homespunapps/homespun

[![Verified by MCP Verify](https://verify.sentinelsignal.io/badge/awesome-homespunapps/homespun.svg)](https://verify.sentinelsignal.io/servers/awesome-homespunapps/homespun)

{
  "checks": {
    "action_safety_probe": {
      "details": {
        "auth_present": true,
        "confirmation_signals": [],
        "safeguard_count": 0,
        "summary": {
          "bulk_access_tools": 0,
          "capability_distribution": {},
          "destructive_tools": 0,
          "egress_tools": 0,
          "exec_tools": 0,
          "high_risk_tools": 0,
          "risk_distribution": {
            "critical": 0,
            "high": 0,
            "low": 0,
            "medium": 0
          },
          "secret_tools": 0,
          "tool_count": 0
        }
      },
      "latency_ms": null,
      "status": "ok"
    },
    "advanced_capabilities_probe": {
      "details": {
        "capabilities": {
          "completions": false,
          "elicitation": false,
          "prompts": false,
          "resource_links": false,
          "resources": false,
          "roots": false,
          "sampling": false,
          "structured_outputs": false
        },
        "enabled": [],
        "enabled_count": 0,
        "initialize_capability_keys": [
          "prompts",
          "resources",
          "tools"
        ]
      },
      "latency_ms": null,
      "status": "missing"
    },
    "connector_publishability_probe": {
      "details": {
        "blockers": [
          "tools_list",
          "server_card",
          "tool_surface"
        ],
        "criteria": {
          "action_safety": true,
          "auth_flow": true,
          "connector_replay": true,
          "initialize": true,
          "protocol_version": true,
          "remote_transport": true,
          "request_association": true,
          "server_card": false,
          "session_resume": true,
          "step_up_auth": true,
          "tool_surface": false,
          "tools_list": false,
          "transport_compliance": true
        },
        "high_risk_tools": 0,
        "tool_count": 0,
        "transport": "streamable-http"
      },
      "latency_ms": null,
      "status": "error"
    },
    "connector_replay_probe": {
      "details": {
        "reason": "no_tools"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "determinism_probe": {
      "details": {
        "reason": "tools_list_unavailable"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "initialize": {
      "details": {
        "headers": {
          "content-type": "text/event-stream",
          "mcp-session-id": "bca60eac-357c-4433-a5e5-344d41d9805e"
        },
        "http_status": 200,
        "payload": {
          "id": 1,
          "jsonrpc": "2.0",
          "result": {
            "capabilities": {
              "prompts": {
                "listChanged": true
              },
              "resources": {
                "listChanged": true
              },
              "tools": {
                "listChanged": true
              }
            },
            "protocolVersion": "2025-03-26",
            "serverInfo": {
              "name": "homespun",
              "version": "1.6.34"
            }
          }
        },
        "url": "https://homespun.dev/mcp"
      },
      "latency_ms": 457.99,
      "status": "ok"
    },
    "interactive_flow_probe": {
      "details": {
        "oauth_supported": true,
        "prompt_available": false,
        "risk_hits": [],
        "safe_hits": []
      },
      "latency_ms": null,
      "status": "ok"
    },
    "oauth_authorization_server": {
      "details": {
        "headers": {
          "content-type": "application/json; charset=utf-8",
          "strict-transport-security": "max-age=31536000"
        },
        "http_status": 200,
        "payload": {
          "authorization_endpoint": "https://homespun.dev/oauth/authorize",
          "code_challenge_methods_supported": [
            "S256"
          ],
          "grant_types_supported": [
            "authorization_code",
            "refresh_token"
          ],
          "issuer": "https://homespun.dev",
          "registration_endpoint": "https://homespun.dev/oauth/register",
          "response_types_supported": [
            "code"
          ],
          "revocation_endpoint": "https://homespun.dev/oauth/revoke",
          "scopes_supported": [
            "homespun"
          ],
          "token_endpoint": "https://homespun.dev/oauth/token",
          "token_endpoint_auth_methods_supported": [
            "none",
            "client_secret_basic",
            "client_secret_post"
          ]
        },
        "url": "https://homespun.dev/.well-known/oauth-authorization-server"
      },
      "latency_ms": 72.85,
      "status": "ok"
    },
    "oauth_protected_resource": {
      "details": {
        "headers": {
          "content-type": "application/json; charset=utf-8",
          "strict-transport-security": "max-age=31536000"
        },
        "http_status": 200,
        "payload": {
          "authorization_servers": [
            "https://homespun.dev"
          ],
          "bearer_methods_supported": [
            "header"
          ],
          "resource": "https://homespun.dev/mcp",
          "resource_documentation": "https://homespun.dev/skills/homespun/MCP.md",
          "scopes_supported": [
            "homespun"
          ]
        },
        "url": "https://homespun.dev/.well-known/oauth-protected-resource"
      },
      "latency_ms": 217.66,
      "status": "ok"
    },
    "official_registry_probe": {
      "details": {
        "direct_match": false,
        "official_identifiers": [
          "ai.ai-akari/one-minute-akari",
          "ai.artidrop/artidrop",
          "ai.adramp/google-ads",
          "ai.adweave/meta-ads-mcp",
          "ai.aetherwealth/mcp",
          "ai.afmr/discovery",
          "ai.agentberg/agentberg",
          "ai.agentdm/agentdm",
          "ai.assetlog/assetlog",
          "ai.agentic-news/mcp"
        ],
        "official_peer_count": 10,
        "registry_source": "awesome_mcp_servers"
      },
      "latency_ms": null,
      "status": "warning"
    },
    "openid_configuration": {
      "details": {
        "error": "Client error '404 Not Found' for url 'https://homespun.dev/.well-known/openid-configuration'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
        "url": "https://homespun.dev/.well-known/openid-configuration"
      },
      "latency_ms": 73.47,
      "status": "error"
    },
    "probe_noise_resilience": {
      "details": {
        "headers": {
          "content-type": "text/plain; charset=utf-8",
          "strict-transport-security": "max-age=31536000"
        },
        "http_status": 200,
        "url": "https://homespun.dev/robots.txt"
      },
      "latency_ms": 234.3,
      "status": "ok"
    },
    "prompt_get": {
      "details": {
        "reason": "not_advertised"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "prompts_list": {
      "details": {
        "error": "Client error '400 Bad Request' for url 'https://homespun.dev/mcp'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400",
        "headers": {
          "content-type": "application/json; charset=utf-8",
          "strict-transport-security": "max-age=31536000"
        },
        "http_status": 400,
        "payload": {},
        "reason": "not_advertised",
        "url": "https://homespun.dev/mcp"
      },
      "latency_ms": 218.37,
      "status": "missing"
    },
    "protocol_version_probe": {
      "details": {
        "claimed_version": "2025-03-26",
        "lag_days": 244,
        "latest_known_version": "2025-11-25",
        "releases_behind": 2,
        "validator_protocol_version": "2025-03-26"
      },
      "latency_ms": null,
      "status": "warning"
    },
    "provenance_divergence_probe": {
      "details": {
        "direct_official_match": false,
        "drift_fields": [],
        "metadata_document_count": 1,
        "registry_homepage": null,
        "registry_repository": null,
        "registry_title": null,
        "registry_version": null,
        "server_card_homepage": null,
        "server_card_repository": null,
        "server_card_title": null,
        "server_card_version": null
      },
      "latency_ms": null,
      "status": "ok"
    },
    "request_association_probe": {
      "details": {
        "reason": "no_request_association_capabilities_advertised"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "resource_read": {
      "details": {
        "reason": "not_advertised"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "resources_list": {
      "details": {
        "error": "Client error '400 Bad Request' for url 'https://homespun.dev/mcp'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400",
        "headers": {
          "content-type": "application/json; charset=utf-8",
          "strict-transport-security": "max-age=31536000"
        },
        "http_status": 400,
        "payload": {},
        "reason": "not_advertised",
        "url": "https://homespun.dev/mcp"
      },
      "latency_ms": 387.34,
      "status": "missing"
    },
    "server_card": {
      "details": {
        "error": "Client error '404 Not Found' for url 'https://homespun.dev/.well-known/mcp/server-card.json'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
        "url": "https://homespun.dev/.well-known/mcp/server-card.json"
      },
      "latency_ms": 473.96,
      "status": "error"
    },
    "session_resume_probe": {
      "details": {
        "headers": {
          "content-type": "text/event-stream",
          "mcp-session-id": "bca60eac-357c-4433-a5e5-344d41d9805e"
        },
        "http_status": 200,
        "payload": {
          "id": 301,
          "jsonrpc": "2.0",
          "result": {
            "tools": [
              {
                "annotations": {
                  "destructiveHint": false,
                  "idempotentHint": false,
                  "openWorldHint": true,
                  "readOnlyHint": false,
                  "title": "Deploy App"
                },
                "description": "Deploy a v2 app: an HTML document plus a capability manifest, hosted at its own URL. The manifest carries eight extension keys: app metadata; collections, with per-collection write, update, read and delete role lists, where write gates creates and also gates updates unless an update list is declared; externalHosts, a fetch allowlist; cdn, to allow CDN scripts and styles; capabilities, for Permissions-Policy opt-ins; embeds, an iframe frame-src allowlist; notify, for email-on-row rules; and webhooks, for signed HTTP POST on-row rules. The manifest grammar is documented in the Homespun guide that get_skill returns.\n\nPass no `app_id` to create, which mints a slug and URL, or pass `app_id` to redeploy an existing app with new content. Supply the HTML inline as `html`, or as `html_path`, an absolute path read on the MCP-server host, which is the relay for a hosted connector or the CLI host for a locally-run one, and not the remote agent's machine; it avoids retransmitting a large HTML file on every deploy, only a locally-run connector can read it, and inline `html` wins if both are given. `dry_run:true` (alias `check`) validates only: it runs the full manifest and asset-shape validation, the redeploy compat gate and the schedule-timezone advisory, then returns { ok, warnings, compat?, breaks? } without creating a version or mutating anything.\n\nA redeploy is refused with manifest_incompatible_redeploy, unless force:true, when it would strand rows already written (dropping a collection, tightening a schema, flipping appendOnly), or when it would widen what the app's install screen discloses, such as a collection's read reaching further than the live manifest. The break quotes the sentence a user would now be asked to approve. Taking access away never prompts: dropping a role, or adding update:[\\\"creator\\\"] to a write:[\\\"anyone\\\"] collection, redeploys clean. A removed collection is detached rather than deleted.\n\nImages, fonts, audio, video and data files ship with the app in the same call via `assets[]`. Each is validated and stored app-scoped and served at its `path` on the app's own origin, so the HTML references it by a stable same-origin path such as `<img src=\\\"frames/000.jpg\\\">`; media and font paths support HTTP Range for seeking. A redeploy's assets replace the previous version's set.\n\nReturns { app_id, slug, url, version, visibility, created } on create, or { app_id, version, compat, breaks? } on redeploy.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "app_id": {
                      "description": "Omit to CREATE a new app; pass an existing app's id to REDEPLOY it (a new version, compat-gated unless force:true).",
                      "type": "string"
                    },
                    "assets": {
                      "description": "Optional bundle of files shipped WITH the app in ONE deploy: images, fonts, audio/video, data. Each asset either carries its bytes inline as `content_base64` OR references an already-uploaded attachment by `attachment_id` (prefer the reference form for real images/media: upload once via `attachments fetch` or presign, then bind it here with NO base64 in the deploy body). Each asset is validated + stored app-scoped exactly like a normal attachment (byte-sniff, allowlist, size cap, quota, scan) and served at its `path` on the app's OWN origin, so the page references it by a stable same-origin path (`<img src=\"frames/000.jpg\">`, `<video src=\"media/intro.mp4\">`; media/font paths support HTTP Range). The whole deploy is rejected atomically if any asset fails validation. A redeploy's assets REPLACE the previous version's set. Bounded by the relay's per-deploy asset-count cap; total bytes by the per-app blob quota.",
                      "items": {
                        "anyOf": [
                          {
                            "properties": {
                              "content_base64": {
                                "description": "Standard base64 of the asset's raw bytes.",
                                "type": "string"
                              },
                              "mime": {
                                "description": "Advisory content-type. The relay sniffs the REAL type from the bytes and enforces the attachment allowlist; omit it (or set application/octet-stream) for data files like CSV that don't magic-byte-sniff, so they are stored + served as an inert download.",
                                "type": "string"
                              },
                              "path": {
                                "description": "App-relative, same-origin reference the HTML uses, for example 'frames/000.jpg' or 'media/intro.mp4'. Must be relative: no leading '/', no '..' segment, no backslash, charset [A-Za-z0-9._/-], and not under a reserved prefix (_hs, b).",
                                "type": "string"
                              }
                            },
                            "required": [
                              "path",
                              "content_base64"
                            ],
                            "type": "object"
                          },
                          {
                            "properties": {
                              "attachment_id": {
                                "description": "Id of an ALREADY-uploaded attachment to bind at this path, instead of carrying base64. Use with `attachments fetch` (URL, zero model-context cost) or presign + finalize: the attachment must be owned by YOU, app-scoped to THIS app (upload it with scope=app, app_id=this app), and ready. Skips decode/upload; the deploy just maps path -> attachment_id.",
                                "type": "string"
                              },
                              "path": {
                                "description": "App-relative, same-origin reference the HTML uses (same rules as the inline form).",
                                "type": "string"
                              }
                            },
                            "required": [
                              "path",
                              "attachment_id"
                            ],
                            "type": "object"
                          }
                        ]
                      },
                      "type": "array"
                    },
                    "check": {
                      "description": "Alias for `dry_run`.",
                      "type": "boolean"
                    },
                    "dry_run": {
                      "description": "Validate only: run the full manifest + asset-shape validation, the compat gate (for a redeploy), and the schedule-timezone advisory, then return { ok, warnings, compat?, breaks? } WITHOUT creating a version or mutating anything. An invalid manifest returns the SAME error a real deploy would; a redeploy the compat gate would refuse reports the break instead of applying it. `check` is an accepted alias.",
                      "type": "boolean"
                    },
                    "force": {
                      "description": "REDEPLOY only. Bypass the compat gate, whether it fired on a stranded-rows narrowing or on a widening of what the install screen discloses (a removed collection is detached, never deleted).",
                      "type": "boolean"
                    },
                    "html": {
                      "description": "The app's UI as a complete HTML document (single file, up to the relay's size cap), sent inline. Provide either this or `html_path`. Inline is required for a hosted or remote connector that has no filesystem. If both are given, inline `html` wins.",
                      "minLength": 1,
                      "type": "string"
                    },
                    "html_path": {
                      "description": "ABSOLUTE path to the app's HTML document, read on the MCP-SERVER host (the machine running this connector: the relay for a hosted connector, or your CLI host for a locally-run one), NOT on the remote agent's machine. Alternative to inline `html` that avoids retransmitting a large HTML file on every deploy. Only works when the file is local to the MCP server, so it helps a locally-run connector, not a hosted/remote one (where the path will not exist and you get a clean error, so pass inline `html` there). If both `html` and `html_path` are given, inline `html` wins.",
                      "type": "string"
                    },
                    "manifest": {
                      "additionalProperties": {},
                      "description": "The x-homespun-manifest capability document (a JSON object). Eight extension keys: app metadata; collections (+ per-collection write/update/read/delete role lists, where write gates creates and also updates unless the optional update list is declared); externalHosts (fetch allowlist); cdn (allow CDN scripts/styles); capabilities (Permissions-Policy opt-ins); embeds (iframe frame-src allowlist); notify (email-on-row rules); webhooks (signed HTTP POST on-row rules). Call get_skill for the full grammar before authoring one from scratch.",
                      "propertyNames": {
                        "type": "string"
                      },
                      "type": "object"
                    },
                    "slug": {
                      "description": "CREATE only. Accepted with visibility private or public, including the private default; rejected with explicit visibility 'link', where the slug is always server-generated.",
                      "type": "string"
                    },
                    "visibility": {
                      "description": "CREATE only. Default 'private' (owner plus invited members, sign-in gated). 'link' shares with anyone holding the returned share_url, whose #k= fragment carries a secret key that can be reset (rotate it via the apps tool, action share_link_rotate) to cut off everyone with the old link; a 'link' app always gets a server-generated unguessable slug. 'private' and 'public' accept an owner-chosen `slug`.",
                      "enum": [
                        "private",
                        "link",
                        "public"
                      ],
                      "type": "string"
                    }
                  },
                  "required": [
                    "manifest"
                  ],
                  "type": "object"
                },
                "name": "deploy_app",
                "title": "Deploy App"
              },
              {
                "annotations": {
                  "openWorldHint": false,
                  "readOnlyHint": true,
                  "title": "List Rows"
                },
                "description": "List rows in a v2 app's mutable collection. This is also how a collection's current state is polled, since MCP has no streaming: pass the prior next_cursor as `since` to fetch only rows that are new or changed. Returns { rows, next_cursor, has_more }.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "app_id": {
                      "description": "The app id.",
                      "minLength": 1,
                      "type": "string"
                    },
                    "collection": {
                      "description": "The collection name declared in the app's manifest.",
                      "minLength": 1,
                      "type": "string"
                    },
                    "limit": {
                      "description": "Page size.",
                      "exclusiveMinimum": 0,
                      "maximum": 1000,
                      "type": "integer"
                    },
                    "since": {
                      "description": "Opaque cursor from a previous call's next_cursor. Also the POLL handle: pass it back to fetch only newer/changed rows.",
                      "type": "string"
                    }
                  },
                  "required": [
                    "app_id",
                    "collection"
                  ],
                  "type": "object"
                },
                "name": "list_rows",
                "title": "List Rows"
              },
              {
                "annotations": {
                  "openWorldHint": false,
                  "readOnlyHint": true,
                  "title": "Get Row"
                },
                "description": "Fetch a single row by its key from a v2 app collection, through a dedicated relay route rather than a client-side scan. Returns { row }, or an isError row_not_found.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "app_id": {
                      "description": "The app id.",
                      "minLength": 1,
                      "type": "string"
                    },
                    "collection": {
                      "description": "The collection name.",
                      "minLength": 1,
                      "type": "string"
                    },
                    "key": {
                      "description": "The key of the row to fetch.",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "app_id",
                    "collection",
                    "key"
                  ],
                  "type": "object"
                },
                "name": "get_row",
                "title": "Get Row"
              },
              {
                "annotations": {
                  "destructiveHint": false,
                  "idempotentHint": true,
                  "openWorldHint": false,
                  "readOnlyHint": false,
                  "title": "Upsert Row"
                },
                "description": "Create a row in a v2 app's collection, or return the existing row when `key` is already present (deduped:true). Row creation goes through this tool; there is no separate strict-create verb. Omit `key` to add a new row with a server-generated key, or pass `key` to ensure a row exists at that key. The collection must be declared in the app's manifest with 'agent' in its `write` list, which is the list that gates creates. When `key` matches a row the collection's `read` list does not reach for this caller, the result is row_not_found rather than the row, matching what get_row would return, so this never reads past `read`. Returns { row, deduped? }.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "app_id": {
                      "description": "The app id.",
                      "minLength": 1,
                      "type": "string"
                    },
                    "collection": {
                      "description": "The collection name.",
                      "minLength": 1,
                      "type": "string"
                    },
                    "data": {
                      "anyOf": [
                        {
                          "additionalProperties": {},
                          "propertyNames": {
                            "type": "string"
                          },
                          "type": "object"
                        },
                        {
                          "items": {},
                          "type": "array"
                        },
                        {
                          "type": "string"
                        },
                        {
                          "type": "number"
                        },
                        {
                          "type": "boolean"
                        },
                        {
                          "type": "null"
                        }
                      ],
                      "description": "The row body - any JSON value valid against the collection's row schema (an object, or any JSON value for a schemaless collection)."
                    },
                    "key": {
                      "description": "Optional stable key. Reusing an existing key returns the existing row (deduped:true), or row_not_found when the collection's read list does not reach that row for you.",
                      "type": "string"
                    }
                  },
                  "required": [
                    "app_id",
                    "collection",
                    "data"
                  ],
                  "type": "object"
                },
                "name": "upsert_row",
                "title": "Upsert Row"
              },
              {
                "annotations": {
                  "destructiveHint": false,
                  "idempotentHint": true,
                  "openWorldHint": false,
                  "readOnlyHint": false,
                  "title": "Update Row"
                },
                "description": "Update an existing row in a v2 app's collection, replacing its data. Gated by the collection's `update` role list when it declares one, and by its `write` list otherwise, so a collection that scopes updates to the row's `creator` refuses an edit on someone else's row. Pass if_match with the row's current version for an optimistic-locked update; on a version mismatch the relay returns the current row, which is what a retry needs. Returns { row }.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "app_id": {
                      "description": "The app id.",
                      "minLength": 1,
                      "type": "string"
                    },
                    "collection": {
                      "description": "The collection name.",
                      "minLength": 1,
                      "type": "string"
                    },
                    "data": {
                      "anyOf": [
                        {
                          "additionalProperties": {},
                          "propertyNames": {
                            "type": "string"
                          },
                          "type": "object"
                        },
                        {
                          "items": {},
                          "type": "array"
                        },
                        {
                          "type": "string"
                        },
                        {
                          "type": "number"
                        },
                        {
                          "type": "boolean"
                        },
                        {
                          "type": "null"
                        }
                      ],
                      "description": "The new row body (replaces the row's data) - any JSON value valid against the collection's row schema."
                    },
                    "if_match": {
                      "description": "Optional optimistic-lock version. On mismatch the update is rejected with the current row in details.current.",
                      "maximum": 9007199254740991,
                      "minimum": -9007199254740991,
                      "type": "integer"
                    },
                    "key": {
                      "description": "The key of the row to update.",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "app_id",
                    "collection",
                    "key",
                    "data"
                  ],
                  "type": "object"
                },
                "name": "update_row",
                "title": "Update Row"
              },
              {
                "annotations": {
                  "destructiveHint": true,
                  "idempotentHint": true,
                  "openWorldHint": false,
                  "readOnlyHint": false,
                  "title": "Delete Row"
                },
                "description": "Soft-delete a row from a v2 app's collection. A watcher sees the deletion live as op:delete on the change feed. Pass if_match for an optimistic-locked delete. Returns { deleted: true }.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "app_id": {
                      "description": "The app id.",
                      "minLength": 1,
                      "type": "string"
                    },
                    "collection": {
                      "description": "The collection name.",
                      "minLength": 1,
                      "type": "string"
                    },
                    "if_match": {
                      "description": "Optional optimistic-lock version.",
                      "maximum": 9007199254740991,
                      "minimum": -9007199254740991,
                      "type": "integer"
                    },
                    "key": {
                      "description": "The key of the row to delete.",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "app_id",
                    "collection",
                    "key"
                  ],
                  "type": "object"
                },
                "name": "delete_row",
                "title": "Delete Row"
              },
              {
                "annotations": {
                  "openWorldHint": false,
                  "readOnlyHint": true,
                  "title": "Get App Feed Events"
                },
                "description": "Poll a v2 app's change feed for what has happened: row creates, updates and deletes, from any writer, agent or human. It is the long-poll analogue of `homespun apps watch`, since MCP has no streaming. The loop is: call with no `since` first, process the returned entries, keep the cursor, then call again passing it as `since` to get only newer entries. Passing wait (around 25) holds the request open until an entry arrives or it times out, which is how the feed is waited on rather than busy-polled. A `since` older than the retention floor returns resync_required, and the collections are then re-listed with list_rows. Returns { entries, cursor, truncated }.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "app_id": {
                      "description": "The app id.",
                      "minLength": 1,
                      "type": "string"
                    },
                    "limit": {
                      "description": "Max entries per page (capped server-side by FEED_PAGE_MAX).",
                      "exclusiveMinimum": 0,
                      "maximum": 9007199254740991,
                      "type": "integer"
                    },
                    "since": {
                      "description": "Opaque numeric cursor from a previous call's cursor. Omit (or 0) to read from the beginning.",
                      "maximum": 9007199254740991,
                      "minimum": 0,
                      "type": "integer"
                    },
                    "wait": {
                      "description": "Optional long-poll: how long the relay holds the request open waiting for a new entry (0-30s). Use ~25 when waiting for activity, then call again with the same cursor.",
                      "maximum": 30,
                      "minimum": 0,
                      "type": "integer"
                    }
                  },
                  "required": [
                    "app_id"
                  ],
                  "type": "object"
                },
                "name": "get_feed_events",
                "title": "Get App Feed Events"
              },
              {
                "annotations": {
                  "destructiveHint": true,
                  "idempotentHint": true,
                  "openWorldHint": false,
                  "readOnlyHint": false,
                  "title": "Manage Apps"
                },
                "description": "The v2 app lifecycle apart from creation and redeploy, which deploy_app covers. Actions: list returns the owning human's apps; show returns full detail including manifest, timezone and has_share_token; update changes visibility and timezone, the slug being immutable, and switching to 'link' returns a share_url once; share_link_rotate issues a new share token for a 'link' app, returning a new share_url and revoking the old link, and generates one if the app has none; delete is an idempotent soft-delete; wake wakes a dormant app and is otherwise a no-op that reports the actual status; domain_set binds a custom domain and returns the DNS records the domain owner must publish, where the first domain bound serves the app and every later one redirects to it, which is how apex plus www is configured; domain_status returns the serving domain and its `aliases`, live-refreshed against Cloudflare when that is enabled, with last_error carrying the reason a domain is not activating; domain_remove unbinds one domain, or all of them when no `domain` is given, and is idempotent.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "action": {
                      "description": "list: YOUR owning human's apps. show/update/delete/wake: act on one app (app_id). share_link_rotate: rotate a 'link' app's share token, returning a new share_url (the old link stops working); also generates one if the app has none yet. domain_set/domain_status/domain_remove: manage the app's custom domains (app_id; domain_set also needs domain).",
                      "enum": [
                        "list",
                        "show",
                        "update",
                        "share_link_rotate",
                        "delete",
                        "wake",
                        "domain_set",
                        "domain_status",
                        "domain_remove"
                      ],
                      "type": "string"
                    },
                    "app_id": {
                      "description": "Required for show/update/share_link_rotate/delete/wake/domain_set/domain_status/domain_remove.",
                      "type": "string"
                    },
                    "cursor": {
                      "description": "list only. Opaque cursor from a previous next_cursor.",
                      "type": "string"
                    },
                    "domain": {
                      "description": "domain_set: the bare custom domain to bind (e.g. app.example.com); the response's dns_records lists the DNS entries the domain owner must publish. domain_remove: OPTIONAL, the one domain to unbind - omit it to unbind them all.",
                      "type": "string"
                    },
                    "limit": {
                      "description": "list only. Page size.",
                      "exclusiveMinimum": 0,
                      "maximum": 200,
                      "type": "integer"
                    },
                    "slug": {
                      "description": "list only. Exact-match slug filter.",
                      "type": "string"
                    },
                    "status": {
                      "description": "list only. Default: active.",
                      "enum": [
                        "active",
                        "dormant",
                        "archived",
                        "all"
                      ],
                      "type": "string"
                    },
                    "timezone": {
                      "description": "update only. The app's IANA timezone for `schedules` reminders (e.g. Europe/Berlin). An app that declares schedules with no timezone fires reminders at 08:00 UTC.",
                      "type": "string"
                    },
                    "visibility": {
                      "description": "update only. The new visibility (slug is immutable).",
                      "enum": [
                        "private",
                        "link",
                        "public"
                      ],
                      "type": "string"
                    }
                  },
                  "required": [
                    "action"
                  ],
                  "type": "object"
                },
                "name": "apps",
                "title": "Manage Apps"
              },
              {
                "annotations": {
                  "destructiveHint": true,
                  "idempotentHint": true,
                  "openWorldHint": false,
                  "readOnlyHint": false,
                  "title": "Manage App Members"
                },
                "description": "A v2 app's membership (auth spec section 6): who besides the owner can sign in to a private app and write to member-scoped collections. Actions: add invites or attaches a member by email, attaching immediately when the email already has a Human and otherwise sending a magic-link invite; list returns the app's owner and members; set_role changes an existing member's declared custom role in place, or clears it when null, and leaves their sessions intact, which is what makes it the way to re-role someone rather than removing and re-adding them; remove is idempotent and also revokes the human's live sessions on this app, and the app owner cannot be removed; roles returns the derived roles summary, giving the effective access a holder actually has per declared role and collection, reported separately for signed-in members and for grant-link holders because their role floors differ, along with member and active-grant-link counts.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "action": {
                      "description": "add: invite-or-attach a member by email (app_id+email; optional custom_roles). list: the app's owner + members (app_id). set_role: replace an existing member's declared roles in place without signing them out (app_id+human_id+custom_roles, an empty list to clear). remove: drop a member (app_id+human_id). roles: the app's declared roles with what each one includes and, per collection, the EFFECTIVE access a holder has (separately for members and grant-link holders, whose role floors differ) plus how many members and live grant links hold each role (app_id).",
                      "enum": [
                        "add",
                        "list",
                        "set_role",
                        "remove",
                        "roles"
                      ],
                      "type": "string"
                    },
                    "app_id": {
                      "description": "The app id.",
                      "minLength": 1,
                      "type": "string"
                    },
                    "custom_roles": {
                      "description": "add (optional) and set_role (required). The DECLARED roles (x-homespun-manifest.roles keys) attached to the member ALONGSIDE their base member powers. A member may hold several and holds the union of what each grants, plus everything those roles `includes`. A built-in/reserved role or an undeclared role is rejected. Omit on add for an ordinary member; pass [] on set_role to clear the roles back to a plain member.",
                      "items": {
                        "type": "string"
                      },
                      "type": "array"
                    },
                    "email": {
                      "description": "add only. The email to invite/attach. If a Human already exists for it, the member row is attached immediately; otherwise the relay emails a magic-link invite.",
                      "type": "string"
                    },
                    "human_id": {
                      "description": "remove and set_role. The Human id to target \u2014 see list's `humanId` field. The app owner can be neither removed nor re-roled.",
                      "type": "string"
                    },
                    "role": {
                      "description": "add only. Defaults to 'member' server-side \u2014 no other role is assignable via this API (ownership transfer is not available here).",
                      "enum": [
                        "member"
                      ],
                      "type": "string"
                    }
                  },
                  "required": [
                    "action",
                    "app_id"
                  ],
                  "type": "object"
                },
                "name": "members",
                "title": "Manage App Members"
              },
              {
                "annotations": {
                  "destructiveHint": true,
                  "idempotentHint": true,
                  "openWorldHint": false,
                  "readOnlyHint": false,
                  "title": "Manage App Grant Links"
                },
                "description": "A v2 app's grant links (M5). A grant link is a capability URL that confers a declared custom role (x-homespun-manifest.roles) on a stable per-holder anonymous identity, so a holder's own rows are isolated by author/:own scoping. A grant does not escalate to owner, member or agent. Actions: mint creates a link and returns a `grant_url` carrying the token in its #g= fragment, shown once and not recoverable afterwards; list returns the app's links and never a token; revoke is idempotent. mode 'once' is one-time, claimed by the first browser to open it; 'multi' is shared, capped by max_uses within expiry. An optional pin (pin_row_key or pin_where) narrows a holder to specific rows and never widens their access. One consequence worth knowing when minting: a write-only grant pinned to a single row key can still read that row's existing data back through create dedup, so such a grant exposes that row's current contents to the holder.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "action": {
                      "description": "mint: create a grant link carrying a declared custom role (app_id+role). list: the app's grant links (app_id). revoke: revoke one link (app_id+grant_id).",
                      "enum": [
                        "mint",
                        "list",
                        "revoke"
                      ],
                      "type": "string"
                    },
                    "app_id": {
                      "description": "The app id.",
                      "minLength": 1,
                      "type": "string"
                    },
                    "grant_id": {
                      "description": "revoke only. The grant link id (see list's `id` field).",
                      "type": "string"
                    },
                    "label": {
                      "description": "mint only. Optional owner label shown in the grant list.",
                      "type": "string"
                    },
                    "max_uses": {
                      "description": "mint only (multi mode). Cap total claims; omit for unlimited within expiry. Ignored for once (forced to 1).",
                      "exclusiveMinimum": 0,
                      "maximum": 9007199254740991,
                      "type": "integer"
                    },
                    "mode": {
                      "description": "mint only. once: one-time link, claimed by the first browser that opens it (a real per-person link; later opens by others are inert). multi (default): a shared link, capped by max_uses within expiry.",
                      "enum": [
                        "once",
                        "multi"
                      ],
                      "type": "string"
                    },
                    "pin_row_key": {
                      "description": "mint only. Optional narrowing pin to a single row key. NARROWS within the role (never widens). Mutually exclusive with pin_where.",
                      "type": "string"
                    },
                    "pin_where": {
                      "description": "mint only. Optional narrowing pin as Wave C2 where conditions ({field, op, value}[]). NARROWS within the role (never widens). Mutually exclusive with pin_row_key.",
                      "items": {},
                      "type": "array"
                    },
                    "role": {
                      "description": "mint only. A DECLARED custom role for the app (an x-homespun-manifest.roles key). A built-in role (owner/member/agent/anyone) is rejected: a grant can never escalate.",
                      "type": "string"
                    },
                    "ttl_seconds": {
                      "description": "mint only. Grant lifetime in seconds; defaults to the server default (30 days) and is clamped to the server max.",
                      "exclusiveMinimum": 0,
                      "maximum": 9007199254740991,
                      "type": "integer"
                    }
                  },
                  "required": [
                    "action",
                    "app_id"
                  ],
                  "type": "object"
                },
                "name": "grants",
                "title": "Manage App Grant Links"
              },
              {
                "annotations": {
                  "destructiveHint": true,
                  "openWorldHint": false,
                  "readOnlyHint": false,
                  "title": "Manage App Inbound Hooks"
                },
                "description": "A v2 app's inbound catch-hooks (inbound-webhooks). A catch-hook lets an external system such as Stripe, Zapier, Make, Home Assistant or an email router POST JSON to a secret URL that writes into a declared collection, so the app receives data with no agent online. Hooks are declared in the manifest (x-homespun-manifest.ingest) and materialized at deploy, so this tool has no create or delete: it reads back the URL, rotates a leaked one, and manages the opt-in signing secret. After deploying a manifest that declares a hook, list is what yields the exact URL to paste into the external system. Actions: list returns the app's hooks, each with its full secret URL, current rule collection, mode, wake and handshake settings, per-status delivery counts and signing-secret state; rotate mints a fresh URL secret for one hook by name and returns the new url once, after which the old url stops working immediately with no redeploy needed; set_signing_secret provisions or rotates a hook's signing secret, which is a different secret from the URL and is what a provider HMACs the body with, minting one returned once when `secret` is omitted or storing a provider value verbatim when it is passed, and never echoing it back; clear_signing_secret removes it. Signature verification currently ships dark: nothing verifies a signature yet.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "action": {
                      "description": "list: the app's inbound catch-hooks, each with its full secret URL, current rule (collection/mode/wake/handshake), and per-status delivery counts (app_id). rotate: mint a fresh URL secret for one hook and return its new URL once, invalidating the old URL immediately (app_id+name). set_signing_secret: provision or rotate a hook's OPT-IN signing secret, distinct from the URL secret (it is what a provider HMACs the body with); omit `secret` to mint one (returned ONCE) or pass `secret` to store a provider-generated value verbatim (never echoed) (app_id+name). clear_signing_secret: remove a hook's signing secret (app_id+name).",
                      "enum": [
                        "list",
                        "rotate",
                        "set_signing_secret",
                        "clear_signing_secret"
                      ],
                      "type": "string"
                    },
                    "app_id": {
                      "description": "The app id.",
                      "minLength": 1,
                      "type": "string"
                    },
                    "grace_seconds": {
                      "description": "set_signing_secret only. On a rotation, how long the previous secret stays valid so deliveries verify while you update the provider (default 3600, max 86400).",
                      "type": "number"
                    },
                    "name": {
                      "description": "rotate / set_signing_secret / clear_signing_secret. The manifest ingest hook name (an x-homespun-manifest.ingest[].name). See list's `name` field.",
                      "type": "string"
                    },
                    "secret": {
                      "description": "set_signing_secret only. A provider-generated signing secret to store verbatim (the Stripe path). Omit to have the relay mint one (the GitHub path), returned ONCE in the response.",
                      "type": "string"
                    }
                  },
                  "required": [
                    "action",
                    "app_id"
                  ],
                  "type": "object"
                },
                "name": "ingest",
                "title": "Manage App Inbound Hooks"
              },
              {
                "annotations": {
                  "destructiveHint": true,
                  "idempotentHint": false,
                  "openWorldHint": true,
                  "readOnlyHint": false,
                  "title": "Manage Attachments"
                },
                "description": "Binary attachments (images, PDFs, audio, video) referenced from event payloads and input_data via `format: homespun-attachment-id`. Actions: upload, fetch, presign, finalize, download, show, list, delete, mint_token, revoke_token, list_tokens.\n\nChoosing an upload path matters for cost. An inline upload with `content_base64` carries the bytes in the tool-call arguments, so they enter the model context at a token cost proportional to file size, paid again on every retry; a few-hundred-KB image is already expensive. Two paths avoid that entirely: fetch, when the bytes are reachable at a URL, and presign plus finalize, when the client can PUT the raw bytes out of band. Inline upload suits small assets and clients that have neither a URL nor an out-of-band PUT.\n\nfetch takes { source_url (https), scope } and the relay downloads the URL itself behind an SSRF guard (https only, no private, loopback or metadata hosts, DNS pinned, redirects refused, size-capped and timed out), then runs the same byte-sniff, allowlist, size, quota and scan checks as any upload. It works on any storage backend. upload takes either `content_base64` (base64 bytes, no filesystem) or `file_path` (an absolute path read on the relay host, so it only applies when the file is local to the relay). presign plus finalize is token-free: presign with { mime, size, sha256, scope } returns { put_url, attachment_id }, the caller PUTs the raw bytes to put_url over plain HTTP out of band, then finalize with the attachment_id. At finalize the relay re-reads the stored bytes, sniffs the real type, and enforces the same allowlist, size, sha256, quota and scan checks, so a presign that misstates its mime is caught and never served inline. The presigned path requires the Azure storage backend; a filesystem self-host returns a clear not-supported error and fetch or inline upload apply there instead. download writes to an absolute out_path or returns base64. An upload is scoped to agent (the default, reusable) or app. mint_token returns a /b/<token> capability URL, shown once, that a browser can GET without the caller's API key.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "action": {
                      "description": "Binary attachment operations. The upload path affects token cost: `fetch` and presign plus finalize keep the bytes out of the model context entirely, while upload with `content_base64` carries them in the tool-call arguments at a cost proportional to file size, paid again on every retry. fetch takes { source_url, scope } and the relay downloads the bytes itself (https only, SSRF-guarded), running the same sniff, allowlist, size, quota and scan checks as any upload. upload takes `content_base64` (base64 bytes, no filesystem) or `file_path` (absolute, read on the relay host), scoped agent or app. presign plus finalize is three steps: presign with { mime, size, sha256, scope }, PUT the bytes to put_url out of band, then finalize, which re-sniffs and re-checks them. download fetches bytes by attachment_id to an absolute out_path or returns base64. show returns metadata only. list returns the agent's attachments. delete is a soft-delete. mint_token mints a /b/<token> capability URL, returned once. revoke_token and list_tokens manage those tokens.",
                      "enum": [
                        "upload",
                        "fetch",
                        "presign",
                        "finalize",
                        "download",
                        "show",
                        "list",
                        "delete",
                        "mint_token",
                        "revoke_token",
                        "list_tokens"
                      ],
                      "type": "string"
                    },
                    "app_id": {
                      "description": "Required when scope=app.",
                      "type": "string"
                    },
                    "attachment_id": {
                      "description": "Attachment id. Required for download/show/delete/mint_token/revoke_token/list_tokens.",
                      "type": "string"
                    },
                    "content_base64": {
                      "description": "upload: the file bytes as base64, sent inline with no filesystem access. The base64 rides in the tool-call arguments and enters the model context, costing tokens proportional to file size; a few-hundred-KB image is already expensive, and the cost repeats on every retry. presign plus finalize avoids that for any real image or media whenever the client can do an out-of-band HTTP PUT, which leaves `content_base64` suited to small assets such as a tiny icon, and to clients that cannot PUT out of band. If both `content_base64` and `file_path` are given, `content_base64` wins. The relay sniffs the real type and enforces the same size, allowlist and quota checks as a file upload.",
                      "type": "string"
                    },
                    "cursor": {
                      "description": "list pagination cursor.",
                      "type": "string"
                    },
                    "file_path": {
                      "description": "upload: ABSOLUTE path to a file read on the SERVER host running this MCP connector (the relay), NOT your machine. Only works when the file is local to the relay (e.g. a locally-run CLI). For a hosted or remote agent, use `content_base64` instead.",
                      "type": "string"
                    },
                    "filename": {
                      "description": "upload: display filename (defaults to the file's basename).",
                      "type": "string"
                    },
                    "limit": {
                      "description": "list page size (1..100).",
                      "exclusiveMinimum": 0,
                      "maximum": 100,
                      "type": "integer"
                    },
                    "mime": {
                      "description": "upload/presign: advisory Content-Type. The relay BYTE-SNIFFS the actual bytes and stores/serves that sniffed type regardless (a lying mime is caught, never served inline). Required for presign (scopes the upload URL + fails fast against the allowlist).",
                      "type": "string"
                    },
                    "once": {
                      "description": "mint_token: token self-deletes on first GET.",
                      "type": "boolean"
                    },
                    "out_path": {
                      "description": "download: ABSOLUTE path to write the bytes to. If omitted, the bytes are returned base64-encoded in the result.",
                      "type": "string"
                    },
                    "scope": {
                      "description": "upload scope (default agent).",
                      "enum": [
                        "agent",
                        "app"
                      ],
                      "type": "string"
                    },
                    "sha256": {
                      "description": "presign: the hex SHA-256 (64 chars) of the exact bytes you will PUT. Committed at presign and re-verified against the uploaded bytes at finalize.",
                      "type": "string"
                    },
                    "size": {
                      "description": "presign: the exact byte length you will PUT. Committed at presign and re-verified against the uploaded bytes at finalize.",
                      "exclusiveMinimum": 0,
                      "maximum": 9007199254740991,
                      "type": "integer"
                    },
                    "source_url": {
                      "description": "fetch: an https URL the relay downloads server-side, so the bytes do not enter the model context and cost no tokens. SSRF-guarded: https only, no private, loopback, link-local or metadata hosts, DNS pinned, redirects refused, size-capped and timed out. The downloaded bytes run the same byte-sniff, allowlist, size, quota and scan checks as any upload. This and presign plus finalize are the zero-context paths for real images and media.",
                      "type": "string"
                    },
                    "token_id": {
                      "description": "revoke_token: the token id to revoke.",
                      "type": "string"
                    },
                    "ttl_seconds": {
                      "description": "mint_token: per-token TTL (clamped by scope default).",
                      "exclusiveMinimum": 0,
                      "maximum": 9007199254740991,
                      "type": "integer"
                    }
                  },
                  "required": [
                    "action"
                  ],
                  "type": "object"
                },
                "name": "attachments",
                "title": "Manage Attachments"
              },
              {
                "annotations": {
                  "destructiveHint": true,
                  "idempotentHint": false,
                  "openWorldHint": false,
                  "readOnlyHint": false,
                  "title": "Manage UI Taste Notes"
                },
                "description": "The agent's UI taste notes: a short freeform markdown document of presentation preferences gathered from human feedback, such as 'denser layout' or 'no rounded corners'. Reading it before generating or revising an app is what carries earlier feedback into new output. Actions: get returns the current document; set replaces it in whole, so it does not append; clear discards it. Scoped to presentation preferences rather than general storage.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "action": {
                      "description": "The agent's freeform UI taste notes (markdown) \u2014 presentation preferences learned from human feedback. get: read them before generating an app. set: whole-document replace (taste, non-empty). clear: delete them.",
                      "enum": [
                        "get",
                        "set",
                        "clear"
                      ],
                      "type": "string"
                    },
                    "taste": {
                      "description": "The full markdown notes (required for set; whole-document replace, not append).",
                      "type": "string"
                    }
                  },
                  "required": [
                    "action"
                  ],
                  "type": "object"
                },
                "name": "taste",
                "title": "Manage UI Taste Notes"
              },
              {
                "annotations": {
                  "destructiveHint": true,
                  "idempotentHint": false,
                  "openWorldHint": false,
                  "readOnlyHint": false,
                  "title": "Manage API Key"
                },
                "description": "The calling agent's API key. Actions: list returns key info (agent_id, key_prefix, timestamps); mint creates a sibling API key for the caller's own agent identity with the same scope and ownership and returns its raw value once, which is how an MCP-driven agent hands a CLI or child process a working credential, and the raw value is not retrievable afterwards, the sibling appears in a later list made with it, and the owner can revoke it; revoke destroys the agent's own key, which stops working immediately and cannot be undone, so it requires confirm:true. The relay derives identity from the caller's token, so every action applies to the caller's own agent and mint cannot target another agent's id.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "action": {
                      "description": "The calling agent's API key. list: key info (agent_id, key_prefix, timestamps). mint: mint a NEW sibling API key for YOUR OWN agent identity (same scope/ownership) and return its raw value ONCE, so use it to hand a CLI or child process a working credential; the sibling is a distinct key that shows up in a subsequent `list` made WITH it, the owner can revoke it, and the raw value is never retrievable again. mint always acts on the calling agent, never another agent's id. revoke: self-destruct the agent's OWN key, which stops working immediately and is irreversible (requires confirm:true).",
                      "enum": [
                        "list",
                        "revoke",
                        "mint"
                      ],
                      "type": "string"
                    },
                    "confirm": {
                      "description": "Required (true) for revoke.",
                      "type": "boolean"
                    }
                  },
                  "required": [
                    "action"
                  ],
                  "type": "object"
                },
                "name": "key",
                "title": "Manage API Key"
              },
              {
                "annotations": {
                  "destructiveHint": false,
                  "idempotentHint": false,
                  "openWorldHint": false,
                  "readOnlyHint": false,
                  "title": "Manage Feedback"
                },
                "description": "Feedback to the relay operator. Actions: create records a bug, feature or note with a message and an optional app_id; list returns the agent's own submissions, newest first, paginated by `before`.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "action": {
                      "description": "Feedback to the relay operator. create: submit a bug|feature|note with a message (optional app_id). list: the agent's own submissions, newest first.",
                      "enum": [
                        "create",
                        "list"
                      ],
                      "type": "string"
                    },
                    "app_id": {
                      "description": "Optional app this feedback relates to (create).",
                      "type": "string"
                    },
                    "before": {
                      "description": "list cursor from a prior page's next_before.",
                      "type": "string"
                    },
                    "limit": {
                      "description": "list page size (default 50, max 100).",
                      "exclusiveMinimum": 0,
                      "maximum": 100,
                      "type": "integer"
                    },
                    "message": {
                      "description": "Message body (required for create).",
                      "type": "string"
                    },
                    "type": {
                      "description": "Feedback category (required for create).",
                      "enum": [
                        "bug",
                        "feature",
                        "note"
                      ],
                      "type": "string"
                    }
                  },
                  "required": [
                    "action"
                  ],
                  "type": "object"
                },
                "name": "feedback",
                "title": "Manage Feedback"
              },
              {
                "annotations": {
                  "destructiveHint": false,
                  "idempotentHint": false,
                  "openWorldHint": false,
                  "readOnlyHint": false,
                  "title": "Manage Agent Identity"
                },
                "description": "Agent identity and binding. Actions: whoami returns the resolved relay URL, the active profile and whether a key is configured, with no network call and no secrets; claim binds this agent to a human using a one-shot claim code from their Settings UI, and is one-way; logout clears the locally saved key and profile but does not revoke it on the relay, which is what the `key` tool's revoke action does.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "action": {
                      "description": "Agent identity. whoami: show the resolved relay URL, active profile, and whether a key is configured (no network, no secrets). claim: bind this agent to a human via a one-shot claim code the human generated in their Settings UI (one-way). logout: clear the locally-saved key/profile (does NOT revoke it on the relay \u2014 use the key tool's revoke for that).",
                      "enum": [
                        "whoami",
                        "claim",
                        "logout"
                      ],
                      "type": "string"
                    },
                    "code": {
                      "description": "The one-shot claim code (required for claim).",
                      "type": "string"
                    }
                  },
                  "required": [
                    "action"
                  ],
                  "type": "object"
                },
                "name": "agent",
                "title": "Manage Agent Identity"
              },
              {
                "annotations": {
                  "destructiveHint": false,
                  "idempotentHint": false,
                  "openWorldHint": true,
                  "readOnlyHint": false,
                  "title": "Community Templates"
                },
                "description": "Publishing an app as a community template, installing a template, and, for relay operators, reviewing submissions. Actions: publish, get_config_contract, install, list_pending, get_submission, approve, reject, set_trust_level.\n\npublish captures a live app (html, manifest, the seed rows of its seedOnInstall collections, and listing metadata) into a pending template. It is installable by the returned direct link but is not listed in the public gallery until an operator approves it, and it requires a verified email and no more than a few pending submissions at once. Privacy consequence: an approved template's content and its captured seed rows become public to every platform user, so seed data in a published app must be example-only rather than real personal data. attest_example_only:true records that this was checked. A template may take a per-publisher `slug` (namespaced as <handle>/<slug>) and a semver `version` defaulting to 1.0.0, and a republish under the same slug must bump the version.\n\nget_config_contract reads what a template needs at install, meaning its settings collection and its ordered config and upload steps, by `ref`. install creates a fresh private copy of a template for the caller's owning human, passing answers as `config`, where a 'config' value is a string and an 'upload' value is a pre-uploaded attachment id from the attachments tool.\n\nThe review actions are limited to the relay's configured community reviewers: list_pending returns the queue; get_submission returns a submission's full content by snapshot_id; approve lists it in the gallery, where a re-publish supersedes the app's prior approved version; reject takes a required note that lands in the publisher's app feed.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "action": {
                      "description": "publish: publish one of YOUR apps as a community template (app_id; optional title/description/category/tags). PRIVACY: publishing makes the template content AND the captured seed rows (the LIVE rows of every seedOnInstall collection, captured at publish time) PUBLIC to every platform user once approved. Do NOT publish an app whose seedOnInstall collections hold real personal data (names, emails, addresses, messages, anything private): seed data must be example-only. Pass attest_example_only:true to attest you have checked this. The capture (html + manifest + seed rows) lands PENDING review, installable by its returned direct link but not listed until approved; an ESTABLISHED publisher is fast-tracked (the response's expedited/auto_approved tell you which). get_config_contract: read a template's install-time config contract by `ref` (a namespaced '<handle>/<slug>' or a snapshot id): its settings_collection, ordered config_steps (each with key/kind/required/secret/choices/default), and connect_steps (inbound hooks the app receives on). An 'upload' step wants a file; pre-upload it with the attachments tool (scope agent) and pass its attachment id. After installing a template with connect_steps, run the `ingest` tool's list action on the new app_id to read its freshly provisioned hook URLs, and wire each into the external service. install: install a template by `ref` for YOU (your owning human becomes the owner). Pass `config` as { stepKey: value } from the contract: a 'config' step's value is a string, an 'upload' step's value is a pre-uploaded attachment id. A required step you omit is rejected. Returns the new app's id, slug, and url; installs always create a fresh private copy. list_pending / get_submission / approve / reject / set_trust_level are RELAY-OPERATOR-only review actions: list_pending (the review queue, expedited submissions first), get_submission (a submission's full html+manifest+seedRows plus external_destinations, the hosts it can send data to or pull data from, by snapshot_id), approve (snapshot_id, lists it in the gallery + supersedes the app's prior approved version), reject (snapshot_id + a required note that lands in the publisher's app feed), set_trust_level (promote/demote a publisher by handle: handle + trust_level 'new'|'established').",
                      "enum": [
                        "publish",
                        "get_config_contract",
                        "install",
                        "list_pending",
                        "get_submission",
                        "approve",
                        "reject",
                        "set_trust_level"
                      ],
                      "type": "string"
                    },
                    "app_id": {
                      "description": "publish only. The id of an app YOU own to publish.",
                      "type": "string"
                    },
                    "attest_example_only": {
                      "description": "publish only. Set true to attest that the template content AND the captured seed rows contain NO real personal data. Publishing makes both PUBLIC to every platform user, so seed data (the live rows of your seedOnInstall collections) must be example-only, never real names/emails/addresses/private messages. Recorded and shown to the reviewer; omitting it still publishes but is flagged to the operator as not attested.",
                      "type": "boolean"
                    },
                    "category": {
                      "description": "publish only. Optional single-word category (e.g. 'household').",
                      "type": "string"
                    },
                    "changelog_note": {
                      "description": "publish only. A short note recorded in this version's changelog.",
                      "type": "string"
                    },
                    "config": {
                      "additionalProperties": {},
                      "description": "install only. The install-time answers as { stepKey: value } from the config contract: a 'config' step's value is a string, an 'upload' step's value is a pre-uploaded attachment id. Omit for a template with no config steps.",
                      "propertyNames": {
                        "type": "string"
                      },
                      "type": "object"
                    },
                    "cursor": {
                      "description": "list_pending only. Opaque cursor from a prior next_cursor.",
                      "type": "string"
                    },
                    "derived_from_snapshot_id": {
                      "description": "publish only. Optional remix/fork lineage: the snapshot id this template was derived from.",
                      "type": "string"
                    },
                    "description": {
                      "description": "publish only. Listing blurb (up to 200 chars). Defaults to the manifest description.",
                      "type": "string"
                    },
                    "handle": {
                      "description": "set_trust_level only. The @-handle of the publisher to promote or demote.",
                      "type": "string"
                    },
                    "limit": {
                      "description": "list_pending only. Page size (1..200).",
                      "exclusiveMinimum": 0,
                      "maximum": 200,
                      "type": "integer"
                    },
                    "long_description": {
                      "description": "publish only. Optional long-form description (up to 4000 chars) shown on the template detail page below the short blurb, for readers and search ranking. Plain text: blank lines become paragraphs, and it is escaped (never rendered as raw HTML), so write prose, not markup.",
                      "type": "string"
                    },
                    "note": {
                      "description": "reject only. The required rejection note shown to the publisher (delivered to their app feed).",
                      "type": "string"
                    },
                    "ref": {
                      "description": "get_config_contract/install only. The template to read or install: a namespaced '<handle>/<slug>' or a community snapshot id.",
                      "type": "string"
                    },
                    "setup_steps": {
                      "description": "publish only. Ordered typed setup steps an installing agent follows after install (up to 20). A 'config'/'upload' step may carry a `key` naming a field of the manifest's settingsCollection that its install-time answer is written into; a 'connect' step may carry an `ingestRule` naming a manifest ingest rule it wires up. Read back via get_submission and rendered on the template detail page.",
                      "items": {
                        "properties": {
                          "choices": {
                            "description": "Optional list of allowed values (up to 12).",
                            "items": {
                              "type": "string"
                            },
                            "type": "array"
                          },
                          "default": {
                            "description": "Optional example/default value (<= 200 chars).",
                            "type": "string"
                          },
                          "description": {
                            "description": "Optional longer instruction (<= 300 chars).",
                            "type": "string"
                          },
                          "ingestRule": {
                            "description": "The manifest `ingest` rule this step wires up. Allowed only on a 'connect' step, and optional there; publish rejects a name that x-homespun-manifest.ingest does not declare. Each install mints that rule its own hook URL, which the installer pastes into the external service.",
                            "type": "string"
                          },
                          "key": {
                            "description": "The settings-collection field this answer is written into (letters, digits, '_', up to 64 chars). Required for an 'upload' step, optional for a 'config' step, not allowed on the others. Must name a declared top-level field of the manifest's x-homespun-manifest.settingsCollection; an 'upload' target must be a string-typed field.",
                            "type": "string"
                          },
                          "kind": {
                            "description": "config = set a value; upload = an install-time file/image the app stores as an attachment id; connect = wire up an external data source; seed-data = review/replace captured starter data; note = a plain instruction.",
                            "enum": [
                              "config",
                              "seed-data",
                              "connect",
                              "note",
                              "upload"
                            ],
                            "type": "string"
                          },
                          "label": {
                            "description": "Short step label (<= 80 chars).",
                            "type": "string"
                          },
                          "required": {
                            "description": "Whether this step is required (default false).",
                            "type": "boolean"
                          },
                          "secret": {
                            "description": "Mark a step whose value is sensitive (an API key/token). Its default is MASKED on the public detail page; publish only your own example default, never a real secret.",
                            "type": "boolean"
                          },
                          "valueHint": {
                            "description": "Optional format hint (<= 120 chars).",
                            "type": "string"
                          }
                        },
                        "required": [
                          "kind",
                          "label"
                        ],
                        "type": "object"
                      },
                      "type": "array"
                    },
                    "slug": {
                      "description": "publish only. Optional per-publisher slug (lowercase, 3 to 48 chars, hyphens). Gives the template a namespaced id <your-handle>/<slug>; a republish reuses the slug and must bump the version.",
                      "type": "string"
                    },
                    "snapshot_id": {
                      "description": "Required for get_submission/approve/reject. The submission's snapshot id (from publish's response or list_pending).",
                      "type": "string"
                    },
                    "tags": {
                      "description": "publish only. Up to 6 curation tags.",
                      "items": {
                        "type": "string"
                      },
                      "type": "array"
                    },
                    "title": {
                      "description": "publish only. Listing title (1 to 80 chars). Defaults to the app's manifest name.",
                      "type": "string"
                    },
                    "trust_level": {
                      "description": "set_trust_level only. 'established' fast-tracks the publisher's future submissions through review; 'new' reverts to full review.",
                      "enum": [
                        "new",
                        "established"
                      ],
                      "type": "string"
                    },
                    "version": {
                      "description": "publish only. Semver MAJOR.MINOR.PATCH (default '1.0.0'). A republish under the same slug must be strictly greater than the current version.",
                      "type": "string"
                    }
                  },
                  "required": [
                    "action"
                  ],
                  "type": "object"
                },
                "name": "community",
                "title": "Community Templates"
              },
              {
                "annotations": {
                  "destructiveHint": false,
                  "idempotentHint": false,
                  "openWorldHint": true,
                  "readOnlyHint": false,
                  "title": "Publisher Profile"
                },
                "description": "The caller's community publisher identity: the @-handle and public profile shown in the template gallery. Actions: get returns the profile, including the handle, whether it has been claimed, tenure, and the rating and template counters; claim sets the handle from a lowercase 3-to-32-character string and may be used only once, after which the handle is permanent, and it refuses a handle that is reserved or already taken; update changes display_name, bio or url at any time. claim and update require a verified email. An existing publisher may hold a provisional `maker-...` handle assigned automatically, which claim renames on its one allowed use.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "action": {
                      "description": "get: return YOUR publisher profile (handle, tenure, counters). claim: set your @-handle ONCE (handle arg; lowercase, 3 to 32 chars, permanent after claiming; needs a verified email). update: change your public display_name/bio/url (any of them; needs a verified email).",
                      "enum": [
                        "claim",
                        "get",
                        "update"
                      ],
                      "type": "string"
                    },
                    "bio": {
                      "anyOf": [
                        {
                          "type": "string"
                        },
                        {
                          "type": "null"
                        }
                      ],
                      "description": "update only. Short public bio (up to 500 chars); null clears it."
                    },
                    "display_name": {
                      "anyOf": [
                        {
                          "type": "string"
                        },
                        {
                          "type": "null"
                        }
                      ],
                      "description": "update only. Public display name (up to 80 chars); null clears it."
                    },
                    "handle": {
                      "description": "claim only. The lowercase @-handle to claim (^[a-z0-9](?:[a-z0-9-]{1,30}[a-z0-9])$). Permanent once claimed.",
                      "type": "string"
                    },
                    "url": {
                      "anyOf": [
                        {
                          "type": "string"
                        },
                        {
                          "type": "null"
                        }
                      ],
                      "description": "update only. Public http(s) URL (up to 200 chars); null clears it."
                    }
                  },
                  "required": [
                    "action"
                  ],
                  "type": "object"
                },
                "name": "publisher",
                "title": "Publisher Profile"
              },
              {
                "annotations": {
                  "destructiveHint": true,
                  "idempotentHint": false,
                  "openWorldHint": true,
                  "readOnlyHint": false,
                  "title": "Community Reviews"
                },
                "description": "Ratings and reviews of community templates, responses from a template's own publisher, and, for relay operators, moderation. Actions: create leaves a 1-to-5 star rating and an optional written body on a template the caller has installed, identifying it by `template` (\\\"<handle>/<slug>\\\") or by `handle` plus `slug`, and requires a verified email; each install yields exactly one review, and the aggregate carries across template versions. A body containing a link or a contact email is held automatically for a moderator before it appears. respond replies to a review of the caller's own template line (review_id plus response, or null to clear it), with one editable response per review. report flags a review for the relay's moderators (review_id plus reason) and is deduped per account. remove and unhold are limited to the relay's configured community reviewers: remove takes a review down and adjusts the rating aggregate, and unhold publishes a previously held review into the aggregate.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "action": {
                      "description": "create: leave a star rating (1..5) and optional body on a community template YOU have installed (identify it by `template` \"<handle>/<slug>\" or by `handle`+`slug`); requires a verified email, and one review per install. A body containing a link or contact email is auto-held for a moderator before it shows. respond: reply to a review of one of YOUR OWN templates (review_id + response; null clears it). report: flag a review for the relay's moderators (review_id + reason; one report per account). remove / unhold are RELAY-OPERATOR-only moderation actions on a review_id: remove takes a review down (adjusting the aggregate), unhold publishes a previously auto-held review.",
                      "enum": [
                        "create",
                        "respond",
                        "report",
                        "remove",
                        "unhold"
                      ],
                      "type": "string"
                    },
                    "body": {
                      "description": "create only. Optional written review (up to 2000 chars).",
                      "type": "string"
                    },
                    "handle": {
                      "description": "create only. Publisher handle (with `slug`), an alternative to `template`.",
                      "type": "string"
                    },
                    "reason": {
                      "description": "report only. Why you are reporting this review (up to 500 chars).",
                      "type": "string"
                    },
                    "response": {
                      "anyOf": [
                        {
                          "type": "string"
                        },
                        {
                          "type": "null"
                        }
                      ],
                      "description": "respond only. The publisher's public response (up to 2000 chars); null clears it."
                    },
                    "review_id": {
                      "description": "Required for respond/report/remove/unhold. The review's id.",
                      "type": "string"
                    },
                    "slug": {
                      "description": "create only. Per-publisher slug (with `handle`).",
                      "type": "string"
                    },
                    "stars": {
                      "description": "create only. Star rating, an integer 1 to 5.",
                      "maximum": 5,
                      "minimum": 1,
                      "type": "integer"
                    },
                    "template": {
                      "description": "create only. The namespaced template id <handle>/<slug> to review.",
                      "type": "string"
                    }
                  },
                  "required": [
                    "action"
                  ],
                  "type": "object"
                },
                "name": "review",
                "title": "Community Reviews"
              },
              {
                "annotations": {
                  "openWorldHint": false,
                  "readOnlyHint": true,
                  "title": "Get Skill Guide"
                },
                "description": "The relay's SKILL.md, a generated guide to the Homespun workflow covering events versus records, the schema grammars and the poll loop. Needs no API key. Useful when working out how the other tools fit together, or to refresh a cached copy. Pass version_only:true to return just the relay's skill version string, which is enough to tell whether a cached copy is current.",
                "execution": {
                  "taskSupport": "forbidden"
                },
                "inputSchema": {
                  "$schema": "http://json-schema.org/draft-07/schema#",
                  "properties": {
                    "version_only": {
                      "description": "If true, return only the relay's current skill version string instead of the full SKILL.md markdown.",
                      "type": "boolean"
                    }
                  },
                  "type": "object"
                },
                "name": "get_skill",
                "title": "Get Skill Guide"
              }
            ]
          }
        },
        "requested_protocol_version": "2025-03-26",
        "resumed": true,
        "session_id_present": true,
        "transport": "streamable-http",
        "url": "https://homespun.dev/mcp"
      },
      "latency_ms": 235.99,
      "status": "ok"
    },
    "step_up_auth_probe": {
      "details": {
        "auth_required_checks": [],
        "broad_scopes": [],
        "challenge_headers": [],
        "minimal_scope_documented": true,
        "oauth_present": true,
        "scope_specificity_ratio": 0.5,
        "step_up_signals": [],
        "supported_scopes": [
          "homespun"
        ]
      },
      "latency_ms": null,
      "status": "ok"
    },
    "tool_snapshot_probe": {
      "details": {
        "reason": "no_tools"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "tools_list": {
      "details": {
        "error": "Client error '400 Bad Request' for url 'https://homespun.dev/mcp'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400",
        "headers": {
          "content-type": "application/json; charset=utf-8",
          "strict-transport-security": "max-age=31536000"
        },
        "http_status": 400,
        "payload": {},
        "url": "https://homespun.dev/mcp"
      },
      "latency_ms": 393.38,
      "status": "error"
    },
    "transport_compliance_probe": {
      "details": {
        "bad_protocol_error": null,
        "bad_protocol_headers": {
          "content-type": "application/json; charset=utf-8"
        },
        "bad_protocol_payload": {
          "error": {
            "code": -32000,
            "message": "Bad Request: Unsupported protocol version: 1999-99-99 (supported versions: 2025-11-25, 2025-06-18, 2025-03-26, 2024-11-05, 2024-10-07)"
          },
          "id": null,
          "jsonrpc": "2.0"
        },
        "bad_protocol_status_code": 400,
        "delete_error": null,
        "delete_status_code": 200,
        "expired_session_error": null,
        "expired_session_status_code": 404,
        "issues": [
          "missing_protocol_header"
        ],
        "last_event_id_visible": false,
        "protocol_header_present": false,
        "requested_protocol_version": "2025-03-26",
        "session_id_present": true,
        "transport": "streamable-http"
      },
      "latency_ms": 263.74,
      "status": "warning"
    },
    "utility_coverage_probe": {
      "details": {
        "completions": {
          "advertised": false,
          "live_probe": "not_executed",
          "sample_target": null
        },
        "initialize_capability_keys": [
          "prompts",
          "resources",
          "tools"
        ],
        "pagination": {
          "metadata_signal": false,
          "next_cursor_methods": [],
          "supported": false
        },
        "tasks": {
          "advertised": false,
          "http_status": 401,
          "probe_status": "auth_required"
        }
      },
      "latency_ms": 132.15,
      "status": "ok"
    }
  },
  "failures": {
    "openid_configuration": {
      "error": "Client error '404 Not Found' for url 'https://homespun.dev/.well-known/openid-configuration'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
      "url": "https://homespun.dev/.well-known/openid-configuration"
    },
    "server_card": {
      "error": "Client error '404 Not Found' for url 'https://homespun.dev/.well-known/mcp/server-card.json'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
      "url": "https://homespun.dev/.well-known/mcp/server-card.json"
    },
    "tools_list": {
      "error": "Client error '400 Bad Request' for url 'https://homespun.dev/mcp'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400",
      "headers": {
        "content-type": "application/json; charset=utf-8",
        "strict-transport-security": "max-age=31536000"
      },
      "http_status": 400,
      "payload": {},
      "url": "https://homespun.dev/mcp"
    }
  },
  "remote_url": "https://homespun.dev/mcp",
  "server_card_payload": null,
  "server_identifier": "awesome-homespunapps/homespun"
}