ShipStatic

warnings

mcp.shipstatic.com

Deploy static websites from AI agents. Free at mcp.shipstatic.com — no install, no signup.

https://mcp.shipstatic.comWebsiteOAuthMCP 2025-11-25v1.3.5last checked 24 Aug 2026spoke MCP on 3 of 3 checks (30 days)initialize in 315 ms

How to authenticate

Checked against the endpoint by our probe on 24 Aug 2026. These are the capabilities the server advertises, not a prediction about any particular client.

Scheme	OAuth
Issuer	https://api.shipstatic.com/auth
Dynamic client registration	✓Advertised (RFC 7591)
Client ID Metadata Document	✕Not advertised
PKCE	✓S256
Grant types	authorization_code, refresh_token
Scopes	account:read, deployments:read, deployments:write, domains:read, domains:write, offline_access
Protected-resource metadata	✓Published (RFC 9728)
Anonymous access	Handshake succeeds; 15 tools listable
Credentials demanded in prose	✕deployments_upload, domains_share These tools are listed anonymously and their own descriptions ask for an account or key, but no challenge is issued — so a client has nothing to act on and the refusal arrives as a tool error.

What the probe found

warningTools needing credentials are listed without a challenge

2 of the 15 tools listed anonymously say in their own descriptions that they need an account or a key (deployments_upload, domains_share), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.

15 tools usable without signing in

The server exposes a public surface before authorization: deployments_upload, deployments_list, deployments_get, deployments_set, deployments_delete, domains_set, domains_list, domains_get, domains_records, domains_dns, domains_share, domains_validate, domains_verify, domains_delete, whoami.

Tools

deployments_deletedeployments_getdeployments_listdeployments_setdeployments_uploaddomains_deletedomains_dnsdomains_getdomains_listdomains_recordsdomains_setdomains_sharedomains_validatedomains_verifywhoami

Contract history

24 Aug 2026v1.3.5first recorded contract

Get alerted when this contract changes

Depend on this server? Leave an email and get a message when a probe records a change — a tool removed, an argument newly required, an enum narrowed. Alerts are being built; signing up is what tells us to hurry.

Prefer a feed reader? This page's contract changes are also an Atom feed.

Status badge

Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.

[![MCP status](https://mcpi.app/servers/shipstatic/badge.svg)](https://mcpi.app/servers/shipstatic)