AgentBuilders

by sirarchiemccarthy-oss · remote · no sign-in to list tools · v0.6.1 · published by GitHub user sirarchiemccarthy-oss

Deploy full-stack web apps with database, file storage, auth, and RBAC via a single API call.

Changes · 8

Compare Registry entry

13 tools: 8 change things and 5 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things8Claude Code: ask: see these tools
Only reads5Claude Code: allow: see these tools

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http agentbuilders https://api.agentbuilders.app/mcp --header 'Authorization: <your-authorization>'

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

13 tools

Changes things 8Creates or changes something that can be changed back.Claude Code: ask

claim_deploymentClaim ownership of an agent-deployed app using its claim code.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Claim ownership of an agent-deployed app using its claim code. Transfers the app from the deploying agent to your account.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
create_appCreate an app entry without deploying files.No findings
Why it is in this group
- The name "create_app" says "create": a word for a change.
Description, as the server wrote it
Create an app entry without deploying files. Reserves the name and sets initial configuration. Supports BYO (Bring Your Own) integrations via proxy secrets — after creation, use set_secret to attach third-party API keys and verify_integration to confirm connectivity. Use deploy_app later to push files.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
create_custom_domainAttach a custom domain to an app.No findings
Why it is in this group
- The name "create_custom_domain" says "create": a word for a change.
Description, as the server wrote it
Attach a custom domain to an app. Returns DNS instructions (CNAME + TXT records) for verification. Requires Hobby tier or above.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
deploy_appDeploy a full-stack web app.No findings
Why it is in this group
- The name "deploy_app" says "deploy": a word for a change.
Description, as the server wrote it
Deploy a full-stack web app. Creates or redeploys an app with static files, optional database, file storage, user auth, and RBAC. Supports BYO (Bring Your Own) integrations — after deploy, use set_secret to attach third-party API keys (Stripe, Resend, Neon, etc.) and the app can proxy requests through them securely. Returns a live URL.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
deploy_previewDeploy an ephemeral preview of an app.No findings
Why it is in this group
- The name "deploy_preview" says "deploy": a word for a change.
Description, as the server wrote it
Deploy an ephemeral preview of an app. The preview auto-expires after the specified TTL (default: 1 hour, max: 24 hours). Returns a unique preview URL.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
set_secretStore a BYO (Bring Your Own) proxy secret for an app.No findings
Why it is in this group
- The name "set_secret" says "set": a word for a change.
Description, as the server wrote it
Store a BYO (Bring Your Own) proxy secret for an app. Used to attach third-party API keys so the app can proxy requests through AgentBuilders without exposing keys to the client. Common secret names: STRIPE_SECRET_KEY, RESEND_API_KEY, NEON_DATABASE_URL, SENTRY_DSN, POSTHOG_API_KEY, CLERK_SECRET_KEY, OPENAI_API_KEY, GITHUB_TOKEN. Domains are auto-detected from the secret name (e.g., STRIPE_* routes to api.stripe.com). Secret values are never returned in responses. Use verify_integration after setting a secret to confirm connectivity.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
update_appUpdate app settings (e.g., toggle public/private) without full redeploy.No findings
Why it is in this group
- The name "update_app" says "update": a word for a change.
Description, as the server wrote it
Update app settings (e.g., toggle public/private) without full redeploy.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
verify_integrationVerify a BYO (Bring Your Own) integration is correctly configured for an app.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Verify a BYO (Bring Your Own) integration is correctly configured for an app. Checks that the proxy secret exists, the target service is reachable, and a lightweight health probe succeeds. Returns structured pass/fail per check. Supported services: stripe, resend, neon, sentry, posthog, clerk, openai, github, supabase.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

Only reads 5Looks things up and changes nothing.Claude Code: allow

get_appGet details of a specific app including URL, capabilities, and version.No findings
Why it is in this group
- The name "get_app" says "get": a word for reading.
Description, as the server wrote it
Get details of a specific app including URL, capabilities, and version.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_deploymentGet deployment history and version info for an app.No findings
Why it is in this group
- The name "get_deployment" says "get": a word for reading.
Description, as the server wrote it
Get deployment history and version info for an app. Returns the current version, available rollback versions, and deploy trail entries.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_logsGet recent deploy logs and operational events for an app.No findings
Why it is in this group
- The name "get_logs" says "get": a word for reading.
Description, as the server wrote it
Get recent deploy logs and operational events for an app. Includes deploy successes, failures, rollbacks, and errors.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_viewkeyGet the viewKey for a private app.No findings
Why it is in this group
- The name "get_viewkey" says "get": a word for reading.
Description, as the server wrote it
Get the viewKey for a private app. Users need this to access the app.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_appsList all apps deployed with your API key.No findings
Why it is in this group
- The name "list_apps" says "list": a word for reading.
Description, as the server wrote it
List all apps deployed with your API key.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.6.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http agentbuilders https://api.agentbuilders.app/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__agentbuilders__list_apps",
      "mcp__agentbuilders__get_app",
      "mcp__agentbuilders__get_viewkey",
      "mcp__agentbuilders__get_deployment",
      "mcp__agentbuilders__get_logs"
    ],
    "ask": [
      "mcp__agentbuilders__deploy_app",
      "mcp__agentbuilders__update_app",
      "mcp__agentbuilders__create_app",
      "mcp__agentbuilders__deploy_preview",
      "mcp__agentbuilders__claim_deployment",
      "mcp__agentbuilders__set_secret",
      "mcp__agentbuilders__create_custom_domain",
      "mcp__agentbuilders__verify_integration"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as agentbuilders. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.sirarchiemccarthy-oss/agentbuilders/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:49 UTC.

For agents: Markdown · JSON · report this listing