Homespun

warnings

homespun.dev

Deploy a multi-user web app from your agent: hosting, auth, database, and permissions.

https://homespun.dev/mcpWebsiteOAuthMCP 2025-11-25v1.6.76last checked 24 Aug 2026spoke MCP on 3 of 3 checks (30 days)initialize in 217 ms

How to authenticate

Checked against the endpoint by our probe on 24 Aug 2026. These are the capabilities the server advertises, not a prediction about any particular client.

Scheme	OAuth
Issuer	https://homespun.dev
Dynamic client registration	✓Advertised (RFC 7591)
Client ID Metadata Document	✕Not advertised
PKCE	✓S256
Grant types	authorization_code, refresh_token
Scopes	homespun
Protected-resource metadata	✓Published (RFC 9728)
Anonymous access	Handshake succeeds; 25 tools listable
Credentials demanded in prose	✕apps, attachments, key, review These tools are listed anonymously and their own descriptions ask for an account or key, but no challenge is issued — so a client has nothing to act on and the refusal arrives as a tool error.
Documentation	https://homespun.dev/skills/homespun/MCP.md

What the probe found

warningTools needing credentials are listed without a challenge

4 of the 25 tools listed anonymously say in their own descriptions that they need an account or a key (apps, attachments, key, review), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.

25 tools usable without signing in

The server exposes a public surface before authorization: deploy_app, list_rows, count_rows, get_row, upsert_row, update_row, delete_row, list_deleted_rows, restore_row, get_feed_events, apps, members, grants, credentials, connections, ingest, attachments, taste, key, feedback, agent, community, publisher, review, get_skill.

Tools

agentappsattachmentscommunityconnectionscount_rowscredentialsdelete_rowdeploy_appfeedbackget_feed_eventsget_rowget_skillgrantsingestkeylist_deleted_rowslist_rowsmemberspublisherrestore_rowreviewtasteupdate_rowupsert_row

Contract history

24 Aug 2026v1.6.76first recorded contract

Get alerted when this contract changes

Depend on this server? Leave an email and get a message when a probe records a change — a tool removed, an argument newly required, an enum narrowed. Alerts are being built; signing up is what tells us to hurry.

Prefer a feed reader? This page's contract changes are also an Atom feed.

Status badge

Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.

[![MCP status](https://mcpi.app/servers/homespun/badge.svg)](https://mcpi.app/servers/homespun)