle__choose_link",
      "mcp__dropthehassle__set_backend",
      "mcp__dropthehassle__rollback_site",
      "mcp__dropthehassle__delete_site",
      "mcp__dropthehassle__transfer_domain_out",
      "mcp__dropthehassle__domain_renewal",
      "mcp__dropthehassle__make_primary_domain",
      "mcp__dropthehassle__split_domain",
      "mcp__dropthehassle__update_site_settings",
      "mcp__dropthehassle__set_site_image",
      "mcp__dropthehassle__set_site_password",
      "mcp__dropthehassle__clear_site_password",
      "mcp__dropthehassle__set_analytics_level",
      "mcp__dropthehassle__remove_email_address",
      "mcp__dropthehassle__turn_off_email",
      "mcp__dropthehassle__rename_main_inbox"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as dropthehassle. Review it before you use it.