@share-html/mcp-server
share/artifacts MCP server
Publish agent-created HTML artifacts and receive a shareable URL. The npm
package remains @aiformasses/mcp-server for compatibility.
Preferred: connect your agent
Give your agent the public
setup page. Agents supporting
remote MCP, browser authorization, and CIMD or DCR can configure the hosted connection
at https://shareartifacts.dev/api/mcp without installing this package or
creating a permanent token.
Related MCP server: publish-artifacts-mcp
Personal-token fallback
Use this package when your MCP client does not support the hosted OAuth flow.
It requires Node.js 20.19 or newer and npx:
node --version
npx --versionUse Connect a background agent in token settings. Create a personal access token and insert it directly into the local configuration. share/artifacts cannot display the token again.
Codex
Add the server to ~/.codex/config.toml, then restart only the share-html MCP
entry from Codex settings. The first start downloads the pinned package through
npx. The share-html entry name is a stable compatibility identifier; it does
not change the share/artifacts product name.
[mcp_servers."share-html"]
command = "npx"
args = ["-y", "@aiformasses/mcp-server@0.2.0"]
[mcp_servers."share-html".env]
SHARE_HTML_API_BASE_URL = "https://shareartifacts.dev/api/v1"
SHARE_HTML_API_TOKEN = "PASTE_TOKEN_HERE"Standard MCP JSON
{
"mcpServers": {
"share-html": {
"command": "npx",
"args": ["-y", "@aiformasses/mcp-server@0.2.0"],
"env": {
"SHARE_HTML_API_BASE_URL": "https://shareartifacts.dev/api/v1",
"SHARE_HTML_API_TOKEN": "PASTE_TOKEN_HERE"
}
}
}
}Replace PASTE_TOKEN_HERE locally. Treat SHARE_HTML_API_TOKEN like a
password. Do not commit it, paste it into agent chat, include it in a URL or
HTML, or send it to anyone. If it is lost or exposed, revoke the token and
create another.
Tools
The repository version exposes get_recipe, publish_html,
publish_presentation, update_page, get_page, list_pages, publish_page,
unpublish_page, and delete_page.
Call get_recipe without arguments to discover the first-party catalog; pass a
recipeId and optional integer version for the complete reviewed recipe.
For slides, decks, pitch decks, talks, lessons, and keynote-style requests, call
get_recipe with recipeId: "presentation-deck" before authoring, then use
publish_presentation. The agent owns the cumulative narrative, concise copy,
accessible HTML/CSS, responsive and print behavior, and visual inspection of
every slide. share/artifacts owns sanitization, post-sanitization structural
validation, persistence, access control, CSP, and presentation controls. A
successful presentation publish returns the canonical
/view/{publicId} viewer URL plus a content hash for reconciliation.
Visual QA is an iterative rendering task, not a markup check. When browser or rendering tools are available, inspect the actual rendered pixels of every slide at the declared desktop canvas, a narrow viewport, and print size. Check for clipped content, unintended overflow or overlap, crushed glyphs or words, unsafe edge placement, footer/counter collisions, weak contrast, and incorrect image cropping. Fix the source HTML/CSS, re-render every affected slide, and repeat until the complete deck passes; re-render every slide after changing shared CSS, layout rules, or design tokens. Intentional decorative bleed is allowed when it does not obscure meaningful content. DOM measurements and a single overview screenshot are not sufficient. If rendering is unavailable, tell the user that visual QA was not completed rather than claiming verification; publishing may proceed with that disclosure.
publish_presentation defaults to schema version 1 and a 16:9 stage; 4:3 is
also supported:
{
"title": "Q4 strategy",
"html": "<!doctype html><html>...</html>",
"presentation": { "schemaVersion": 1, "aspectRatio": "16:9" },
"sharing": { "mode": "public" }
}The deck HTML must contain exactly one main.share-presentation whose direct
children are sequential section.share-slide elements (slide-1 through
slide-N). Each slide must use aria-labelledby to reference a unique heading
inside that slide. Invalid decks are not published, and invalid updates preserve
the previous version.
list_pages returns 25 artifact metadata records by default, never their HTML.
Use query for a case-insensitive title or page-ID search, status for
published or unpublished, and limit for up to 100 results. When
pageInfo.nextCursor is present, pass it back as cursor with the same
filters:
{
"query": "launch report",
"status": "published",
"limit": 25,
"cursor": "CURSOR_FROM_THE_PREVIOUS_RESULT"
}The response distinguishes resultCount, matchingCount, and
totalLibraryCount, so agents can search or traverse hundreds of artifacts
without loading the complete library.
publish_html accepts optional sharing, so the artifact is protected before
its URL becomes available. Omit sharing for owner-only private access. Public
access must be explicit. Examples:
{
"html": "<!doctype html><html>...</html>",
"sharing": { "mode": "public" }
}{
"html": "<!doctype html><html>...</html>",
"sharing": {
"mode": "restricted",
"methods": {
"emailDomain": "example.com",
"recipients": ["reader@partner.example"],
"password": {
"action": "set",
"value": "at-least-10-characters"
}
},
"expiresAt": "2027-01-01T00:00:00.000Z"
}
}Restricted methods are OR alternatives: a verified exact-domain identity, a
verified exact recipient, or the password can independently open the artifact.
Initial password publishing requires action: "set"; later updates may use
action: "keep". A successful controlled publish returns its effective
sharing mode and revision with the page URL.
It also exposes controlled-sharing tools: get_page_sharing,
set_page_sharing, and end_current_viewing_sessions. Read the latest sharing
revision before changing access. Pages can be private to their owner, public to
anyone with the link, or restricted by any combination of one exact email
domain, exact verified email recipients, and a password.
The installation examples are pinned to the current 0.2.0 release.
Hosted and local workspace builds use the repository contract as soon as their
app build is deployed. The stdio fallback receives new tools only after a
separately authorized npm package release.
The share/artifacts API sanitizes every document. JavaScript, forms, embeds, and external network calls are removed or blocked before a page is published.
SHARE_HTML_*, share-html, and the ShareHtml* TypeScript exports remain
stable compatibility identifiers so existing client configurations and code do
not break.
Troubleshooting
npx: command not found: install Node.js 20.19 or newer, then reopen your terminal or MCP client.invalid_api_token: replace a revoked or incorrect personal access token.Publish timeout: inspect recent pages by title and creation time before retrying. The operation may have completed, and retrying can create a private duplicate.
Recipe request timeout:
get_recipeis read-only and safe to retry.Connection failure: confirm the API URL uses HTTPS and that your network can reach
shareartifacts.dev.
Source and issues: arunai30/share-html-mcp
Available Tools
12 toolsdelete_pageDelete a pageBDestructiveIdempotent
Permanently remove a page from the user's artifact library.
| Name | Required | Description | Default |
|---|---|---|---|
| pageId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and idempotentHint=true, so the safety profile is covered; the description's only added signal is 'Permanently', which reinforces irreversibility. It says nothing about cascade effects (sharing, published links, child pages), permissions required, or whether the deletion is recoverable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single short sentence with zero padding, and the destructive character is front-loaded in 'Permanently'. It is efficient, though its brevity borders on under-specification.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The annotations carry the destructive/idempotent profile and there is no output schema to explain, so the safety essentials are present. However, for a destructive mutation with an undocumented required parameter, the description omits authorization needs, recovery options, and side effects on published or shared artifacts.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and pageId carries no description in the schema. The description does not explain the identifier's format or where the agent obtains it, so it fails to compensate for the documentation gap on the single parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Permanently remove a page'), and the word 'permanently' implicitly separates it from unpublish_page. It never names a sibling, so an agent must infer the boundary between deleting and unpublishing on its own.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit when-to-use guidance, no prerequisites, and no mention of alternatives such as unpublish_page or update_page. The adverb 'permanently' hints at irreversibility but does not tell the agent when this tool is the right choice over its siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
end_current_viewing_sessionsEnd current viewing sessionsBDestructive
Invalidate current private viewing sessions. People who are still authorized can open the page again.
| Name | Required | Description | Default |
|---|---|---|---|
| pageId | Yes | ||
| expectedRevision | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and idempotentHint=false, so the safety profile is covered. The description still earns credit for disclosing what actually gets destroyed (private viewing sessions) and the recovery path (authorized people can reopen the page), which is real context an agent cannot infer from the annotations. It stops short of noting that the operation targets a single page or that it is not idempotent in practice.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with no filler, and the core effect is front-loaded before the mitigating detail. Nothing here is redundant with the name or title.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive mutation with no output schema, the description covers the effect and the recovery behavior adequately, and annotations cover the danger. It is incomplete on the revision/precondition mechanics that determine whether the call succeeds, which matters for a non-idempotent operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% for both required parameters, so the description carries the full burden and largely fails. It never mentions pageId (only implicitly via "sessions" and "the page"), and expectedRevision — a concurrency token that will cause failures if stale — is completely unaddressed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb ("Invalidate") and a specific resource ("current private viewing sessions"), which is far more precise than the tool name alone. It does not, however, explicitly differentiate itself from siblings like update_page, unpublish_page, or set_page_sharing, which also affect page visibility.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no statement of when to call this versus alternatives such as unpublish_page or set_page_sharing, and no prerequisites (e.g. ownership or edit permission on the page). The second sentence describes a consequence of calling it, not a condition for calling it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_pageGet page detailsBRead-only
Get the current status, version, and URL for one page.
| Name | Required | Description | Default |
|---|---|---|---|
| pageId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The readOnlyHint annotation already establishes this is a safe read, so the description only needs to add context. It does usefully enumerate what comes back (status, version, URL), but says nothing about behavior for a missing/invalid pageId or any auth requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with zero filler that names the resource and the returned fields immediately.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple single-parameter read tool with readOnlyHint coverage and no output schema, stating the returned fields is largely sufficient. Only error/nonexistent-page behavior and pageId provenance are left unaddressed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is exactly one parameter, pageId, with 0% schema description coverage, so the description carries the full burden of explaining it. 'One page' only restates that a page is targeted and gives no hint about the id's format, source, or validity.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Get') and resource ('one page') plus the exact fields returned (status, version, URL). The 'one page' phrasing implicitly separates it from the list_pages sibling, though it does not name alternatives outright.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit when-to-use guidance, no prerequisites, and no mention of alternatives such as list_pages or get_page_sharing. An agent must infer from the name and the word 'one page' that this is the single-item lookup.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_page_sharingGet page sharingBRead-only
Get who can open a page and when access expires.
| Name | Required | Description | Default |
|---|---|---|---|
| pageId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so safety is covered by structured data. The description contributes some behavioral value by describing the returned content (who can open, expiry date), which is useful given the absence of an output schema, but it says nothing about auth requirements, permission preconditions, or error behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single tight sentence with the key output information front-loaded and zero filler. Nothing wasted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter read tool with annotations covering safety and no output schema, the description is close to sufficient - it tells the agent what comes back. It falls short on the parameter's expected value, auth/permission context, and when to reach for it over set_page_sharing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is 1 parameter with 0% schema description coverage - pageId carries only type/minLength in the schema, and the description never mentions it or its expected format. The name is largely self-explanatory, but the description does not compensate for the documentation gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (Get) and resource (page sharing) and even enumerates what the answer contains: who can open the page and expiry. This distinguishes it implicitly from the write-side sibling set_page_sharing, though it never names that sibling explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use guidance, no prerequisites, and no mention of the natural alternative set_page_sharing (to modify sharing) or get_page. Usage is only inferable from the verb 'Get'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_recipeGet a first-party artifact recipeARead-onlyIdempotent
List first-party share/artifacts recipes, or get one reviewed prompt and static HTML starter by recipeId. Omit recipeId to discover the catalog.
| Name | Required | Description | Default |
|---|---|---|---|
| version | No | ||
| recipeId | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false, so the safety profile is covered. The description adds that the output is a 'reviewed prompt and static HTML starter,' which hints at content shape, but it doesn't disclose pagination, catalog size, or failure modes. A 3 is appropriate given annotations carry the heavy lifting.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single tight sentence covering both modes and the switching condition, front-loaded with the list action and ending with the discovery hint. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 2-param read-only tool with no output schema, the description is adequate for the main use cases. But it leaves the 'version' parameter unexplained and doesn't describe the return shape (the catalog format, what a recipe object contains), which matters more because no output schema exists to fill that gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the schema only gives types and constraints (recipeId pattern/maxLength, version integer). The description explains the semantic effect of omitting recipeId and that recipeId selects one recipe, which is genuinely useful. It does not explain the 'version' parameter at all, leaving a real gap. Baseline lift from 0% coverage is offset by the undocumented version param.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a dual purpose: list the recipe catalog, or retrieve one reviewed prompt and static HTML starter by recipeId. This distinguishes it from publishing siblings (publish_html, publish_presentation) and page-record getters (get_page). However, it doesn't fully separate itself from get_page, which also retrieves an artifact, so it's not a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives one condition: 'Omit recipeId to discover the catalog.' That tells the agent how to switch modes but doesn't state when to use this tool vs get_page or the publish tools, nor any prerequisites or exclusions. Implied usage rather than explicit guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_pagesFind artifactsARead-only
Search and page through the current user's published, offline, and platform-taken-down artifacts by title or page ID. Follow nextCursor to continue through large libraries.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Number of artifacts to return, from 1 to 100; defaults to 25. | |
| query | No | Optional case-insensitive title or page ID search. | |
| cursor | No | Opaque nextCursor or previousCursor from an earlier list_pages result. | |
| status | No | Optional lifecycle filter. unpublished artifacts are shown as Offline in the dashboard. |
Output Schema
| Name | Required | Description |
|---|---|---|
| pages | Yes | |
| pageInfo | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare readOnlyHint=true, so the description usefully adds that results span published, offline, and platform-taken-down artifacts (i.e., not just live content) and that pagination continues via nextCursor. It stops short of stating default result count or ordering, which the schema partially covers.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no filler, with the search scope front-loaded and pagination as the closing instruction. Every clause carries information the agent needs.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be explained, and the description covers scope, search keys, and pagination. The only gap is that 'platform-taken-down' has no counterpart in the status enum (published/unpublished), leaving the default filtering behavior slightly ambiguous.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so limit, query, cursor, and status are already fully documented; the baseline is 3. The description only loosely reinforces query ('title or page ID') and cursor ('nextCursor') without adding format or edge-case meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb pair ('search and page through') and a specific resource ('the current user's ... artifacts') with the searchable keys (title or page ID) named inline. It is clearly distinguishable from single-item siblings like get_page, though it never names an alternative explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied rather than stated: the mention of title/page ID search and 'Follow nextCursor to continue through large libraries' tells the agent when this tool applies, but there is no explicit when-to-use/when-not guidance and no alternative tool is referenced.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
publish_htmlPublish static HTMLA
Publish a complete static HTML document and return its stable URL. Omitted sharing is private to the owner. Explicitly choose public or combine domain, specific-email, and password access with an optional expiration.
| Name | Required | Description | Default |
|---|---|---|---|
| html | Yes | ||
| title | No | A distinctive title that will make this artifact easy to find later. | |
| sharing | No | Optional access policy. Omit it to publish privately. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With annotations declaring non-readOnly, non-idempotent, non-destructive, the description still adds meaningful behavior: it returns a stable URL and discloses that omitting sharing defaults to private-to-owner, plus that access can expire. That default-state disclosure is genuinely useful beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three front-loaded sentences that lead with purpose and the returned URL, then the default and the option space. They earn their place, though the final sentence is dense and slightly compacted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutation tool with no output schema, it covers purpose, return value, default access, and the full sharing option space. It stops short of stating auth/permission needs or reversibility, but is otherwise sufficient to invoke correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 67% and nested sharing detail is spread across a large oneOf, so the description earns its place by synthesizing the restricted mode as combining domain, specific-email, and password access plus optional expiration. It adds the default-selection logic for the sharing param, though html and title gain little.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Specific verb (Publish) plus resource (complete static HTML document) and it even states the return (stable URL). It doesn't name any sibling such as publish_page or publish_presentation to differentiate, but 'static HTML document' implicitly scopes it against those page/presentation siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives usage context for the sharing option (omitted = private, choose public or restricted) and the default behavior, but there is no explicit when-to-use-this-vs-a-sibling guidance or prerequisite/auth requirements. The usage is implied rather than routed.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
publish_pageRepublish a pageBIdempotent
Bring an unpublished page back online at its existing URL.
| Name | Required | Description | Default |
|---|---|---|---|
| pageId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, idempotentHint=true and destructiveHint=false, so the safety profile is covered. The description adds that the page returns at its existing URL, which is genuinely useful context, but says nothing about permissions, what happens if the page is already published, or whether prior content/settings are preserved.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single short sentence with the action front-loaded and no filler. Nothing to trim and nothing buried.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter tool whose annotations already cover the safety profile and which has no output schema, the description covers the essentials. The remaining gap is the undocumented pageId and the undefined behavior when the page is already published.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is one required parameter (pageId) with 0% schema description coverage, so the description carries the burden of explaining it and does not. 'Page' implicitly maps to pageId, but no format, ID convention, or source of the ID is given.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description gives a specific verb phrase ('Bring ... back online') plus the resource ('page') and a scope detail ('at its existing URL'), so the action is unambiguous. It does not name siblings such as publish_html or publish_presentation, but 'page' vs 'html' vs 'presentation' is readable from the resource word.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The condition is implied by 'unpublished page', i.e. use this when a page is currently offline, which implies unpublish_page is the inverse and no other sibling fits. There is no explicit statement of when-not to use it or what alternatives exist.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
publish_presentationPublish an HTML-native presentationA
Create slides, a slide deck, pitch deck, talk, lesson, or keynote as a first-class HTML presentation. First call get_recipe with recipeId "presentation-deck". Structural validation and DOM checks alone are not visual QA. When browser or rendering tools are available, render and inspect the actual rendered pixels of every slide at the declared desktop canvas, a narrow viewport, and print size; fix the source HTML/CSS and re-render affected slides until the full deck passes before publishing, re-rendering every slide after shared CSS changes. If rendering is unavailable, tell the user that visual QA was not completed; publishing may proceed with that disclosure. ShareHTML sanitizes and validates the deck, persists it, applies access controls and CSP, and returns its presentation viewer URL.
| Name | Required | Description | Default |
|---|---|---|---|
| html | Yes | One complete static HTML document following the presentation-deck recipe. | |
| title | No | A distinctive deck title that will be easy to find later. | |
| sharing | No | Optional access policy. Omit it to publish privately. | |
| presentation | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare the write profile (readOnlyHint=false, idempotentHint=false, destructiveHint=false), and the description adds real pipeline detail: sanitization, validation, persistence, access-control and CSP application, plus the returned viewer URL. It stops short of stating duplicate/re-publish behavior, but this is well above the annotation baseline.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Purpose is front-loaded in the first sentence, and the procedural visual-QA guidance that follows is dense but task-relevant. The middle visual-QA paragraph is long and somewhat repetitive about re-rendering, costing a point, but every section carries operational weight.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a write tool with no output schema, the description supplies the return value (viewer URL), the pre-step (get_recipe), the QA workflow, and the sanitization/access-control behavior. The nested sharing modes are left to the schema, which is acceptable at 75% coverage, but a brief note on the default private behavior would have completed it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 75%, so the schema already documents most parameters, including the nested sharing object. The description only alludes to parameters obliquely ('declared desktop canvas' implying aspectRatio, 'applies access controls' implying sharing) without adding syntax or constraints. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (create/publish) and resource (HTML presentation deck), enumerating artifact types (slides, pitch deck, keynote) that make the target unambiguous. It does not explicitly contrast with siblings publish_html or publish_page, so it is clear but not sibling-differentiating.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives a concrete required precondition (call get_recipe with recipeId "presentation-deck" first) and a conditional path for when rendering tools are unavailable. However, it never routes the agent among the actual sibling publish tools (publish_html, publish_page), so alternatives within the toolset remain unaddressed.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
set_page_sharingSet page sharingADestructive
Choose owner-only, public, or restricted access. Restricted methods are OR alternatives. Use the revision returned by get_page_sharing.
| Name | Required | Description | Default |
|---|---|---|---|
| pageId | Yes | ||
| policy | Yes | ||
| expectedRevision | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and idempotentHint=false, so the agent knows this is a destructive, non-idempotent write. The description adds useful semantics not in the schema ("Restricted methods are OR alternatives"), but never explains the destructive scope — whether existing recipients/passwords are replaced wholesale — or the revision-conflict behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with the primary action and no wasted words. Efficient, though the terseness leaves unexplained surface area in a very complex schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with an elaborate nested policy schema and zero property descriptions, the description covers the main branches (modes, OR semantics, revision) but omits expiresAt, password action semantics, and emailDomain behavior. No output schema exists, so return values need no explanation, keeping it marginally adequate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate, and it partially does: the three modes map to policy.mode, the OR rule maps to the restricted methods object, and the revision hint maps to expectedRevision. However, it adds nothing about expiresAt, the password set/keep action, emailDomain, or the recipients cap, leaving much of the large oneOf schema uninterpreted.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific action ("Choose... access") over a specific resource, enumerating the three access modes (owner-only/private, public, restricted). An agent can tell it is the mutating counterpart to get_page_sharing, though the resource (a page's sharing policy) is implied by the tool name rather than the description.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
"Use the revision returned by get_page_sharing" establishes a clear prerequisite and names the sibling that must be called first, giving real workflow context. It stops short of stating when-not to use it or how it relates to update_page / publish_page.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
unpublish_pageUnpublish a pageADestructiveIdempotent
Take a page offline without deleting it or changing its shareable URL.
| Name | Required | Description | Default |
|---|---|---|---|
| pageId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare idempotentHint=true, destructiveHint=false-ish behavior for reads, and destructiveHint=true; the description adds genuinely new context by stating the page is not deleted and the shareable URL is preserved, which tells the agent the operation is state-toggling and link-stable. It doesn't cover permission requirements or the already-unpublished case, but the added side-effect detail exceeds what annotations convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler; both clauses (offline, non-destructive, URL stable) carry information and the core action leads the sentence.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter tool with no output schema, the description covers the essential action and its two most important non-effects. Minor gaps remain around required permissions and behavior when the page is already unpublished, but nothing critical for correct invocation is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
One parameter (pageId) with 0% schema description coverage, so the schema alone gives no guidance. The description refers to 'a page' but adds no format, ID source, or scope detail beyond the parameter name; low-coverage schemas normally demand compensation the description does not supply.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Specific verb+resource: 'Take a page offline' names the exact operation on a page. It implicitly distinguishes from siblings by negating deletion ('without deleting it') and from update_page by noting the shareable URL is untouched, though it never names publish_page/delete_page directly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The negation clauses (not deleting, URL unchanged) imply the intended scenario — temporarily removing content from public view while preserving links — but no explicit when-to-use trigger or named alternative (delete_page, update_page) is given. Usage must be inferred from the contrast with deletion.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_pageUpdate a published pageC
Replace a page with new static HTML while preserving its shareable URL.
| Name | Required | Description | Default |
|---|---|---|---|
| html | Yes | ||
| title | No | ||
| pageId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare write (readOnlyHint=false), non-destructive, and non-idempotent, so the safety profile is covered. The description usefully adds that the shareable URL is preserved and that the page body is wholesale replaced, but it omits authorization requirements, conflict/versioning behavior, and what happens to the prior HTML.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler — the replacement semantics and URL-preservation behavior come first. It is tight, though arguably under-sized for a mutation tool with undocumented parameters.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a non-idempotent write tool with no output schema and 0% schema description coverage, the description is too thin: it does not cover permissions, whether the HTML must be a full document, size limits, or the result of the call. It leaves more open than it answers.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% across three parameters, so the description carries the full documentation burden. It only indirectly gestures at `html` ('new static HTML') and `pageId` ('a page'), and never mentions the optional `title` parameter or format constraints on the HTML.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb (replace/update) and resource (a page) plus the payload type (static HTML), so an agent can tell it apart from publish_page, unpublish_page, and delete_page. It stops short of explicitly contrasting itself with siblings like publish_page, which would have pushed it to a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to use this tool versus publish_page, publish_html, or unpublish_page, and no stated prerequisites (e.g., whether the target page must already be published). The title hints at 'published page' but the description itself provides no selection criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
12 tool updates
v0.2.0- First observed
delete_page - First observed
end_current_viewing_sessions - First observed
get_page - First observed
get_page_sharing - First observed
get_recipe - First observed
list_pages - First observed
publish_html - First observed
publish_page - First observed
publish_presentation - First observed
set_page_sharing - First observed
unpublish_page - First observed
update_page
TDQS
Scored across 12 tools
Each tool has a clearly distinct purpose: lifecycle, sharing, and publishing for pages are well separated. The only potential overlap is between 'publish_html' and 'publish_page', but 'publish_html' creates a new page while 'publish_page' brings an offline page back online; the descriptions clarify this difference.
Most tools follow a consistent verb_noun pattern (get_page, publish_html, update_page, list_pages, etc.), but there are deviations: 'end_current_viewing_sessions' uses a verb_phrase and 'get_page_sharing'/'set_page_sharing' add a suffix. Overall, the naming is predictable and readable.
With 12 tools, the count is well-scoped for a page management server, covering creation, retrieval, updates, sharing, and deletion without excessive granularity or obvious redundancy.
The surface covers the full lifecycle of pages: creation (publish_html), retrieval (get_page, list_pages), updates (update_page), deletion (delete_page), and sharing controls (get/set_page_sharing, end_current_viewing_sessions, unpublish/publish_page). There are no apparent gaps for the stated purpose.
Maintenance
Related MCP Connectors
Publish HTML, files, or a URL to a permanent public URL, then update it — from any MCP agent.
Publish and manage existing HTML presentations from an MCP-capable Agent.
Publish HTML, Markdown, and multi-file sites as shareable URLs instantly via MCP.
Deploy HTML from any agent: POST markup, get a live URL. Static hosting API with MCP tools.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenancePublishes HTML pages straight from your AI assistant to a shareable URL, then lets you manage them - update, list, search, fetch, and delete pages in a public or private workspace. Turns "share what I just made" into a single tool call from Claude, Cursor, or any MCP client.MIT
- FlicenseNot gradedqualityCmaintenanceEnables publishing, updating, and sharing HTML artifacts with strict security isolation (origin separation, CSP, API keys) via MCP tools.1-
- AlicenseNot gradedqualityAmaintenanceEnables agents to publish HTML artifacts to permanent, shareable, versioned pages on Artifyde via MCP.105MIT
- AlicenseNot gradedqualityCmaintenancePublish and manage shareable HTML/Markdown pages with access control and comments via MCP clients.MIT