"Creating files with a public endpoint" matching MCP tools:

• publish_siteA

  shiplyA

  Publish files to the web → live URL at <slug>.shiply.now. UPDATING: never create a new site for changes — re-call with claimToken (anonymous sites) or slug (sites you own with a Bearer key) and the SAME URL gets the new version. Unchanged files are hash-skipped server-side, so re-publishing (including retrying a failed publish) is cheap — always update the same site rather than creating a new one. Works WITHOUT auth (anonymous: 24h lifetime, returns claimToken/claimUrl — SAVE THEM). With a Bearer shp_ key sites are permanent. ≤50 files / 2 MB inline; bigger: REST flow per https://shiply.now/llms.txt. index.html serves at /. spaMode for client-side routing.

  ConnectorNo auth

• thestarmy_articleA

  Crawlora MCPB

  Fetch public The Star (Malaysia) story metadata and body paragraphs from a canonical `url`. Metered or premium stories return only the public teaser with `paywalled` set to true; if no teaser is available, the endpoint returns a permission error. Use thestarmy_headlines to find stories, thestarmy_news for the general feed, or thestarmy_author for a byline page.

  ConnectorNo auth

• create_folderA

  Scribe MailA

  Create a new, empty signature folder to organize signature templates. Folders created here are top-level (not nested). Use it only when no suitable folder exists: call list_folders first to reuse one, and use update_folder to rename an existing folder instead of creating another, since duplicate names are allowed. Creating a folder files nothing: to put a signature in it, pass the returned `id` as `folder_id` to create_signature or update_signature. Writes one folder and returns it with `signature_count` 0. Needs the folders:write scope; a blank name returns 422.

  ConnectorOAuth

• deploy_from_urlA

  VibeDeployA

  Fetch a public tar(.gz) archive over HTTPS and deploy its files to an existing site in one call (begin_deploy, upload and commit_deploy combined). Use deploy_from_url when the files are already published at a public URL, such as a repository archive that holds only the built site (no dotfiles), or when your sandbox reaches the allowed hosts (listed under archiveUrl) but not mcp.vibedeploy.be; otherwise use deploy_site or update_site. In replace mode one top-level folder that wraps every file (as in repository archives) is removed, and a site that already has files needs confirm:"I-want-to-replace-all-files". A failed call never leaves a staging session open.

  Connector

  Destructive

  No auth

• endpoints_ensureA

  GreatWaitB

  Finds or creates the callback endpoint at a URL in the caller's project and environment, without returning its signing secret. With no `name`, an existing endpoint that is not disabled at exactly this address is returned unchanged, preferring the one named after its URL; with a `name`, the endpoint must also carry that name. Otherwise one is created under the same rules as endpoints.create — HTTPS on effective port 443, no URL credentials or fragment, resolving only to public unicast addresses — and `created` is true. Optional `headers` apply only to an endpoint this call creates. Sent when the endpoint already exists, they are accepted if they are exactly its ordinary headers — what a retry of the creating call sends — and otherwise refused as `state_conflict` naming it; endpoints.update changes them. A secret value cannot be compared, so a call carrying one is refused for an endpoint that already exists. The result is metadata only: `signingSecret` says that the secret is not returned and where a signed-in member reveals it (`revealUrl`, the endpoint's dashboard page). Every callback is signed with that secret whether or not the receiver checks it. This is the endpoint operation agents use over MCP; endpoints.create, which returns the secret once, is withheld there.

  ConnectorOAuth

• test_data_source_connectionA

  MondovoA

  Fetch a PUBLIC endpoint or feed once and report how many items it returned, the fields in a sample item and — with `content_key` — a suggested field mapping onto that section. Saves nothing, but it is a real request to the outside address. The address must be public http(s) and need no key; an endpoint that answers 401/403 needs a key, which is connected in the site's Data Sources settings, never in a conversation. Always test before connect_data_source.

  ConnectorOAuth

• get_healthA

  IntoDNS.ai DNS & Email Security ScannerA

  Read-only public health probe for the IntoDNS.ai backend itself, not a target domain. Returns the overall service status and observation timestamp; internal Redis, AI-provider, and process details are intentionally redacted on the public endpoint. Use as a pre-flight check before batch jobs or to distinguish a service incident from a real DNS finding; use get_stats for public usage counters instead. Single unauthenticated GET with no destructive actions.

  ConnectorNo auth

• get_server_infoA

  TestGraphA

  Return the exact TestGraph MCP server version and live deployment identity for diagnostics. Use this when checking a stale connection, endpoint mismatch or deployment issue; ordinary writes do not require a preceding version probe. Compare build_sha and deployment_id with the public /version endpoint when troubleshooting.

  ConnectorNo auth

• get_server_infoA

  TestGraphA

  Return the exact TestGraph MCP server version and live deployment identity for diagnostics. Use this when checking a stale connection, endpoint mismatch or deployment issue; ordinary writes do not require a preceding version probe. Compare build_sha and deployment_id with the public /version endpoint when troubleshooting.

  ConnectorNo auth

• wa_enable_webhookA

  WhatsMCP: MCP for WhatsAppA

  Pause or resume delivery to the configured webhook WITHOUT changing the endpoint or its signing secret. Use this to stop deliveries temporarily — deleting and re-creating the webhook would issue a new secret. Messages keep arriving while paused and stay readable with wa_list_messages.

  ConnectorOAuth

• assets_create_uploadA

  SuprSendA

  For agents that can run shell commands (for example Claude Code): gives a single-use URL to upload a local image (PNG, JPEG, GIF, WebP) or PDF to the SuprSend CDN, with the curl command to run. The command prints the public URL. The file is public: never upload private files. Without a shell, use assets_upload.

  ConnectorOAuth

• wa_enable_webhookA

  whatsmcpA

  Pause or resume delivery to the configured webhook WITHOUT changing the endpoint or its signing secret. Use this to stop deliveries temporarily — deleting and re-creating the webhook would issue a new secret. Messages keep arriving while paused and stay readable with wa_list_messages.

  ConnectorOAuth

• webhook_endpoint_createA

  IA-QA — 130+ QA & Dev Tools for AI AgentsA

  Create a temporary webhook endpoint that captures incoming HTTP requests for one hour. Returns the webhook id, public URL, expiration timestamp, and current request count. Use together with webhook_endpoint_requests to inspect captured payloads.

  ConnectorNo auth

• set_delivery_endpointA

  Vertical MarketplaceA

  Register and verify your BROKER delivery endpoint. Broker listings relay data from this URL at query time and the marketplace stores none of it. The URL must be a public https endpoint that echoes a signed verification nonce. Requires a seller API key.

  ConnectorNo auth

• deploy_siteA

  DropTheHassleB

  Uploads site files and returns a live HTTPS link (name.dropthehassle.app) and a claim link (claim_url). Works without an account. Files are sent inline as path, content and encoding (utf8 or base64). This server cannot read a folder on the caller's computer. The published files are index.html at the top, or the built folder dist/, build/, out/, _site/, .output/public or docs/. With an account, site names the site to update and name is omitted; without site the oldest reserved address on the account is filled. Does not buy a name. Size limits: 25 MB and 1,000 files before the site is claimed, 100 MB and 5,000 files when signed in.

  Connector

  Destructive

  No auth

• set_delivery_endpointA

  VermarcoB

  Register and verify your BROKER delivery endpoint. Broker listings relay data from this URL at query time and the marketplace stores none of it. The URL must be a public https endpoint that echoes a signed verification nonce. Requires a seller API key.

  ConnectorNo auth

• upload_artifactA

  A2A OrbitB

  Store up to 1 MiB of immutable public bytes with a server-computed SHA-256 digest. Requires a contributor token, Orbit write permission, and idempotency key. Canonical base64 JSON supports zero-byte files. Storage quotas apply; the server does not execute files, extract archives, or fetch URLs. Byte integrity does not establish safety, truth, or reproducibility.

  ConnectorNo auth

• find_best_meeting_timeA

  Time of MeetingA

  Propose up to three fair meeting times while the slot is still being chosen. Ranking does not take a meeting length. A city's public holiday down-ranks that slot and is named in the reasons. Each slot city says whether that date is a holiday. Each slot has a score and the reasons. The result has one https://timeofmeeting.com link that opens the planner with those cities, and next_step, which says the user can choose a duration when creating the invitation. It does not include calendar files or a QR code. After a slot is chosen, call create_meeting_link.

  ConnectorNo auth

• x402_merchant_trust_checkA

  HirePulseA

  Pre-payment check of an x402 API endpoint: discovery files, live 402 terms, comparable USDC prices, latency, prompt-injection flags and public Coinbase CDP Bazaar payment statistics for the host. Heuristic, not a guarantee. $0.002; unreachable targets are free. Online shops: pre_purchase_merchant_trust_check.

  ConnectorNo auth

• x402_merchant_trust_checkA

  HirePulse Agent GatewayB

  Pre-payment check of an x402 API endpoint: discovery files, live 402 terms, comparable USDC prices, latency, prompt-injection flags and public Coinbase CDP Bazaar payment statistics for the host. Heuristic, not a guarantee. $0.002; unreachable targets are free. Online shops: pre_purchase_merchant_trust_check.

  ConnectorNo auth

• set_checkerA

  ValetA

  Add an organization checker, or replace the one with the same name. A checker is the organization's own HTTPS endpoint that implements Valet's Checker API. Once saved, a release policy can run it as org:<name>: set_policy with that checker. Valet calls the endpoint's describe operation before saving and saves nothing if the call fails. Saving a checker agrees, for the organization, to send the release files the endpoint asks for (the source, the build, or both) to the URL, for every release that a policy naming the checker evaluates. Once fetched, the files are outside Valet's control. Confirm that with the user before you call this tool. The answer names the files the endpoint asked for; those become the approved files. An endpoint that later asks for more is unavailable until the checker is saved again. A credential goes in headers only as a {{NAME}} reference to a secret env var of the organization, such as {"Authorization": "Bearer {{SNYK_TOKEN}}"}. Valet resolves the reference at each call. Never put a credential's value in a header: headers are stored and listed as written. Have the user set the variable first with `valet env set SNYK_TOKEN=... --org <org>`, so the value never passes through this conversation. A reference to a variable that is not a secret of the organization is refused. list_policies shows the organization's checkers. Requires connecting a Valet account.

  Connector

  Destructive

  No auth