Impreza Host
by imprezahost · remote · local (npm) · no sign-in to list tools · v0.55.1 · published by GitHub user imprezahost
No-KYC offshore hosting an AI agent runs end-to-end: no-email signup, crypto, VPS, deploy, Tor.
8 tools: 3 change things and 5 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things3Claude Code: ask: see these tools
- Only reads5Claude Code: allow: see these tools
5 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http impreza https://mcp.imprezahost.com/mcpFindings
Matches of fixed checks, with the text they matched.
The description refers to "/v1/credentials".
What this check looks forMatched text
description: "...ding after MCP expiry). Renew with POST /v1/credentials authenticated by the returned REST key..."
The description mentions "credential".
What this check looks forMatched text
description: "...o e-mail, no KYC — and get an operating credential in ONE call. Use this when you have no..."
The input schema at properties.label.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.label.description: "Optional label for the account/credential (e.g. your agent name)."
The input schema at properties.scopes.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.scopes.description: "Optional credential scopes. Omit for read, deploy and manag..."
The description mentions "credentials".
What this check looks forMatched text
description: "...ports "running" and 502s. Never include credentials in source text: secret detection cannot..."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
8 tools
Changes things 3Claude Code: ask
impreza_bootstrap_accountCreate a brand-new ANONYMOUS Impreza account — no e-mail, no KYC — and get an operating credential in ONE call.4 findings
Why it is in this group
- The description's first verb is "create": a word for a change.
Findings
- High
The description refers to "/v1/credentials".
What this check looks forMatched text
description: "...ding after MCP expiry). Renew with POST /v1/credentials authenticated by the returned REST key..."
- Info
The description mentions "credential".
What this check looks forMatched text
description: "...o e-mail, no KYC — and get an operating credential in ONE call. Use this when you have no..."
- Info
The input schema at properties.label.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.label.description: "Optional label for the account/credential (e.g. your agent name)."
- Info
The input schema at properties.scopes.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.scopes.description: "Optional credential scopes. Omit for read, deploy and manag..."
Description, as the server wrote it Create a brand-new ANONYMOUS Impreza account — no e-mail, no KYC — and get an operating credential in ONE call. Use this when you have no account or token yet. Returns: account_id, api_key + api_secret (REST), a fresh mcp_token valid for 15 minutes (reconnect THIS MCP server with it as the Bearer to unlock the full toolset), its mcp_token_expires_at, renewal instructions, and a recovery_code shown once (save it for account recovery, including after MCP expiry). Renew with POST /v1/credentials authenticated by the returned REST key and secret, explicit scopes and ttl_seconds; the renewal example includes daily and monthly spending ceilings for manage. Omit manage to prevent purchases. After bootstrapping, reconnect with the mcp_token. Have a server already? impreza_add_server installs the agent on it, and the first external server is free (no plan, no credit). Otherwise fund the account in crypto with impreza_topup (BTC/XMR) before ordering a VPS.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- title: Create an anonymous account
impreza_domain_checkCheck domain availability + price before registering.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Check domain availability + price before registering. Pass one domain or several comma-separated. Read-only.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
- title: Check domain availability
impreza_vps_offerWhat a new VPS can be, and what it costs.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it What a new VPS can be, and what it costs. Lists the locations (with each jurisdiction's note), the operating systems, the CPU/memory/disk ranges with the price per unit for every billing cycle, and the apps it can be born with, in the account currency. Pass a whole configuration (billing_cycle, location, os, cpu_cores, memory_gb, disk_gb) to get its exact price instead — what is due today, what it renews at, whether the balance covers it and whether that location has room right now. With app omitted the quote means '@agent', this MCP's default, the same as impreza_order_vps. Then order it with impreza_order_vps using the same values. Read-only.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- title: VPS options and prices
Only reads 5Claude Code: allow
impreza_domain_pricingList registration, renewal and transfer prices for the TLDs Impreza sells, in the account currency.No findings
Why it is in this group
- The description's first verb is "list": a word for reading.
Description, as the server wrote it List registration, renewal and transfer prices for the TLDs Impreza sells, in the account currency. Use this to compare prices and choose a TLD before impreza_domain_check or impreza_register_domain. Read-only.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- title: Domain price list
impreza_list_appsList apps available in the Impreza curated catalog.No findings
Why it is in this group
- The name "impreza_list_apps" says "list": a word for reading.
Description, as the server wrote it List apps available in the Impreza curated catalog. Optional filters: category and search. For a custom app outside the catalog, use impreza_deploy_custom.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- title: Browse app catalog
impreza_list_productsList the products a customer can order (VPS, Tor hosting, dedicated servers, …) with pricing in the account currency.No findings
Why it is in this group
- The name "impreza_list_products" says "list": a word for reading.
Description, as the server wrote it List the products a customer can order (VPS, Tor hosting, dedicated servers, …) with pricing in the account currency. Filter to server products with type "server". The VPS is one configurable product (configurable: true, priced from its smallest size) — get its locations, operating systems and sizes with impreza_vps_offer. Fixed plans return id, name, group and per-cycle price + setup fee — feed the id + a billing_cycle into impreza_order_vps.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- title: List products and prices
impreza_search_docsSearch the Impreza documentation and get the actual paragraph back.No findings
Why it is in this group
- The name "impreza_search_docs" says "search": a word for reading.
Description, as the server wrote it Search the Impreza documentation and get the actual paragraph back. Use this BEFORE guessing an argument, a field name or how a flow works — "container_name 502", "onion", "how does topup work", "manifest routing", "rate limit". Returns the matching sections with their heading trail and the relevant excerpt, so you answer from what the docs say instead of from a guess. A guessed argument costs a 400 and a round trip; this costs one call. Also use it when a customer asks how something works: the answer is written down and you can quote it.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- title: Search documentation
impreza_validate_manifestCheck a custom-deploy manifest BEFORE deploying it.1 finding
Why it is in this group
- The name "impreza_validate_manifest" says "validate": a word for reading.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...ports "running" and 502s. Never include credentials in source text: secret detection cannot..."
Description, as the server wrote it Check a custom-deploy manifest BEFORE deploying it. Returns `errors` — the exact reasons the deploy endpoint would reject it, checked by the same validator, so no errors means it will not be turned away for a known reason — and `warnings`: footguns that deploy fine and then hurt (unpinned image, no restart policy, a published port bypassing the reverse proxy) plus the PRIVACY findings that matter on this product: third-party CDN/font/analytics origins, public DNS resolvers, hardcoded timezones, literal secrets, outbound mail. Every finding carries a `fix`. Call this before impreza_deploy_custom: one call here beats a deploy that reports "running" and 502s. Never include credentials in source text: secret detection cannot inspect arbitrary source or configuration. Enter runtime secrets through the owner portal link.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- title: Validate deploy manifest
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.55.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http impreza https://mcp.imprezahost.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__impreza__impreza_list_apps",
"mcp__impreza__impreza_search_docs",
"mcp__impreza__impreza_validate_manifest",
"mcp__impreza__impreza_domain_pricing",
"mcp__impreza__impreza_list_products"
],
"ask": [
"mcp__impreza__impreza_bootstrap_account",
"mcp__impreza__impreza_domain_check",
"mcp__impreza__impreza_vps_offer"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as impreza. Review it before you use it.
