dochost
by zyli5313 · remote · no sign-in to list tools · v1.1.0 · published by GitHub user zyli5313
Publish, list, update and delete shareable Markdown/HTML pages from your AI assistant.
8 tools: 2 can delete or cancel things, 1 do something that can't be undone, 1 change things and 4 only read.
Scanned Oct 21, 2026
- Deletes or cancels2Claude Code: deny: see these tools
- Can't be undone1Claude Code: ask: see these tools
- Changes things1Claude Code: ask: see these tools
- Only reads4Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http dochost https://dochost.io/api/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
8 tools
Deletes or cancels 2Claude Code: deny
delete_pagePermanently delete one of your pages by slug.No findings
Why it is in this group
- The name "delete_page" says "delete": a word for removing or ending something.
- The description says "Permanently delete".
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Permanently delete one of your pages by slug. The link stops working immediately and the slug is freed. Deleting an already-deleted page is a safe no-op.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: true
update_pageReplace the content of one of your pages in place.No findings
Why it is in this group
- The name "update_page" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Replace the content of one of your pages in place. The URL, view/like counts, and expiry stay the same; only the body, format, and title change. Resending identical content is a no-op. Prefer this over publishing again whenever the user is revising something you already published for them — a second publish creates a second link and strands the one they already shared. This replaces the WHOLE body, so unless you wrote the live content yourself in this conversation, call get_page_content first and pass its version/sha256 back as ifVersion/ifSha — the write is then refused with the current version instead of overwriting an edit you never saw.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: true
Can't be undone 1Claude Code: ask
publishPublish HTML or Markdown as a hosted web page and return a shareable URL.No findings
Why it is in this group
- The name "publish" says "publish": a word for a change that another call does not undo.
Description, as the server wrote it Publish HTML or Markdown as a hosted web page and return a shareable URL. Use when the user asks to share an HTML quiz, calculator, report or Markdown document as a link. HTML JavaScript runs in a sandbox. Free links expire after seven days; paid link lifetime and options follow account entitlements. For revisions of an existing page, use update_page to keep the same link. Results report expiry and any ignored options; relay ignoredOptions/ignoredNote instead of claiming all requested settings were applied. New links use the account primary host; get_account reports it.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
Changes things 1Claude Code: ask
set_page_optionsChange a published page's visibility, search-engine indexing or password WITHOUT republishing it — the URL, view count and content all stay the same.No findings
Why it is in this group
- The name "set_page_options" says "set": a word for a change.
Description, as the server wrote it Change a published page's visibility, search-engine indexing or password WITHOUT republishing it — the URL, view count and content all stay the same. Use this instead of deleting and publishing again, which changes the link the user already shared. Send only the fields you want to change. Turning a paid capability off never needs an entitlement; turning one on is checked against the current plan. A password always forces the page private, so asking for both `public: true` and a password is refused rather than silently resolved. dochost branding is NOT settable here: it is resolved from the account's live plan at render time, so there is nothing per-page to flip — read `brandingHidden` from get_page for the rendered answer.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
Only reads 4Claude Code: allow
get_accountGet your plan, page-quota usage, entitlement flags (size cap, custom slug, password, branding, subdomain, custom domain), and the primary host new links publish on.No findings
Why it is in this group
- The name "get_account" says "get": a word for reading.
Description, as the server wrote it Get your plan, page-quota usage, entitlement flags (size cap, custom slug, password, branding, subdomain, custom domain), and the primary host new links publish on. Call when you need plan limits, domain details or paid-option availability; a basic publish can use defaults without this extra call. The primary host is chosen in the dashboard (manageDomainsUrl), not through this API.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
get_pageGet one of your pages by slug: title, format, status, view/like counts, expiry, whether it is password-protected, and its current visibility / indexing / branding state.No findings
Why it is in this group
- The name "get_page" says "get": a word for reading.
Description, as the server wrote it Get one of your pages by slug: title, format, status, view/like counts, expiry, whether it is password-protected, and its current visibility / indexing / branding state. Never returns the page body or the password — call get_page_content when you need the source itself, and set_page_options to change any of the settings it reports.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
get_page_contentRead back the CURRENT Markdown or HTML of one of your pages.No findings
Why it is in this group
- The name "get_page_content" says "get": a word for reading.
Description, as the server wrote it Read back the CURRENT Markdown or HTML of one of your pages. Call this before update_page whenever you did not write the live content yourself in this same conversation — update_page replaces the body wholesale, so editing from memory silently discards anything you cannot see, including edits the user made in the browser. Returns `version` and `sha256`; pass them to update_page as ifVersion / ifSha so the write is refused instead of overwriting a change you did not read. Expired pages are readable, and updating one republishes it on the same URL.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
list_my_pagesList the pages you have published to dochost, newest first.No findings
Why it is in this group
- The name "list_my_pages" says "list": a word for reading.
Description, as the server wrote it List the pages you have published to dochost, newest first. Paginated; returns compact records (no page bodies).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.1.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http dochost https://dochost.io/api/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__dochost__list_my_pages",
"mcp__dochost__get_account",
"mcp__dochost__get_page",
"mcp__dochost__get_page_content"
],
"ask": [
"mcp__dochost__publish",
"mcp__dochost__set_page_options"
],
"deny": [
"mcp__dochost__update_page",
"mcp__dochost__delete_page"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as dochost. Review it before you use it.
