mcphost

Server Details

Hosted MCP runtime where your agent publishes its own tools by tool call and keeps working.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.

Status: Healthy
Uptime: 100.0% over 38 days
Last Tested: 2026-10-13 10:09
Transport: Streamable HTTP · MCP 2025-11-25
URL
Repository: j0yen/mcphost
GitHub Stars: 0
Server Listing: mcphost

TDQS

A3.7/5.0

Scored 2026-10-07 12:15 across 12 tools

Disambiguation4/5

Most tools target distinct resources (state.get/list/set, tool_publish/share/test/call), and the descriptions clarify the key boundaries. The closest pair, host.tool_call vs host.tool_test, is explicitly differentiated (metered real call vs dry-run). Minor overlap remains between signup and host.redeem and between host.quickstart and host.tool_publish, but each is distinguishable.

Naming Consistency3/5

The host.* family follows a consistent dotted namespace plus verb_noun pattern (host.state.get, host.tool_publish). However, top-level tools break the pattern: signup is a bare verb with no namespace while billing.plans uses a dotted resource-style name, and there is no host.* prefix on either. Readable overall but conventions are mixed.

Tool Count5/5

Twelve tools is well within the ideal range and each maps to a distinct capability (identity, billing, state, publishing, sharing, testing, invoking, onboarding). No filler or redundant entries are apparent.

Completeness3/5

State supports get/list/set but has no delete, and there is no tool to list, unpublish, or delete published tools, nor a tool_history surface. Several tools reference companion operations (host.runs.get/wait, host.tool_history) that are not themselves exposed, creating dead ends for async runs and version pinning.

Available Tools

14 tools

billing.plansInspect

The plan catalog (price and quotas per plan) and whether Stripe billing is configured on this host. Anonymous callers get the same answer as tenants.

ParametersJSON Schema

Name	Required	Description	Default
`tenant_key`	No	The key `signup` returned. Optional on the connection that ran signup (or host.redeem): that connection is already bound to the tenant it created, so later calls on it need no tenant_key. On a connection with no Authorization: Bearer header and no prior signup, omitting it implicitly signs that connection up as a brand-new tenant and runs this call as it -- see host.whoami's source field. When both a header and this argument are present, the header wins.

Output Schema

ParametersJSON Schema

Name	Required	Description
`plans`	Yes
`billing_mode`	Yes

host.feedback.listInspect

List your own feedback (newest first, status received). Anonymous callers get [].

ParametersJSON Schema

Name	Required	Description	Default
`limit`	No	Max rows, up to 100; default 20.
`tenant_key`	No	The key `signup` returned. Optional on the connection that ran signup (or host.redeem): that connection is already bound to the tenant it created, so later calls on it need no tenant_key. On a connection with no Authorization: Bearer header and no prior signup, omitting it implicitly signs that connection up as a brand-new tenant and runs this call as it -- see host.whoami's source field. When both a header and this argument are present, the header wins.

Output Schema

ParametersJSON Schema

Name	Required	Description
`note`	No
`count`	Yes
`feedback`	Yes

host.feedback.sendInspect

Tell the host's humans what you needed: kind, up to 2048 bytes of text, optional context. Works before signup. Returns feedback_id.

ParametersJSON Schema

Name	Required	Description
`kind`	Yes	What you are telling the host.
`text`	Yes	What you needed or saw; 1 to 2048 bytes after trim.
`context`	No	Optional, at most 1 KB: tool, error_code, free.
`tenant_key`	No	The key `signup` returned. Optional on the connection that ran signup (or host.redeem): that connection is already bound to the tenant it created, so later calls on it need no tenant_key. On a connection with no Authorization: Bearer header and no prior signup, omitting it implicitly signs that connection up as a brand-new tenant and runs this call as it -- see host.whoami's source field. When both a header and this argument are present, the header wins.

Output Schema

ParametersJSON Schema

Name	Required	Description
`kind`	Yes
`feedback_id`	Yes

host.quickstartInspect

Return the shortest ordered sequence of calls to a working tool of kind, with your namespace and a filled-in example already substituted in, plus the current limits and a try_before_call table naming the one dry-run tool for each case. Read-only -- this call alone never creates a tenant. Call this before host.tool_publish if you're not sure what a spec should look like. Unauthenticated callers get a worked example with no tenant data; any other host./billing. call creates a tenant on first use, no signup required.

ParametersJSON Schema

Name	Required	Description	Default
`kind`	No	Which registered kind to return a worked example for, e.g. echo, http, python -- or a job-word alias (webhook, event, cron, ...) for its recipe. Omit to see every kind, alias and recipe name.
`tenant_key`	No	The key `signup` returned. Optional on the connection that ran signup (or host.redeem): that connection is already bound to the tenant it created, so later calls on it need no tenant_key. On a connection with no Authorization: Bearer header and no prior signup, omitting it implicitly signs that connection up as a brand-new tenant and runs this call as it -- see host.whoami's source field. When both a header and this argument are present, the header wins.

Output Schema

ParametersJSON Schema

Name	Required	Description
`hint`	No
`kind`	No
`next`	No
`kinds`	No
`steps`	No
`verbs`	No
`limits`	No
`recipe`	No
`aliases`	No
`example`	No
`outcome`	No
`recipes`	No
`verdict`	No
`endpoint`	No
`triggers`	No
`namespace`	No
`sandbox_api`	No
`alt_endpoint`	No
`reachability`	No
`starter_tool`	No
`welcome_back`	No
`authenticated`	No
`install_links`	No
`resolved_from`	No
`bridge_returns`	No
`recipes_nearby`	No
`install_doc_url`	No
`try_before_call`	No
`host_steps_allowed`	No

host.redeemInspect

Exchange a signup(handoff: true) handoff_token for the tenant key it was issued for. Single-use: a second redemption fails with handoff_token_redeemed; past its expiry it fails with handoff_token_expired. Unauthenticated -- the token itself is the proof.

ParametersJSON Schema

Name	Required	Description	Default
`tenant_key`	No	The key `signup` returned. Optional on the connection that ran signup (or host.redeem): that connection is already bound to the tenant it created, so later calls on it need no tenant_key. On a connection with no Authorization: Bearer header and no prior signup, omitting it implicitly signs that connection up as a brand-new tenant and runs this call as it -- see host.whoami's source field. When both a header and this argument are present, the header wins.
`handoff_token`	Yes	The handoff_token signup(handoff: true) returned.

Output Schema

ParametersJSON Schema

Name	Required	Description
`key`	Yes
`next`	Yes
`usage`	Yes
`session_bound`	Yes

host.state.getInspect

Read one key from this tenant's key-value state namespace. Returns found: false (not an error) if the key was never set.

ParametersJSON Schema

Name	Required	Description
`key`	Yes	Key to read from this tenant's key-value state namespace.
`end_user`	No	"self" for the caller's own verified end-user identity, an explicit subject (only when this call carries no end-user identity of its own), or omit/null for the tenant-wide value.
`tenant_key`	No	The key `signup` returned. Optional on the connection that ran signup (or host.redeem): that connection is already bound to the tenant it created, so later calls on it need no tenant_key. On a connection with no Authorization: Bearer header and no prior signup, omitting it implicitly signs that connection up as a brand-new tenant and runs this call as it -- see host.whoami's source field. When both a header and this argument are present, the header wins.

Output Schema

ParametersJSON Schema

Name	Required	Description
`key`	Yes
`found`	Yes
`value`	Yes
`impersonated`	No
`updated_unix`	No

host.state.listInspect

List keys (with their current values) in this tenant's key-value state namespace, optionally filtered by prefix.

ParametersJSON Schema

Name	Required	Description
`limit`	No	Max keys to return; default 100.
`prefix`	No	Only list keys starting with this prefix; default: all keys.
`end_user`	No	"self" for the caller's own verified end-user identity, an explicit subject (only when this call carries no end-user identity of its own), or omit/null for the tenant-wide value.
`tenant_key`	No	The key `signup` returned. Optional on the connection that ran signup (or host.redeem): that connection is already bound to the tenant it created, so later calls on it need no tenant_key. On a connection with no Authorization: Bearer header and no prior signup, omitting it implicitly signs that connection up as a brand-new tenant and runs this call as it -- see host.whoami's source field. When both a header and this argument are present, the header wins.

Output Schema

ParametersJSON Schema

Name	Required	Description
`data`	No
`keys`	Yes

host.state.setInspect

Write one key in this tenant's key-value state namespace; value may be any JSON value. Overrun of the plan's state_bytes_max quota fails with state_quota_exceeded and writes nothing.

ParametersJSON Schema

Name	Required	Description
`key`	Yes	Key to write in this tenant's key-value state namespace.
`value`	Yes	Any JSON value to store under key.
`dry_run`	No	return the diff this call would make and commit nothing
`end_user`	No	"self" for the caller's own verified end-user identity, an explicit subject (only when this call carries no end-user identity of its own), or omit/null for the tenant-wide value.
`tenant_key`	No	The key `signup` returned. Optional on the connection that ran signup (or host.redeem): that connection is already bound to the tenant it created, so later calls on it need no tenant_key. On a connection with no Authorization: Bearer header and no prior signup, omitting it implicitly signs that connection up as a brand-new tenant and runs this call as it -- see host.whoami's source field. When both a header and this argument are present, the header wins.

Output Schema

ParametersJSON Schema

Name	Required	Description
`key`	Yes
`set`	Yes
`bytes_delta`	Yes
`impersonated`	No

host.tool_callInspect

Invoke a tool this tenant has already published, by its local name -- the same real, metered call as calling it directly by its namespaced name (.), for a session that has no way to see its own namespaced tool name yet. Unlike host.tool_test, this counts toward host.usage and appears in host.tool_logs. Pass async: true for a tool that needs more than the call deadline: returns {run_id, status: "queued"} immediately instead of running inline -- see host.runs.get/wait. Pass version to pin the call to one of host.tool_history's versions instead of whichever is current.

ParametersJSON Schema

Name	Required	Description
`args`	Yes	Arguments to pass, validated against the tool's own args_schema.
`name`	Yes	Local name of the tool to invoke.
`async`	No	Run as a job instead of inline: returns {run_id, status} within ~50ms under the plan's job_max_s deadline; default false.
`budget`	No	Lowers this call's budget below the plan default: any subset of max_child_calls, max_est_tokens, max_tool_latency_ms, max_wall_ms. A value above the plan's own ceiling is a validation error naming it; see host.runs.get's progress.budget.
`dry_run`	No	Ask instead of call: runs every admission check the real call runs, dispatches nothing, writes no call row, and returns {fits, units, remaining, refusal}; same as host.estimate. Default false.
`version`	No	Pin the call to this version instead of whichever is current; see host.tool_history. An unknown version is an argument error.
`tenant_key`	No	The key `signup` returned. Optional on the connection that ran signup (or host.redeem): that connection is already bound to the tenant it created, so later calls on it need no tenant_key. On a connection with no Authorization: Bearer header and no prior signup, omitting it implicitly signs that connection up as a brand-new tenant and runs this call as it -- see host.whoami's source field. When both a header and this argument are present, the header wins.

Output Schema

ParametersJSON Schema

Name	Required	Description
`id`	No
`ok`	No
`tz`	No
`v1`	No
`msg`	No
`url`	No
`args`	No
`body`	No
`kind`	No
`name`	No
`next`	No
`rows`	No
`text`	No
`tool`	No
`count`	No
`steps`	No
`preset`	No
`result`	No
`run_id`	No
`status`	No
`verify`	No
`changed`	No
`columns`	No
`created`	No
`doubled`	No
`enabled`	No
`headers`	No
`payload`	No
`schedule`	No
`next_unix`	No
`checked_at`	No
`onboarding`	No
`unverified`	No
`client_tool`	No
`https_proxy`	No
`last_run_id`	No
`last_status`	No
`created_unix`	No
`failed_steps`	No
`forwarded_to`	No
`welcome_back`	No
`dedupe_header`	No
`last_fired_unix`	No

host.tool_publishInspect

Publish a tool of a registered kind (e.g. python, http or echo; the kind argument's enum lists them all) under this tenant's namespace. Call host.quickstart(kind) first for a filled-in example spec and the full publish-to-call sequence. Python's sandbox API: import mcphost (mcphost.table, mcphost.state, mcphost.docs). Name must match ^[a-z][a-z0-9_]{1,40}$; a rejection names the failing field and a corrected example. Try host.tool_test before a real call.

ParametersJSON Schema

Name	Required	Description
`kind`	Yes	Which registered kind to publish under: one of this field's `enum` (host.quickstart with no kind lists every kind, alias and recipe). A job-word alias in the enum also resolves here -- webhook-style words for an inbound webhook, cron-style words for a timed run -- both resolve to kind http and the descriptor comes back with resolved_from naming the alias you asked for.
`name`	Yes	Local name for the new tool; must match ^[a-z][a-z0-9_]{1,40}$.
`spec`	Yes	The kind-specific spec object; see host.quickstart(kind) for a filled-in example. For python's network field: "none" (every plan), "public" (requires the pro plan), "egress" (requires the pro plan) -- a tool's own code reaches this tenant's data with `import mcphost` (mcphost.table, mcphost.state, mcphost.docs, mcphost.lineage) even when network is "none".
`scopes`	No	OAuth scopes a token must carry (directly, or via mcp) to reach this tool: catalogued names from host.oauth.scopes, or the built-ins read/write. At most 8. Omit (or [] ) to require only mcp -- unaffected by any catalog.
`dry_run`	No	return the diff this call would make and commit nothing
`tenant_key`	No	The key `signup` returned. Optional on the connection that ran signup (or host.redeem): that connection is already bound to the tenant it created, so later calls on it need no tenant_key. On a connection with no Authorization: Bearer header and no prior signup, omitting it implicitly signs that connection up as a brand-new tenant and runs this call as it -- see host.whoami's source field. When both a header and this argument are present, the header wins.

Output Schema

ParametersJSON Schema

Name	Required	Description
`ok`	No
`hint`	No
`kind`	No
`lock`	No
`name`	No
`next`	No
`gates`	No
`steps`	No
`reason`	No
`verdict`	No
`version`	No	The tool's version after this publish (1 for a first publish).
`evidence`	No
`failures`	No
`call_line`	No	A ready-to-paste call for the published tool. Optional: declared so a typed client reserves the field; absent from responses that do not carry one.
`onboarding`	No
`deprecations`	No
`welcome_back`	No
`resolved_from`	No

host.tool_shareInspect

Share one of this tenant's published tools with everyone (visibility: "public") or with a named group this tenant owns (visibility: "group", group: ). The tool keeps running in this tenant's own sandbox with this tenant's own secrets; a caller reaches it as <this tenant's namespace>..

ParametersJSON Schema

Name	Required	Description
`name`	Yes	Local name of the tool to share.
`group`	No	Required when visibility is "group"; must already exist (host.group.create).
`tenant_key`	No	The key `signup` returned. Optional on the connection that ran signup (or host.redeem): that connection is already bound to the tenant it created, so later calls on it need no tenant_key. On a connection with no Authorization: Bearer header and no prior signup, omitting it implicitly signs that connection up as a brand-new tenant and runs this call as it -- see host.whoami's source field. When both a header and this argument are present, the header wins.
`visibility`	Yes	"public" or "group".
`description`	No	Catalog-facing blurb; shown by host.catalog.search/get.
`expose_spec`	No	Default false. When true, any tenant this tool is shared with may call host.tool_spec_shared to read its (redacted) spec.

Output Schema

ParametersJSON Schema

Name	Required	Description
`url`	No
`name`	Yes
`next`	No
`group`	Yes
`visibility`	Yes
`description`	Yes
`expose_spec`	Yes
`welcome_back`	No

host.tool_testInspect

Dry-run a published tool by name: verdict (pass/will_fail/unverifiable), writes rolled back (dry_run); see host.quickstart.

ParametersJSON Schema

Name	Required	Description
`args`	Yes	Arguments to pass, same shape as a real call.
`name`	Yes	Local name of the already-published tool to dry-run.
`fixtures`	No	Chain tools only: {"<step number or tool name>": <recorded result>}. A fixtured step executes nothing (no upstream call); later mappings resolve against it. host.runs.get(run_id, as_fixtures=true) exports a real run in this shape.
`tenant_key`	No	The key `signup` returned. Optional on the connection that ran signup (or host.redeem): that connection is already bound to the tenant it created, so later calls on it need no tenant_key. On a connection with no Authorization: Bearer header and no prior signup, omitting it implicitly signs that connection up as a brand-new tenant and runs this call as it -- see host.whoami's source field. When both a header and this argument are present, the header wins.

Output Schema

ParametersJSON Schema

Name	Required	Description
`id`	No
`ok`	No
`tz`	No
`msg`	No
`args`	No
`kind`	No
`line`	No
`name`	No
`next`	No
`tool`	No
`error`	No
`outer`	No
`state`	No
`steps`	No
`detail`	No
`reason`	No
`result`	No
`schema`	No
`changed`	No
`created`	No
`dry_run`	Yes
`enabled`	No
`payload`	No
`request`	No
`verdict`	No
`envelope`	No
`evidence`	No
`failures`	No
`response`	No
`schedule`	No
`warnings`	No
`next_unix`	No
`environment`	No
`last_run_id`	No
`last_status`	No
`source_line`	No
`created_unix`	No
`forwarded_to`	No
`welcome_back`	No
`chain_dry_run`	No
`exception_class`	No
`inputs_required`	No
`last_fired_unix`	No

host.whoamiInspect

Return the calling tenant's identity, including key_age_s and key_rotated_at for auditing credential hygiene.

ParametersJSON Schema

Name	Required	Description	Default
`tenant_key`	No	The key `signup` returned. Optional on the connection that ran signup (or host.redeem): that connection is already bound to the tenant it created, so later calls on it need no tenant_key. On a connection with no Authorization: Bearer header and no prior signup, omitting it implicitly signs that connection up as a brand-new tenant and runs this call as it -- see host.whoami's source field. When both a header and this argument are present, the header wins.

Output Schema

ParametersJSON Schema

Name	Required	Description
`next`	No
`plan`	No
`admin`	No
`links`	No
`owner`	No
`source`	No
`tenant`	No
`subject`	No
`disabled`	No
`resource`	No
`claim_url`	No
`key_age_s`	No
`namespace`	No
`created_at`	No
`invite_url`	No
`onboarding`	No
`plan_since`	No
`auth_method`	No
`client_name`	No
`contract_sha`	Yes
`display_name`	No
`metadata_url`	No
`shared_tools`	No
`source_class`	No
`welcome_back`	No
`client_version`	No
`key_rotated_at`	No
`owner_verified`	No
`session_tenant`	No
`naming_rule_url`	No
`contract_version`	Yes
`admin_schema_version`	No

signupAInspect

Explicit signup, for a client that cannot keep a session across calls: create a tenant and receive a bearer key and namespace. Unauthenticated. Most clients never need this -- any other host./billing. call from a fresh connection creates a tenant implicitly and returns its own /u//mcp URL in the response's onboarding field. Recommended here: pass handoff: true to receive a short-lived, single-use handoff_token instead of the raw key -- redeem it once with host.redeem to get the key, so a transcript of this call and the redeem call, if it leaks, carries a dead credential. The raw-key path (handoff omitted) stays fully supported.

ParametersJSON Schema

Name	Required	Description	Default
`name`	Yes	display name
`handoff`	No	Recommended: true to receive a handoff_token (redeem via host.redeem) instead of the raw key. Default false (raw key, unchanged).

TDQS

A4.5/5.0

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does well: it discloses that the call is unauthenticated, explains the handoff_token security model (short-lived, single-use, transcript leakage yields a dead credential), and confirms the raw-key path remains supported. It omits edge-case behavior such as name collisions, idempotency of repeat signups, or rate limits, so it falls short of a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the core purpose and audience in the first clause, then layers the alternative path and the handoff recommendation. Four dense sentences with no filler, though the handoff security rationale could be tightened slightly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, and the description names the salient returns (bearer key, namespace, handoff_token, onboarding URL). It is sufficient for a 2-parameter tool, but it does not clarify response field names or the namespace's role, leaving a small gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% so the baseline is 3, but the description adds meaningful semantics for handoff beyond the schema: it is recommended, yields a short-lived single-use token redeemable once via host.redeem, and its purpose is leak containment. The name parameter gets no additional description, but the handoff elaboration lifts this above baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and outcome: create a tenant and receive a bearer key and namespace, explicitly framed as an 'explicit signup' for sessionless clients. It distinguishes itself from the implicit tenant creation performed by other host.*/billing.* calls and from host.redeem, so an agent can route correctly without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says most clients never need this and names the alternative path (any fresh host.*/billing.* call creates a tenant implicitly, returning an onboarding URL). It also gives the selecting condition ('a client that cannot keep a session across calls') and recommends a specific parameter value.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

1 tool updateOct 13, 2026

Changedhost.tool_publish1 field changed

changedInput schema / allOf

Previous value: -[
-  {
-    "if": {
-      "properties": {
-        "kind": {
-          "const": "chain"
-        }
-      },
-      "required": [
-        "kind"
-      ]
-    },
-    "then": {
-      "properties": {
-        "spec": {
-          "additionalProperties": false,
-          "properties": {
-            "reads": {},
-            "steps": {}
-          },
-          "required": [
-            "steps"
-          ],
-          "type": "object"
-        }
-      }
-    }
-  },
-  {
-    "if": {
-      "properties": {
-        "kind": {
-          "const": "echo"
-        }
-      },
-      "required": [
-        "kind"
-      ]
-    },
-    "then": {
-      "properties": {
-        "spec": {
-          "additionalProperties": false,
-          "properties": {
-            "reads": {},
-            "schema": {}
-          },
-          "required": [
-            "schema"
-          ],
-          "type": "object"
-        }
-      }
-    }
-  },
-  {
-    "if": {
-      "properties": {
-        "kind": {
-          "const": "http"
-        }
-      },
-      "required": [
-        "kind"
-      ]
-    },
-    "then": {
-      "properties": {
-        "spec": {
-          "additionalProperties": false,
-          "properties": {
-            "args_schema": {},
-            "body": {},
-            "description": {},
-            "headers": {},
-            "method": {},
-            "outputs": {},
-            "query": {},
-            "reads": {},
-            "response": {},
-            "timeout_s": {},
-            "upstream": {},
-            "upstream_provider": {},
-            "url": {}
-          },
-          "type": "object"
-        }
-      }
-    }
-  },
-  {
-    "if": {
-      "properties": {
-        "kind": {
-          "const": "python"
-        }
-      },
-      "required": [
-        "kind"
-      ]
-    },
-    "then": {
-      "properties": {
-        "spec": {
-          "additionalProperties": false,
-          "properties": {
-            "args_schema": {
-              "description": "a JSON Schema object"
-            },
-            "description": {
-              "description": "a string"
-            },
-            "env": {
-              "description": "a map of name to string value; names must match ^[A-Z][A-Z0-9_]{0,63}$"
-            },
-            "memory_mb": {
-              "description": "a positive integer number of megabytes"
-            },
-            "network": {
-              "description": "\"none\" (every plan), \"public\" (requires the pro plan), \"egress\" (requires the pro plan) -- a tool's own code reaches this tenant's data with `import mcphost` (mcphost.table, mcphost.state, mcphost.docs, mcphost.lineage) even when network is \"none\""
-            },
-            "outputs": {
-              "description": "a list of field names or an object mapping field names to path strings"
-            },
-            "reads": {},
-            "requirements": {
-              "description": "a list of strings"
-            },
-            "secrets": {
-              "description": "a list of strings"
-            },
-            "source": {
-              "description": "a string"
-            },
-            "timeout_s": {
-              "description": "a positive integer number of seconds"
-            }
-          },
-          "required": [
-            "source"
-          ],
-          "type": "object"
-        }
-      }
-    }
-  },
-  {
-    "if": {
-      "properties": {
-        "kind": {
-          "const": "wasm"
-        }
-      },
-      "required": [
-        "kind"
-      ]
-    },
-    "then": {
-      "properties": {
-        "spec": {
-          "additionalProperties": false,
-          "properties": {
-            "args_schema": {},
-            "component": {},
-            "memory_mb": {},
-            "outputs": {},
-            "reads": {},
-            "timeout_s": {}
-          },
-          "required": [
-            "component"
-          ],
-          "type": "object"
-        }
-      }
-    }
-  }
-]New value: +[
+  {
+    "if": {
+      "properties": {
+        "kind": {
+          "const": "chain"
+        }
+      },
+      "required": [
+        "kind"
+      ]
+    },
+    "then": {
+      "properties": {
+        "spec": {
+          "additionalProperties": false,
+          "properties": {
+            "reads": {},
+            "steps": {},
+            "ui": {
+              "additionalProperties": false,
+              "description": "Optional presentation hints. `form: true` gives a url-shared tool a /f/ page where a person fills in the arguments and the submission lands in your inbox.",
+              "properties": {
+                "form": {
+                  "type": "boolean"
+                },
+                "submit_label": {
+                  "maxLength": 40,
+                  "type": "string"
+                },
+                "success_text": {
+                  "maxLength": 200,
+                  "type": "string"
+                }
+              },
+              "type": "object"
+            }
+          },
+          "required": [
+            "steps"
+          ],
+          "type": "object"
+        }
+      }
+    }
+  },
+  {
+    "if": {
+      "properties": {
+        "kind": {
+          "const": "echo"
+        }
+      },
+      "required": [
+        "kind"
+      ]
+    },
+    "then": {
+      "properties": {
+        "spec": {
+          "additionalProperties": false,
+          "properties": {
+            "reads": {},
+            "schema": {},
+            "ui": {
+              "additionalProperties": false,
+              "description": "Optional presentation hints. `form: true` gives a url-shared tool a /f/ page where a person fills in the arguments and the submission lands in your inbox.",
+              "properties": {
+                "form": {
+                  "type": "boolean"
+                },
+                "submit_label": {
+                  "maxLength": 40,
+                  "type": "string"
+                },
+                "success_text": {
+                  "maxLength": 200,
+                  "type": "string"
+                }
+              },
+              "type": "object"
+            }
+          },
+          "required": [
+            "schema"
+          ],
+          "type": "object"
+        }
+      }
+    }
+  },
+  {
+    "if": {
+      "properties": {
+        "kind": {
+          "const": "http"
+        }
+      },
+      "required": [
+        "kind"
+      ]
+    },
+    "then": {
+      "properties": {
+        "spec": {
+          "additionalProperties": false,
+          "properties": {
+            "args_schema": {},
+            "body": {},
+            "description": {},
+            "headers": {},
+            "method": {},
+            "outputs": {},
+            "query": {},
+            "reads": {},
+            "response": {},
+            "timeout_s": {},
+            "ui": {
+              "additionalProperties": false,
+              "description": "Optional presentation hints. `form: true` gives a url-shared tool a /f/ page where a person fills in the arguments and the submission lands in your inbox.",
+              "properties": {
+                "form": {
+                  "type": "boolean"
+                },
+                "submit_label": {
+                  "maxLength": 40,
+                  "type": "string"
+                },
+                "success_text": {
+                  "maxLength": 200,
+                  "type": "string"
+                }
+              },
+              "type": "object"
+            },
+            "upstream": {},
+            "upstream_provider": {},
+            "url": {}
+          },
+          "type": "object"
+        }
+      }
+    }
+  },
+  {
+    "if": {
+      "properties": {
+        "kind": {
+          "const": "python"
+        }
+      },
+      "required": [
+        "kind"
+      ]
+    },
+    "then": {
+      "properties": {
+        "spec": {
+          "additionalProperties": false,
+          "properties": {
+            "args_schema": {
+              "description": "a JSON Schema object"
+            },
+            "description": {
+              "description": "a string"
+            },
+            "env": {
+              "description": "a map of name to string value; names must match ^[A-Z][A-Z0-9_]{0,63}$"
+            },
+            "memory_mb": {
+              "description": "a positive integer number of megabytes"
+            },
+            "network": {
+              "description": "\"none\" (every plan), \"public\" (requires the pro plan), \"egress\" (requires the pro plan) -- a tool's own code reaches this tenant's data with `import mcphost` (mcphost.table, mcphost.state, mcphost.docs, mcphost.lineage) even when network is \"none\""
+            },
+            "outputs": {
+              "description": "a list of field names or an object mapping field names to path strings"
+            },
+            "reads": {},
+            "requirements": {
+              "description": "a list of strings"
+            },
+            "secrets": {
+              "description": "a list of strings"
+            },
+            "source": {
+              "description": "a string"
+            },
+            "timeout_s": {
+              "description": "a positive integer number of seconds"
+            },
+            "ui": {
+              "additionalProperties": false,
+              "description": "Optional presentation hints. `form: true` gives a url-shared tool a /f/ page where a person fills in the arguments and the submission lands in your inbox.",
+              "properties": {
+                "form": {
+                  "type": "boolean"
+                },
+                "submit_label": {
+                  "maxLength": 40,
+                  "type": "string"
+                },
+                "success_text": {
+                  "maxLength": 200,
+                  "type": "string"
+                }
+              },
+              "type": "object"
+            }
+          },
+          "required": [
+            "source"
+          ],
+          "type": "object"
+        }
+      }
+    }
+  },
+  {
+    "if": {
+      "properties": {
+        "kind": {
+          "const": "wasm"
+        }
+      },
+      "required": [
+        "kind"
+      ]
+    },
+    "then": {
+      "properties": {
+        "spec": {
+          "additionalProperties": false,
+          "properties": {
+            "args_schema": {},
+            "component": {},
+            "memory_mb": {},
+            "outputs": {},
+            "reads": {},
+            "timeout_s": {},
+            "ui": {
+              "additionalProperties": false,
+              "description": "Optional presentation hints. `form: true` gives a url-shared tool a /f/ page where a person fills in the arguments and the submission lands in your inbox.",
+              "properties": {
+                "form": {
+                  "type": "boolean"
+                },
+                "submit_label": {
+                  "maxLength": 40,
+                  "type": "string"
+                },
+                "success_text": {
+                  "maxLength": 200,
+                  "type": "string"
+                }
+              },
+              "type": "object"
+            }
+          },
+          "required": [
+            "component"
+          ],
+          "type": "object"
+        }
+      }
+    }
+  }
+]

13 tool updatesOct 12, 2026

Changedbilling.plans1 field changed