Skip to content

Impreza Host

by imprezahost · remote · local (npm) · no sign-in to list tools · v0.55.1 · published by GitHub user imprezahost

No-KYC offshore hosting an AI agent runs end-to-end: no-email signup, crypto, VPS, deploy, Tor.

Changes · 31 high finding

8 tools: 3 change things and 5 only read.

Scanned Oct 21, 2026

5 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http impreza https://mcp.imprezahost.com/mcp

Findings

Matches of fixed checks, with the text they matched.

1 high4 info

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

8 tools

Changes things 3Claude Code: ask
  • impreza_bootstrap_accountCreate a brand-new ANONYMOUS Impreza account — no e-mail, no KYC — and get an operating credential in ONE call.4 findings

    Why it is in this group

    • The description's first verb is "create": a word for a change.

    Findings

    • High

      The description refers to "/v1/credentials".

      Matched text

      description: "...ding after MCP expiry). Renew with POST /v1/credentials authenticated by the returned REST key..."

      What this check looks for
    • Info

      The description mentions "credential".

      Matched text

      description: "...o e-mail, no KYC — and get an operating credential in ONE call. Use this when you have no..."

      What this check looks for
    • Info

      The input schema at properties.label.description mentions "credential".

      Matched text

      inputSchema.properties.label.description: "Optional label for the account/credential (e.g. your agent name)."

      What this check looks for
    • Info

      The input schema at properties.scopes.description mentions "credential".

      Matched text

      inputSchema.properties.scopes.description: "Optional credential scopes. Omit for read, deploy and manag..."

      What this check looks for
    Description, as the server wrote it
    Create a brand-new ANONYMOUS Impreza account — no e-mail, no KYC — and get an operating credential in ONE call. Use this when you have no account or token yet. Returns: account_id, api_key + api_secret (REST), a fresh mcp_token valid for 15 minutes (reconnect THIS MCP server with it as the Bearer to unlock the full toolset), its mcp_token_expires_at, renewal instructions, and a recovery_code shown once (save it for account recovery, including after MCP expiry). Renew with POST /v1/credentials authenticated by the returned REST key and secret, explicit scopes and ttl_seconds; the renewal example includes daily and monthly spending ceilings for manage. Omit manage to prevent purchases. After bootstrapping, reconnect with the mcp_token. Have a server already? impreza_add_server installs the agent on it, and the first external server is free (no plan, no credit). Otherwise fund the account in crypto with impreza_topup (BTC/XMR) before ordering a VPS.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • title: Create an anonymous account
  • impreza_domain_checkCheck domain availability + price before registering.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Check domain availability + price before registering. Pass one domain or several comma-separated. Read-only.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
    • title: Check domain availability
  • impreza_vps_offerWhat a new VPS can be, and what it costs.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    What a new VPS can be, and what it costs. Lists the locations (with each jurisdiction's note), the operating systems, the CPU/memory/disk ranges with the price per unit for every billing cycle, and the apps it can be born with, in the account currency. Pass a whole configuration (billing_cycle, location, os, cpu_cores, memory_gb, disk_gb) to get its exact price instead — what is due today, what it renews at, whether the balance covers it and whether that location has room right now. With app omitted the quote means '@agent', this MCP's default, the same as impreza_order_vps. Then order it with impreza_order_vps using the same values. Read-only.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • title: VPS options and prices
Only reads 5Claude Code: allow
  • impreza_domain_pricingList registration, renewal and transfer prices for the TLDs Impreza sells, in the account currency.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List registration, renewal and transfer prices for the TLDs Impreza sells, in the account currency. Use this to compare prices and choose a TLD before impreza_domain_check or impreza_register_domain. Read-only.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • title: Domain price list
  • impreza_list_appsList apps available in the Impreza curated catalog.No findings

    Why it is in this group

    • The name "impreza_list_apps" says "list": a word for reading.
    Description, as the server wrote it
    List apps available in the Impreza curated catalog. Optional filters: category and search. For a custom app outside the catalog, use impreza_deploy_custom.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • title: Browse app catalog
  • impreza_list_productsList the products a customer can order (VPS, Tor hosting, dedicated servers, …) with pricing in the account currency.No findings

    Why it is in this group

    • The name "impreza_list_products" says "list": a word for reading.
    Description, as the server wrote it
    List the products a customer can order (VPS, Tor hosting, dedicated servers, …) with pricing in the account currency. Filter to server products with type "server". The VPS is one configurable product (configurable: true, priced from its smallest size) — get its locations, operating systems and sizes with impreza_vps_offer. Fixed plans return id, name, group and per-cycle price + setup fee — feed the id + a billing_cycle into impreza_order_vps.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • title: List products and prices
  • impreza_search_docsSearch the Impreza documentation and get the actual paragraph back.No findings

    Why it is in this group

    • The name "impreza_search_docs" says "search": a word for reading.
    Description, as the server wrote it
    Search the Impreza documentation and get the actual paragraph back. Use this BEFORE guessing an argument, a field name or how a flow works — "container_name 502", "onion", "how does topup work", "manifest routing", "rate limit". Returns the matching sections with their heading trail and the relevant excerpt, so you answer from what the docs say instead of from a guess. A guessed argument costs a 400 and a round trip; this costs one call. Also use it when a customer asks how something works: the answer is written down and you can quote it.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • title: Search documentation
  • impreza_validate_manifestCheck a custom-deploy manifest BEFORE deploying it.1 finding

    Why it is in this group

    • The name "impreza_validate_manifest" says "validate": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...ports "running" and 502s. Never include credentials in source text: secret detection cannot..."

      What this check looks for
    Description, as the server wrote it
    Check a custom-deploy manifest BEFORE deploying it. Returns `errors` — the exact reasons the deploy endpoint would reject it, checked by the same validator, so no errors means it will not be turned away for a known reason — and `warnings`: footguns that deploy fine and then hurt (unpinned image, no restart policy, a published port bypassing the reverse proxy) plus the PRIVACY findings that matter on this product: third-party CDN/font/analytics origins, public DNS resolvers, hardcoded timezones, literal secrets, outbound mail. Every finding carries a `fix`. Call this before impreza_deploy_custom: one call here beats a deploy that reports "running" and 502s. Never include credentials in source text: secret detection cannot inspect arbitrary source or configuration. Enter runtime secrets through the owner portal link.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • title: Validate deploy manifest

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.55.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http impreza https://mcp.imprezahost.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__impreza__impreza_list_apps",
      "mcp__impreza__impreza_search_docs",
      "mcp__impreza__impreza_validate_manifest",
      "mcp__impreza__impreza_domain_pricing",
      "mcp__impreza__impreza_list_products"
    ],
    "ask": [
      "mcp__impreza__impreza_bootstrap_account",
      "mcp__impreza__impreza_domain_check",
      "mcp__impreza__impreza_vps_offer"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as impreza. Review it before you use it.