AIfra — temporary static previews
by nickbasharin · remote · local (npm) · no sign-in to list tools · v0.2.0-beta.3 · published by GitHub user nickbasharin
48-hour HTTPS previews of prebuilt static sites and HTML slides. No server builds or backends.
6 tools: 2 can delete or cancel things, 1 change things and 3 only read.
Scanned Oct 21, 2026
- Deletes or cancels2Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things1Claude Code: ask: see these tools
- Only reads3Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http aifra https://api.aifra.ru/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
6 tools
Deletes or cancels 2Claude Code: deny
delete_previewPrepare deletion of an existing preview.No findings
Why it is in this group
- The name "delete_preview" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Prepare deletion of an existing preview. Does not delete until its owner confirms in the browser holding the management key.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
update_previewPrepare replacement of an existing temporary static preview.No findings
Why it is in this group
- The name "update_preview" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Prepare replacement of an existing temporary static preview. Supply exactly one of small files or ZIP archive_base64. No backend/build. Requires explicit consent; returns an approval link, not a published URL. User must confirm in their browser. Requires the browser holding the existing management key; expiry is unchanged.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
Changes things 1Claude Code: ask
create_previewPrepare a new temporary static preview.No findings
Why it is in this group
- The name "create_preview" says "create": a word for a change.
Description, as the server wrote it Prepare a new temporary static preview. Supply exactly one of small files or ZIP archive_base64. No backend/build. Requires explicit consent; returns an approval link, not a published URL. User must confirm in their browser.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
Only reads 3Claude Code: allow
get_deploy_instructionsExplain remote browser-confirmed AIfra publication of ready static files, limits and current terms.No findings
Why it is in this group
- The name "get_deploy_instructions" says "get": a word for reading.
Description, as the server wrote it Explain remote browser-confirmed AIfra publication of ready static files, limits and current terms.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_operation_statusRead whether a prepared operation is pending, complete, failed or uncertain.No findings
Why it is in this group
- The name "get_operation_status" says "get": a word for reading.
Description, as the server wrote it Read whether a prepared operation is pending, complete, failed or uncertain. Returns no file content or management key. Never assume pending means published.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_preview_statusRead current public status, URL and server-enforced expiry of an existing preview.No findings
Why it is in this group
- The name "get_preview_status" says "get": a word for reading.
Description, as the server wrote it Read current public status, URL and server-enforced expiry of an existing preview. Only the service owner can manually extend expiry; updates never extend it.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.2.0-beta.3. Values in angle brackets are yours to fill in.
claude mcp add --transport http aifra https://api.aifra.ru/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__aifra__get_deploy_instructions",
"mcp__aifra__get_operation_status",
"mcp__aifra__get_preview_status"
],
"ask": [
"mcp__aifra__create_preview"
],
"deny": [
"mcp__aifra__update_preview",
"mcp__aifra__delete_preview"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as aifra. Review it before you use it.
