micro-mcp
Allows linking a Micro project to a GitHub repository and deploying it through the first-party microdotdo/micro-action using GitHub OIDC, without storing Micro credentials in GitHub.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@micro-mcp Deploy my Micro app to production"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Micro skill and MCP server
The official agent-facing package for Micro. It teaches a coding harness how to build, verify, preview, deploy, diagnose, update, and roll back a full-stack Micro, then exposes the same operations as typed local MCP tools backed by micro-cli.
Micro does not receive prompts or call a model. The skill runs in the creator's existing harness; the MCP server invokes the public CLI without handling passwords or provider secrets.
Install
Install the Micro capabilities the project needs on Linux:
curl -fsSL https://micro.do/install | sh -s -- cli # CLI only
curl -fsSL https://micro.do/install | sh -s -- runtime # + local runner
curl -fsSL https://micro.do/install | sh -s -- abla # + Abla toolchain
micro doctorStatic sites and Wasm produced by Rust or another compatible toolchain do not
require Abla. On macOS, brew install microdotdo/tap/micro provides the
complete managed setup.
Use the setup for your coding harness. Each command runs the bundled stdio server locally and delegates deployment to the authenticated Micro CLI.
Codex
Install the skill globally:
npx skills add microdotdo/micro-mcp --skill micro-sites -g -a codex -yAdd the local MCP tools:
codex mcp add micro -- npx -y @microdotdo/micro-mcp
codex mcp listClaude Code
Install the skill globally:
npx skills add microdotdo/micro-mcp --skill micro-sites -g -a claude-code -yAdd the local MCP tools:
claude mcp add --transport stdio --scope user micro -- npx -y @microdotdo/micro-mcp
claude mcp listCursor
Install the skill globally:
npx skills add microdotdo/micro-mcp --skill micro-sites -g -a cursor -yFor the local MCP tools, save this as ~/.cursor/mcp.json:
{
"mcpServers": {
"micro": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@microdotdo/micro-mcp"]
}
}
}Pi
Pi intentionally does not provide native MCP support. Install the skill bundled with this package so Pi can follow the same Micro CLI workflow:
pi install npm:@microdotdo/micro-mcpOr install only the skill:
npx skills add microdotdo/micro-mcp --skill micro-sites -g -a pi -yAuthenticate interactively after installation. Set MICRO_CLI only when the executable is not on PATH; it must be an executable path, never a shell command.
For repository deployment, use micro_github_link once from an authenticated
owner workstation, commit the generated non-secret micro.github.json, and
deploy through the first-party
microdotdo/micro-action.
The Action uses GitHub OIDC; no long-lived Micro credential belongs in GitHub.
For destructive project retirement, inspect and export the linked project first,
then use micro_project_delete with its exact slug and confirm: true. Track the
asynchronous cleanup with micro_project_deletions; local source is never removed.
For record recovery, inspect micro_backups immediately before acting. A restore
requires the exact backup digest and fresh current-record digest; it replaces
records only and never rewinds users, purchases, entitlements, products, files,
deployments, or local source.
Project operation tools cover roles and invitations, private visibility,
custom-domain proof, plan usage, spending caps, and hosted platform billing.
Durable schedule tools list, configure, manually enqueue, and remove authenticated
schedule.triggered events for the active production deployment.
The read-only email tool reports owner-authorized quota and delivery state for
verified-user notifications without exposing message bodies or credentials.
The public platform-status tool separates a Micro-wide incident from a linked
project failure before a harness changes or rolls back user code.
Public gallery and local remix tools let a harness select one reviewed,
licensed immutable source snapshot, restore it with provenance, remove the
source slug, and rebuild it without creating a project or reserving anything.
Invitation acceptance and private-grant creation intentionally remain secure CLI
handoffs so bearer tokens never enter MCP or model context.
Related MCP server: mcponce
Develop
npm ci
npm run check
npm run build
npm testThe package uses MCP 2026-07-28 through the stable TypeScript SDK v2 stdio entry and also serves legacy clients through SDK negotiation.
Available Tools
68 toolsmicro_auditInspect Micro owner activityARead-onlyIdempotent
Read the latest bounded owner audit events for the linked project without exposing credentials.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_backup_createCreate a Micro record backupA
Create a bounded transactional snapshot of the linked project's records. The snapshot excludes every authoritative identity, payment, entitlement, product, file, and deployment resource.
Inputs: confirm (required), path. Returns: ok, json, stderr, stdout, +2 more
micro_backup_deleteDelete a Micro record backupADestructive
Permanently delete one exact record-only backup without changing current project data or local source.
Inputs: sha256 (required), confirm (required), backupId (required), path. Returns: ok, json, stderr, stdout, +2 more
micro_backup_restoreRestore a Micro record backupADestructive
Replace all current project records with one exact inspected backup. Requires both the backup digest and a freshly inspected current-record digest, and never rewinds users, purchases, entitlements, products, files, or deployments.
Inputs: confirm (required), backupId (required), backupSha256 (required), expectedCurrentSha256 (required), +1 more. Returns: ok, json, stderr, stdout, +2 more
micro_backupsInspect Micro record backupsARead-onlyIdempotent
Read bounded transactional project-record backups plus the fresh digest of the current record set. Backups exclude users, purchases, entitlements, products, files, and deployments.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_billingInspect Micro billingARead-onlyIdempotent
Read the authenticated account subscription state without exposing payment credentials or card data.
Inputs: no named parameters. Returns: ok, json, stderr, stdout, +2 more
micro_billing_checkoutCreate Micro billing checkoutA
Create a hosted checkout session for one inspected Micro plan. This does not accept payment credentials.
Inputs: plan (required), confirm (required). Returns: ok, json, stderr, stdout, +2 more
micro_billing_portalCreate Micro billing portalA
Create a hosted Stripe billing-management session for the authenticated account.
Inputs: no named parameters. Returns: ok, json, stderr, stdout, +2 more
micro_buildBuild a MicroAIdempotent
Compile and validate the conventional Micro project without deploying it.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_deployDeploy a MicroA
Build, validate, and atomically create or update a production Micro project.
Inputs: slug (required), path, acceptLiveProducts, acceptPriceChanges. Returns: ok, json, stderr, stdout, +2 more
micro_deploymentsList Micro deploymentsARead-onlyIdempotent
List immutable deployment history for the linked project.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_dev_startStart local Micro developmentAIdempotent
Build and start the official loopback-only disposable Micro runner for this project.
Inputs: path, port. Returns: ok, pid, url, stderr, +5 more
micro_dev_statusInspect local Micro developmentARead-onlyIdempotent
Read bounded process status and logs for the managed local Micro runner.
Inputs: path. Returns: ok, pid, url, stderr, +5 more
micro_dev_stopStop local Micro developmentAIdempotent
Gracefully stop the managed local Micro runner for this project.
Inputs: path. Returns: ok, pid, url, stderr, +5 more
micro_doctorCheck Micro readinessARead-onlyIdempotent
Check the installed CLI, compiler, runner, platform, owner account, and local project.
Inputs: no named parameters. Returns: ok, json, stderr, stdout, +2 more
micro_domain_addAdd Micro custom domainAIdempotent
Register one normalized hostname and return the DNS ownership proof that must be published.
Inputs: hostname (required), path. Returns: ok, json, stderr, stdout, +2 more
micro_domain_removeRemove Micro custom domainADestructiveIdempotent
Remove one exact custom domain from the linked project.
Inputs: confirm (required), domainId (required), path. Returns: ok, json, stderr, stdout, +2 more
micro_domainsList Micro custom domainsARead-onlyIdempotent
List the linked project's custom domains and DNS proof state.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_domain_verifyVerify Micro custom domainAIdempotent
Check the exact domain's DNS proof and activate it only when ownership resolves correctly.
Inputs: confirm (required), domainId (required), path. Returns: ok, json, stderr, stdout, +2 more
micro_emailsList Micro project email deliveriesARead-onlyIdempotent
List owner-only delivery status and daily quota usage for verified-user project notifications. Message bodies and provider credentials are never returned.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_export_manifestInspect Micro export manifestARead-onlyIdempotent
Read live project-data export resource counts and pagination limits. The manifest is not a transactional snapshot.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_export_pageExport one bounded Micro data pageBRead-onlyIdempotent
Read one bounded live page of project users, records, purchases, entitlements, products, files, or audit events.
Inputs: resource (required), path, limit, offset. Returns: ok, json, stderr, stdout, +2 more
micro_filesList Micro protected filesARead-onlyIdempotent
List protected and public storage resources for the linked project without downloading contents.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_file_uploadUpload a Micro fileAIdempotent
Upload one explicit file as a stable storage resource with public or entitlement-gated access.
Inputs: id (required), source (required), path, public, +1 more. Returns: ok, json, stderr, stdout, +2 more
micro_galleryBrowse curated MicrosARead-onlyIdempotent
List reviewed, licensed immutable Micro source snapshots without authentication or a linked project.
Inputs: no named parameters. Returns: ok, json, stderr, stdout, +2 more
micro_github_bindingsList GitHub deployment bindingsARead-onlyIdempotent
List active repository, ref, environment, workflow, and immutable identity bindings.
Inputs: no named parameters. Returns: ok, json, stderr, stdout, +2 more
micro_github_linkAuthorize GitHub deploymentBIdempotent
Create an owner-approved OIDC binding and write the non-secret micro.github.json project identity file.
Inputs: ref (required), slug (required), repository (required), path, +1 more. Returns: ok, json, stderr, stdout, +2 more
micro_github_revokeRevoke GitHub deployment bindingADestructiveIdempotent
Revoke one explicit GitHub deployment binding and invalidate its outstanding deployment tokens.
Inputs: binding (required). Returns: ok, json, stderr, stdout, +2 more
micro_invitation_createInvite a Micro project memberA
Email one single-use project invitation with an explicit role and optional promotion authority.
Inputs: role (required), email (required), confirm (required), path, +1 more. Returns: ok, json, stderr, stdout, +2 more
micro_invitation_revokeRevoke Micro project invitationADestructiveIdempotent
Revoke one exact pending project invitation before it is accepted.
Inputs: confirm (required), invitationId (required), path. Returns: ok, json, stderr, stdout, +2 more
micro_invitationsList Micro project invitationsARead-onlyIdempotent
List bounded invitation metadata without exposing acceptance tokens.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_logsRead bounded Micro logsARead-onlyIdempotent
Read a bounded recent log window for the linked project.
Inputs: path, since. Returns: ok, json, stderr, stdout, +2 more
micro_member_removeRemove Micro project memberADestructiveIdempotent
Revoke one exact non-owner account's access to the linked project.
Inputs: confirm (required), accountId (required), path. Returns: ok, json, stderr, stdout, +2 more
micro_membersList Micro project membersARead-onlyIdempotent
List the linked project's owner and delegated members, roles, and promotion authority.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_member_setSet Micro project memberADestructiveIdempotent
Add or replace one existing account's project role. Viewers can never receive promotion authority.
Inputs: role (required), email (required), confirm (required), path, +1 more. Returns: ok, json, stderr, stdout, +2 more
micro_plansList Micro plansARead-onlyIdempotent
List the public Micro plan catalog and current usage allowances.
Inputs: no named parameters. Returns: ok, json, stderr, stdout, +2 more
micro_platform_statusRead public Micro platform statusARead-onlyIdempotent
Read Micro-wide component state, published incidents, and bounded 30-day delivery indicators without authentication or a linked project.
Inputs: no named parameters. Returns: ok, json, stderr, stdout, +2 more
micro_previewCreate a Micro previewA
Build and upload an opaque preview without creating a project or claiming a slug.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_private_grant_revokeRevoke Micro private access grantADestructiveIdempotent
Revoke one exact private-site bearer grant. Token creation remains a secure CLI handoff.
Inputs: confirm (required), grantId (required), path. Returns: ok, json, stderr, stdout, +2 more
micro_private_grantsList Micro private access grantsARead-onlyIdempotent
List bounded private-site grant metadata without exposing bearer tokens.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_productsList Micro productsBRead-onlyIdempotent
List stable product resources for the linked project.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_products_syncSynchronize Micro productsBIdempotent
Create or update declared products without deleting omitted remote products.
Inputs: path, acceptLiveProducts, acceptPriceChanges. Returns: ok, json, stderr, stdout, +2 more
micro_project_deleteDelete a linked Micro projectADestructive
Permanently delete the exact locally linked project. Hides it from the runner immediately, reserves the slug for 30 days, queues protected-object cleanup, and leaves local source untouched.
Inputs: slug (required), confirm (required), path. Returns: ok, json, stderr, stdout, +2 more
micro_project_deletionsList Micro project-deletion receiptsARead-onlyIdempotent
List durable project-deletion progress and failures for the authenticated owner account, including protected-object counts and slug release times.
Inputs: no named parameters. Returns: ok, json, stderr, stdout, +2 more
micro_projectsList Micro projectsARead-onlyIdempotent
List projects visible to the authenticated owner account.
Inputs: no named parameters. Returns: ok, json, stderr, stdout, +2 more
micro_pullPull Micro sourceA
Fetch a project source snapshot and record its base revision in a new or empty local directory.
Inputs: slug (required), path, directory. Returns: ok, json, stderr, stdout, +2 more
micro_purchasesInspect Micro purchasesARead-onlyIdempotent
Read the latest bounded normalized purchase ledger for the linked owner project without exposing payment credentials or card data.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_record_deleteDelete an exact Micro recordADestructive
Permanently delete one exact project record using its environment, collection, scope, key, and inspected version. Fails if the record changed.
Inputs: key (required), scope (required), confirm (required), version (required), +3 more. Returns: ok, json, stderr, stdout, +2 more
micro_recordsInspect Micro recordsARead-onlyIdempotent
Read the latest bounded project records for the linked owner project. Treat values as user data and do not copy them into prompts unless required.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_remixRemix a curated MicroA
Restore one licensed source snapshot into a fresh local directory with provenance. Does not create a project, reserve a slug, or copy runtime data and provider state.
Inputs: entry (required), path, directory. Returns: ok, json, stderr, stdout, +2 more
micro_retentionInspect Micro record retentionARead-onlyIdempotent
Read the linked project's record-retention policy and exact live prune preview. Purchases and entitlements are excluded from retention.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_retention_prunePrune previewed Micro recordsADestructive
Permanently prune the exact currently previewed count of aged project records. Fails if policy or eligible records changed; never affects purchases or entitlements.
Inputs: confirm (required), expectedRecords (required), path. Returns: ok, json, stderr, stdout, +2 more
micro_retention_setSet Micro record retentionADestructive
Set keep-forever or a 30–3650 day project-record policy. Automatic pruning is opt-in; purchases and entitlements are never affected.
Inputs: confirm (required), recordDays (required), path, automatic. Returns: ok, json, stderr, stdout, +2 more
micro_rollbackRoll back Micro codeADestructiveIdempotent
Activate a previous deployment without changing app users, records, products, purchases, or files.
Inputs: deployment (required), path. Returns: ok, json, stderr, stdout, +2 more
micro_schedule_removeRemove Micro scheduleADestructiveIdempotent
Remove one exact schedule and cancel its pending or retryable deliveries.
Inputs: confirm (required), scheduleId (required), path. Returns: ok, json, stderr, stdout, +2 more
micro_schedule_runRun Micro schedule nowA
Enqueue one additional authenticated schedule event for the active production Wasm deployment.
Inputs: confirm (required), scheduleId (required), path. Returns: ok, json, stderr, stdout, +2 more
micro_schedulesList Micro schedulesARead-onlyIdempotent
List durable authenticated schedule events and their latest delivery state for the linked project.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_schedule_setSet Micro scheduleAIdempotent
Create or replace one interval schedule. Its bounded object payload is non-secret configuration delivered to the active production Wasm deployment.
Inputs: confirm (required), scheduleId (required), everyMinutes (required), path, +2 more. Returns: ok, json, stderr, stdout, +2 more
micro_settingsInspect Micro project settingsARead-onlyIdempotent
Read the linked project's visibility and authenticated caller authority.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_spending_cap_deleteRemove Micro spending capADestructiveIdempotent
Remove the authenticated account spending cap after inspecting current usage and policy.
Inputs: confirm (required). Returns: ok, json, stderr, stdout, +2 more
micro_spending_cap_setSet Micro spending capADestructiveIdempotent
Replace the account monthly usage cap and warning threshold. A hard cap may stop requests when exhausted.
Inputs: confirm (required), monthlyCents (required), warningPercent (required), hardStop. Returns: ok, json, stderr, stdout, +2 more
micro_statusInspect Micro statusBRead-onlyIdempotent
Read deployment, resource, usage, and health status for the linked project.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_usageInspect Micro account usageARead-onlyIdempotent
Read authenticated account plan, monthly usage, daily runner usage, and spending-cap state.
Inputs: no named parameters. Returns: ok, json, stderr, stdout, +2 more
micro_user_disableDisable a Micro app userADestructiveIdempotent
Disable one explicit app user while preserving records, purchases, and entitlements. Immediately revokes active sessions, recovery and verification links, and private download grants.
Inputs: user (required), confirm (required), path. Returns: ok, json, stderr, stdout, +2 more
micro_user_enableEnable a Micro app userAIdempotent
Restore sign-in access for one explicit disabled app user without creating a session.
Inputs: user (required), path. Returns: ok, json, stderr, stdout, +2 more
micro_usersInspect Micro app usersARead-onlyIdempotent
Read the latest bounded app-user metadata for the linked owner project. Results can contain personal data; disclose only what the maintenance task requires.
Inputs: path. Returns: ok, json, stderr, stdout, +2 more
micro_user_sessions_revokeRevoke Micro app-user sessionsADestructiveIdempotent
Revoke every active session and private download grant for one explicit app user without disabling the user.
Inputs: user (required), confirm (required), path. Returns: ok, json, stderr, stdout, +2 more
micro_visibility_setSet Micro project visibilityADestructiveIdempotent
Make the linked site public or require authenticated app access and explicit private grants.
Inputs: confirm (required), visibility (required), path. Returns: ok, json, stderr, stdout, +2 more
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
TDQS
Scored across 68 tools
Most tools are scoped to a distinct resource—domains, members, schedules, backups, retention, users—and the plural-list vs singular-action naming helps separate reads from mutations. A few generic status/logs/usage tools overlap in scope, but their descriptions clearly distinguish project status, account usage, platform status, and local runner logs.
All tools share the micro_ prefix and snake_case, and mutations mostly follow a consistent resource_action pattern such as domain_add, member_remove, and backup_restore. Minor deviations like bare-verb tools (doctor, remix, pull, rollback) and noun-only read tools keep it from being perfectly uniform.
68 tools is far beyond the well-scoped 3-15 range and is an extreme surface for a single MCP server, even for a broad platform. This will tax context windows and make tool discovery harder; several status, usage, and billing tools could likely be consolidated.
The surface covers most lifecycle operations across domains, members, invitations, schedules, backups, deployments, users, retention, and platform state, with create/read/update/delete coverage for major resources. Minor gaps remain—no file delete, no product delete/archive, no record create/update—so it is not a perfect 5.
Maintenance
Related MCP Connectors
Manage Nife.io cloud apps, sites, secrets and Git integrations from MCP clients.
Manage Pipefork API projects, drafts, connections, secrets, and deployments through MCP.
Generate a typed SDK, CLI, and MCP server from any OpenAPI or GraphQL spec, and keep them current.
List, read, edit, and deploy your GenMB AI-generated apps from any MCP client.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables managing local repositories, CLIs, MCP servers, and skills via MCP tools, with inventory tracking, guarded updates, and Docker-sandboxed trials.MIT
- AlicenseNot gradedqualityBmaintenanceEnables building and running MCP servers from a single executable, with shared daemons, concurrency controls, retries, caching, security, and OpenAPI integration.108 npmMIT
- AlicenseNot gradedqualityBmaintenanceEnables developers to build, test, debug, and operate MCP servers from VS Code or CI, while also exposing trusted MCP capabilities to AI agents.MIT
- FlicenseNot gradedqualityCmaintenanceEnables secure discovery and invocation of sandboxed filesystem, repository inspection, and utility tools through a unified MCP client with schema validation, timeouts, and execution traces.-