Skip to content
ProtocolProbe
Explore

MCP servers › io.github.kapaweb › kapaweb-deploy

MCP server · registry snapshot 2026-10-23 · last tested 2026-10-23

io.github.kapaweb/kapaweb-deploy

Deploy websites, PHP apps and WordPress to kapaweb hosting (DirectAdmin, Plesk preview) from Claude — the publisher's description

4 of 5 record checks metRead-only · tools listed 2026-10-23Topic: cloud-and-devops · AI-classifiedversion 0.8.0JavaScriptstandard input/output60 tools

Summary

io.github.kapaweb/kapaweb-deploy is a local MCP server listed in the official MCP registry at version 0.8.0. On 2026-10-23 ProtocolProbe started its published package in an isolated sandbox in read-only mode and read its inventory: 60 tools, 0 resources and 0 prompts.

Record checks

4 of 5 record checks met · 4 do not apply

  • met: Registry entry is active and says how to run it
  • met: Source repository link opens
  • met: Repository is not archived
  • met: Code pushed to the repository in the 90 days before our check
  • not met: Repository publishes a security policy (SECURITY.md)
  • not applicable: Package names its licence with a standard (SPDX) identifier
  • not applicable: The version the registry lists can be installed and is not withdrawn
  • not applicable: npm package carries build provenance (attestation)
  • not applicable: No known critical or high advisory in the package or its dependencies
  • Not ranked by downloads: not an npm or PyPI package
  • Not ranked by stars: 0 stars (ranked from 10)

From public records, not a safety rating. Each check with its reason · Is it safe to install?

Key facts

Runs
local package
Transport
standard input/output
Package
MCP bundle
Repository
public
Tools
60
Described as changing data
37 of 60 toolsAI-classified
Mainly works on
files and code on the machine it runs on; cloud accounts, servers or DevOps toolsAI-classified
Topic
cloud-and-devopsAI-classified
Last tested
2026-10-23

Add to your client

Worth knowing before you connect it

  • 37 tools are described as changing something (connect, disconnect, set_php_version, …): our AI model's reading of the descriptions, not something we tested. We did not call them.

Each line comes from a section below, with its source and date.

How fresh this is

Live-tested
yes, a real session (not a text-only review)
Last tested
2026-10-23
Mode
read-only (no tool calls)
Latest version
0.8.0, published 2026-10-21 (registry, as of the 2026-10-23 snapshot)
First listed version
2026-10-09 (earliest version still in the registry; older removed versions would be earlier)
Version history
2 versions listed, 2026-10-09 to 2026-10-21; 2 in the 90 days before the 2026-10-23 snapshot.
Most recent 2 versions
  • 0.8.0 · 2026-10-21
  • 0.7.0 · 2026-10-09
(versions still listed in the registry only)
Registry data
snapshot 2026-10-23
Package and repository
checked 2026-10-23
Engine
mcp-runtime-engine@0.1.0 · sdk@1.32.0

Changes since the last refresh

New in the registry: not in the list of 2026-10-04, listed on 2026-10-23 with version 0.8.0 (published 2026-10-21).

Source: the official MCP Registry list on 2026-10-04 and on 2026-10-23.

What it is

What does this server offer?

Observed inventory
60tools
0resources
0prompts

What it mainly works on, as our AI model read its tool descriptions: files and code on the machine it runs on; cloud accounts, servers or DevOps tools.

37 of 60 tools are described as changing something (creating, editing, deleting, sending or running). For 1 the reading was uncertain, so no mark is shown.

  • playbookon 1 other serverreads or searches

    “Returns the kapaweb deploy playbook: how to deploy static sites, PHP apps and WordPress to kapaweb hosting, what to check first, and the rules to follow.”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    Takes no inputs.

  • connecton 1,144 other serversdescribed as changing data

    “Starts the one-time sign-in.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world no

    4 inputs
    • forceboolean“Start again even if an account is already connected: to ADD another hosting account, to renew a key, or although a sign-in page is still open (only when the us…”
    • accountstring“Only to sign in again to one account whose key expired: its username (or username@panel).”
    • show_urlboolean“Only if the user says that no page appeared: also return the page address so they can open it by hand.”
    • wait_secondsinteger“Also wait up to this many seconds (at most 55) for the user to finish signing in, and return as soon as they have.”
  • disconnecton 13 other serversdeletesdescribed as changing data

    “Removes the saved connection and login key of ONE hosting account from this computer (with several accounts connected, say which with `account`; the others stay connected).”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    1 input
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • account_infoon 4 other serversreads or searches

    “Shows whether the connector is connected and, if so, the hosting account: username, domains, package limits (disk, databases, subdomains, inodes, memory), feature flags (ssh, cron, ...), the server I…”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    2 inputs
    • accountstring“One connected account, by username (or username@panel), to see it in full.”
    • wait_secondsinteger“While the user is signing in (after connect), wait up to this many seconds (at most 55) and return as soon as they have finished.”
  • usageon 16 other serversreads or searches

    “Used vs limit for domains, subdomains, databases, inodes, bandwidth, plus database and mailbox size.”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    1 input
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • disk_usageon 5 other serversreads or searches

    “Immediate and accurate size of a folder or file (default: the whole account, "/").”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    2 inputs
    • pathstring“Path inside the account, e.g.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • php_versionsreads or searches

    “Lists the PHP versions the server offers RIGHT NOW for the domain and which one is selected.”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    2 inputs, 1 required
    • domainstringrequired“The domain or subdomain.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • set_php_versioncreates or changes datadescribed as changing data

    “Selects one of the versions returned by php_versions (pass its text, e.g.”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    3 inputs, 2 required
    • domainstringrequired“The domain or subdomain.”
    • versionstringrequired“Exactly one of the version names from php_versions.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • php_settingsreads or searches

    “Shows the current PHP setting overrides of the domain and the list of settings the panel allows you to change (for example memory_limit, max_execution_time, upload_max_filesize, post_max_size, displa…”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    2 inputs, 1 required
    • domainstringrequired“The domain.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • php_settings_setcreates or changes datadescribed as changing data

    “Sets PHP setting overrides, e.g.”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    3 inputs, 2 required
    • domainstringrequired“The domain.”
    • settingsobjectrequired“Setting name to value.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • php_settings_removedeletesdescribed as changing data

    “Removes overrides so the PHP version's own values apply again.”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    3 inputs, 2 required
    • domainstringrequired“The domain.”
    • namesarrayrequired“Setting names to remove.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • php_probedescribed as changing data

    “Writes a temporary probe file with a random name into the web root, requests it once, and deletes it again (also on failure).”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    3 inputs, 1 required
    • domainstringrequired“The domain or subdomain.”
    • resolve_ipstring“Server IP to connect to instead of DNS (only needed before DNS points here).”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
Show 48 more tools
  • logson 11 other serversreads or searches

    “Returns the last lines of the domain's Apache error log (type "error", where PHP warnings and fatals appear as "AH01071: Got error 'PHP message: ...'") or access log (type "log").”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    5 inputs, 1 required
    • domainstringrequired“The domain.”
    • typestring“"error" (default) or "log"; Plesk accounts also "node".”
    • tailinteger“How many last lines (default 150, max 500).”
    • containsstring“Only lines containing this text (case-insensitive).”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • list_fileson 47 other serversreads or searches

    “Lists files and folders.”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    8 inputs, 1 required
    • pathstringrequired“Folder path.”
    • limitinteger“Entries per call (default 300, max 5000).”
    • offsetinteger“Skip this many entries (default 0): the next_offset of the previous answer.”
    • name_containsstring“Only entries whose name contains this text (not case sensitive).”
    • typestring“Only this kind of entry.”
    • sortstring“Order (default name).”
    • summaryboolean“true: counts, total size, extensions, biggest and newest instead of the entries (default false).”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • read_fileon 35 other serversreads or searches

    “Reads a small text file (default up to 60 KB), e.g.”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    3 inputs, 1 required
    • pathstringrequired“File path.”
    • max_bytesinteger“Maximum bytes (default 60000, max 90000).”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • write_fileon 17 other serverscreates or changes datadescribed as changing data

    “Creates or overwrites a small file.”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    5 inputs, 2 required
    • pathstringrequired“File path.”
    • contentstringrequired“File content: plain text, or the file's base64 when encoding is "base64" (plain or URL-safe alphabet, with or without padding).”
    • encodingstring“"text" (default) or "base64" for a binary file (image, PDF, ...).”
    • permstring“Octal permissions, default "0644".”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • mkdiron 1 other servercreates or changes datadescribed as changing data

    “Creates a folder (and missing parents).”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    2 inputs, 1 required
    • pathstringrequired“Folder path.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • deleteon 12 other serversdeletesdescribed as changing data

    “Deletes files or folders (with everything inside).”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    3 inputs, 1 required
    • pathsarrayrequired“Paths to delete.”
    • trashboolean“Move to the File Manager trash instead of deleting for good (default true).”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • chmodon 1 other servercreates or changes datadescribed as changing data

    “Changes permissions.”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    3 inputs, 2 required
    • pathsarrayrequired“Paths.”
    • modestringrequired“Octal permissions, e.g.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • moveon 6 other serverscreates or changes datadescribed as changing data

    “Moves or renames a file or folder.”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    4 inputs, 2 required
    • sourcestringrequired“Current path.”
    • destinationstringrequired“New path.”
    • overwriteboolean“Overwrite an existing destination (default false).”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • deployon 17 other serversdescribed as changing data

    “Deploys a folder from THIS computer (the build output, e.g.”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    13 inputs, 2 required
    • source_dirstringrequired“Absolute path of the build output folder on the user's computer (for example /home/me/site/dist or C:\Users\me\site\dist).”
    • domainstringrequired“Target domain or subdomain.”
    • subfolderstring“Optional folder inside the web root, e.g.”
    • modestring“"update" (default: overlay and remove stale files from the previous connector deploy) or "replace" (clear the web root first).”
    • confirm_replaceboolean“Required for mode "replace", after the user agreed.”
    • keeparray“With mode "replace": paths that must survive (e.g.”
    • excludearray“Extra patterns not to upload, e.g.”
    • force_includearray“Patterns to upload although they are excluded by default (e.g.”
    • backupstring“"full" (default), "skip_uploads" (a partial backup that leaves out wp-content and data folders such as uploads, storage, media, files, cache; with mode "replac…”
    • confirm_no_backupboolean“Required for backup "none", after the user agreed.”
    • dry_runboolean“Only report what would happen.”
    • target_pathstring“Plesk accounts only: deploy to this folder of the subscription instead of the domain's web root, for example /private/app for a Node.js app whose files must no…”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • rollbackon 11 other serversdescribed as changing data

    “Restores the latest backup (or a named one) of the domain's web root from /tmp/kw-deploy.”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    5 inputs, 1 required
    • domainstringrequired“The domain.”
    • subfolderstring“The subfolder that was deployed, if any.”
    • backupstring“Backup file name from an earlier deploy or rollback result (default: the latest real backup).”
    • target_pathstring“Plesk accounts only: the folder that was deployed with target_path.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • check_urlon 18 other serversreads or searches

    “Requests a URL on one of the account's domains, or on osotir.org, dsamoodle.de, t-support.gr or zebs.ch, and returns status, content type, redirect target and the first part of the body.”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

    4 inputs, 1 required
    • urlstringrequired“Full URL, e.g.”
    • resolve_ipstring“Connect to this IP instead of using DNS.”
    • methodstring“GET (default) or HEAD.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • db_listreads or searches

    “Lists the account's databases with size and table count, and the database limit.”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    2 inputs
    • domainstring“Plesk accounts only: the subscription, when the login has several.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • db_createcreates or changes datadescribed as changing data

    “Creates a MySQL/MariaDB database and a user of the same name (<username>_<suffix>) with a strong random password, utf8mb4, reachable from localhost only.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world no

    4 inputs, 1 required
    • suffixstringrequired“Short name after the username prefix, lowercase letters, digits and underscore (max 30), e.g.”
    • typestring“Plesk accounts only: "mysql" (default) or "postgresql".”
    • domainstring“Plesk accounts only: the subscription, when the login has several.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • db_importcreates or changes datadescribed as changing data

    “Imports a .sql or .sql.gz file from the user's computer into a database of the account.”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    6 inputs, 2 required
    • databasestringrequired“Database name.”
    • filestringrequired“Absolute path of the dump on this computer.”
    • cleanboolean“Empty the database first (default false).”
    • confirm_cleanboolean“Required with clean:true, after the user agreed to destroy the current data.”
    • domainstring“Plesk accounts only: the subscription, when the login has several.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • db_export

    “Exports a database as SQL to a gzip-compressed file on THIS computer (default folder: <connector settings>/exports; pass folder to choose another) and returns its path.”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    4 inputs, 1 required
    • databasestringrequired“Database name.”
    • folderstring“Absolute path of a folder on this computer to put the file in (created if missing).”
    • domainstring“Plesk accounts only: the subscription, when the login has several.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • db_dropdeletesdescribed as changing data

    “Deletes a database and its user, but ONLY if this connector created it.”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    4 inputs, 2 required
    • databasestringrequired“Database name.”
    • confirm_namestringrequired“Repeat the database name to confirm.”
    • domainstring“Plesk accounts only: the subscription, when the login has several.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • secret_setcreates or changes datadescribed as changing data

    “Stores a secret you already have, for example a WordPress Application Password you created through its REST API, in this computer's protected storage, under a short name you choose.”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    3 inputs, 2 required
    • namestringrequired“Short name to store it under, lowercase letters, digits, underscore, hyphen and dot (max 64), e.g.”
    • valuestringrequired“The secret value to store.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • secret_liston 4 other serversreads or searches

    “Lists the names of secrets stored with secret_set on this computer, never the values.”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    1 input
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • secret_deleteon 2 other serversdeletesdescribed as changing data

    “Removes a secret stored with secret_set from this computer, so its {{KW_SECRET:<name>}} placeholder stops working.”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    2 inputs, 1 required
    • namestringrequired“The name given to secret_set.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • ssl_statusreads or searches

    “Lists the domain's TLS certificates and the DNS names that still have none.”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    2 inputs, 1 required
    • domainstringrequired“The domain.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • ssl_dry_runreads or searches

    “Simulates issuing the certificate and lists what would fail (dnsNamesFailedChallenge = names whose DNS does not point here yet).”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    2 inputs, 1 required
    • domainstringrequired“The domain.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • ssl_issuedescribed as changing data

    “Issues the Let's Encrypt certificate for the domain.”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    2 inputs, 1 required
    • domainstringrequired“The domain.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • subdomain_listreads or searches

    “Lists the subdomains of a domain.”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    2 inputs, 1 required
    • domainstringrequired“The main domain.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • subdomain_createcreates or changes datadescribed as changing data

    “Creates a subdomain with its own web root (/domains/<sub>.<domain>/public_html) and its own PHP selector.”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    3 inputs, 2 required
    • domainstringrequired“The main domain.”
    • subdomainstringrequired“Subdomain label, e.g.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • subdomain_deletedeletesdescribed as changing data

    “Deletes a subdomain INCLUDING its files, but ONLY a subdomain this connector created (like db_drop), and only with the user's agreement.”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    4 inputs, 3 required
    • domainstringrequired“The main domain.”
    • subdomainstringrequired“Subdomain label.”
    • confirmbooleanrequired“Must be true.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • cron_liston 1 other serverreads or searches

    “Lists the account's cron jobs.”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    1 input
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • cron_createon 1 other servercreates or changes datadescribed as changing data

    “Creates a cron job.”

    Publisher declares: read-only no · destructive no · idempotent no · open-world no

    7 inputs, 6 required
    • minutestringrequired“Cron field, e.g.”
    • hourstringrequired“Cron field.”
    • dayofmonthstringrequired“Cron field.”
    • monthstringrequired“Cron field.”
    • dayofweekstringrequired“Cron field.”
    • commandstringrequired“The command line (single line).”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • cron_deletedeletesdescribed as changing data

    “Deletes a cron job by the id shown in cron_list.”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    2 inputs, 1 required
    • idstringrequired“Job id from cron_list.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • node_statuson 2 other serversreads or searches

    “Shows which domains of the Plesk account have Node.js switched on, or, with `domain`, the Node.js application settings of that domain (enabled, Node version, application root, startup file, mode, pac…”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    2 inputs
    • domainstring“One domain, for its application settings.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • node_versionsreads or searches

    “Lists the Node.js versions (and package managers) this Plesk offers for a domain, and which one is in use.”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    2 inputs
    • domainstring“The domain (default: the one Node.js is on, or the only subscription).”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • node_enablecreates or changes datadescribed as changing data

    “Enables (default) or disables the Node.js application of a domain, and returns its settings.”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    3 inputs, 1 required
    • domainstringrequired“A domain of this Plesk account (for example example.gr).”
    • enabledboolean“true (default) to enable, false to disable”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • node_configurecreates or changes datadescribed as changing data

    “Changes the Node.js settings of a domain: Node version ("20", "21.7" or a full version, as node_versions lists), package manager (npm, yarn or pnpm), document root, application root (where package.js…”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    8 inputs, 1 required
    • domainstringrequired“A domain of this Plesk account (for example example.gr).”
    • versionstring“Node version, e.g.”
    • package_managerstring“npm, yarn or pnpm.”
    • document_rootstring“Document root inside the domain, for example /httpdocs/public.”
    • application_rootstring“Application root inside the domain, where package.json is, for example /httpdocs/app.”
    • startup_filestring“Startup file relative to the application root, for example app.js.”
    • modestring“production or development.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • node_installruns code or commandsdescribed as changing data

    “Runs the package install (npm install / yarn install) for the application of a domain, as Plesk's "NPM install" button does, and waits for it to finish.”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    2 inputs, 1 required
    • domainstringrequired“A domain of this Plesk account (for example example.gr).”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • node_runruns code or commandsdescribed as changing data

    “Runs `npm <command>` (or yarn/pnpm) in the application root of a domain and returns its exit code and output, for example command "ls", "audit", "test" or "run build" (a script of package.json).”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    4 inputs, 1 required
    • domainstringrequired“A domain of this Plesk account (for example example.gr).”
    • commandstring“What to give the package manager, e.g.”
    • package_managerstring“npm, yarn or pnpm (default: the one set for the application).”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • node_envreads or searches

    “Lists the custom environment variables of the application of a domain.”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    2 inputs, 1 required
    • domainstringrequired“A domain of this Plesk account (for example example.gr).”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • node_env_setcreates or changes datadescribed as changing data

    “Sets (adds or changes) and removes custom environment variables of the application of a domain; the others stay.”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    4 inputs, 1 required
    • domainstringrequired“A domain of this Plesk account (for example example.gr).”
    • setobject“Variables to set: { "NODE_ENV": "production", "DB_PASSWORD": "{{KW_DB_PASSWORD:app_db}}" }.”
    • removearray“Names of variables to remove.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • node_restartcreates or changes datadescribed as changing data

    “Restarts the Node.js application of a domain (for example after a deploy, an install or a configuration change).”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    2 inputs, 1 required
    • domainstringrequired“A domain of this Plesk account (for example example.gr).”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • files_liston 1 other serverreads or searches

    “Lists a folder of the Plesk subscription: name, type, size, permissions, modified.”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    9 inputs
    • pathstring“Folder path, for example /httpdocs.”
    • limitinteger“Entries per call (default 300, max 5000).”
    • offsetinteger“Skip this many entries (default 0): the next_offset of the previous answer.”
    • name_containsstring“Only entries whose name contains this text (not case sensitive).”
    • typestring“Only this kind of entry.”
    • sortstring“Order (default name).”
    • summaryboolean“true: counts, total size, extensions, biggest and newest instead of the entries (default false).”
    • domainstring“The subscription (domain name), when the Plesk login has more than one.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • files_readon 1 other serverreads or searches

    “Reads a small text file (default up to 60 KB), e.g.”

    Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

    4 inputs, 1 required
    • pathstringrequired“File path.”
    • max_bytesinteger“Maximum bytes (default 60000, max 90000).”
    • domainstring“The subscription (domain name), when the Plesk login has more than one.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • files_writeon 1 other servercreates or changes datadescribed as changing data

    “Creates or overwrites a small file (parent folders are created).”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    6 inputs, 2 required
    • pathstringrequired“File path.”
    • contentstringrequired“File content: plain text, or the file's base64 when encoding is "base64".”
    • encodingstring“"text" (default) or "base64".”
    • modestring“Octal permissions, default "0644".”
    • domainstring“The subscription (domain name), when the Plesk login has more than one.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • files_mkdircreates or changes datadescribed as changing data

    “Creates a folder (and missing parents).”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    3 inputs, 1 required
    • pathstringrequired“Folder path.”
    • domainstring“The subscription (domain name), when the Plesk login has more than one.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • files_deleteon 1 other serverdeletesdescribed as changing data

    “Deletes files or folders (with everything inside).”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    4 inputs, 1 required
    • pathsarrayrequired“Paths to delete.”
    • trashboolean“Move to the trash instead of deleting for good (default true).”
    • domainstring“The subscription (domain name), when the Plesk login has more than one.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • files_movecreates or changes datadescribed as changing data

    “Moves or renames a file or folder.”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    5 inputs, 2 required
    • sourcestringrequired“Current path.”
    • destinationstringrequired“New path.”
    • overwriteboolean“Replace an existing destination (the old one goes to the trash).”
    • domainstring“The subscription (domain name), when the Plesk login has more than one.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • files_chmodcreates or changes datadescribed as changing data

    “Changes permissions.”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    5 inputs, 2 required
    • pathsarrayrequired“Paths.”
    • modestringrequired“Octal permissions, e.g.”
    • recursiveboolean“Apply to everything inside a folder too (default false).”
    • domainstring“The subscription (domain name), when the Plesk login has more than one.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • files_archivecreates or changes datadescribed as changing data

    “Zips files/folders of one folder on the server.”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    5 inputs, 3 required
    • folderstringrequired“The folder the items are in.”
    • namesarrayrequired“Names (not paths) of the files/folders inside it.”
    • namestringrequired“Name of the zip, without .zip.”
    • domainstring“The subscription (domain name), when the Plesk login has more than one.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • files_extractcreates or changes datadescribed as changing data

    “Unpacks a .zip that is in a folder into that same folder, replacing files of the same name (on DirectAdmin always; into a web root itself only with deploy, so that its .htaccess keeps the firewall bl…”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    5 inputs, 2 required
    • folderstringrequired“The folder the archive is in (and is unpacked into).”
    • archivestringrequired“Archive file name.”
    • overwriteboolean“Replace existing files (default true).”
    • domainstring“The subscription (domain name), when the Plesk login has more than one.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • files_uploadcreates or changes datadescribed as changing data

    “Uploads ONE file from this computer to a folder of the subscription, streamed from disk (any size).”

    Publisher declares: read-only no · destructive yes · idempotent no · open-world no

    7 inputs, 2 required
    • sourcestringrequired“Absolute path of the file on this computer.”
    • folderstringrequired“Folder on the server (created if missing).”
    • namestring“File name on the server (default: the local name).”
    • modestring“Octal permissions, default "0644".”
    • overwriteboolean“Replace an existing file (default true).”
    • domainstring“The subscription (domain name), when the Plesk login has more than one.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”
  • files_downloadreads or searches

    “Downloads ONE file of the account into a folder on this computer, streamed to disk (any size).”

    Publisher declares: read-only no · destructive no · idempotent yes · open-world no

    4 inputs, 2 required
    • pathstringrequired“File path on the server.”
    • folderstringrequired“Absolute path of a folder on this computer (created if missing).”
    • domainstring“The subscription (domain name), when the Plesk login has more than one.”
    • accountstring“Which connected hosting account this is for: its username (or username@panel).”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

How well are its tools described?

Features #4 and #5

How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.

Descriptions

AI reading of each description

Says what the tool does
100% of 60 tools
Says what it returns
43% of 60 tools
States limits, defaults or errors
11% of 53 tools
Says when to use it
67% of 60 tools
Items covered per tool
2.3 of 4 on average

Counted from the listing

Parameters with a description
100% of 218
Tools with a description
100% of 60
Typical description length
324 characters

The tool set

Counted from the listing

Tools
60
Size of the list
about 16,308 tokens for an agent to load (characters ÷ 4)
Naming
49 of 60 names use snake_case

AI reading: easy to mix up

No pair found.

The AI items cover 60 of 60 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.

How do I add it to my client?

Config from the registry entry
  • No config: the MCP bundle is a file to install in a client that supports bundles, not a command.

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Does the registry listing match what we found?

Feature #6

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.

Registry saysWe foundResultSource · date
Published package can be startedStarted and answeredmatchesour test · 2026-10-23
Repository github.com/kapaweb/kapaweb-deployOpens publiclymatchesapi.github.com · 2026-10-23

Who made it?

Feature #7 · lineage

Facts about the publisher. We do not turn them into a trust score.

Namespace
io.github.kapaweb
GitHub owner
a personal account (kapaweb)
Repository
github.com/kapaweb/kapaweb-deploy
Stars
0
Repository age
0–30 days
Last push
0–30 days ago
Archived
no
Security policy
none found (we looked for SECURITY.md in the repository and in its owner’s .github repository)

Source: the registry entry and api.github.com · 2026-10-23; security policy read from GitHub · 2026-10-23.

Publish this server? Run these checks against it yourself before release, from your own machine: a server the command starts, or your own server at its URL after a one-time proof that you control it: npx protocolprobe-selftest.

Choosing

Record checks

Public records · not a safety rating

4 of 5 record checks met · 4 do not apply

  • Not ranked by downloads: not an npm or PyPI package
  • Not ranked by stars: 0 stars (ranked from 10)
  • MetRegistry entry is active and says how to run itActive, with a package or a remote address.
  • MetSource repository link opensThe linked GitHub repository is public.
  • MetRepository is not archivedNot archived.
  • MetCode pushed to the repository in the 90 days before our checkLast push 0-30 days before our check.
  • Not metRepository publishes a security policy (SECURITY.md)No SECURITY.md in the places GitHub reads it from.
  • Does not applyPackage names its licence with a standard (SPDX) identifierNot an npm or PyPI package.
  • Does not applyThe version the registry lists can be installed and is not withdrawnNot an npm or PyPI package.
  • Does not applynpm package carries build provenance (attestation)PyPI packages have no npm-style attestation.
  • Does not applyNo known critical or high advisory in the package or its dependenciesNot an npm or PyPI package.

Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-23. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards

Common questions about io.github.kapaweb/kapaweb-deploy

Answered from the data above

Is io.github.kapaweb/kapaweb-deploy safe to install?

We do not rate servers as safe or unsafe. 4 of its 5 applicable record checks are met (facts from public records, each listed on this page). What the records show: Its source repository opens publicly. Its repository had a push in the last 90 days. 37 of its tools describe changing data (our AI model's reading of the descriptions). These are facts with their sources on this page, not a safety guarantee, and we did not run its tools.

Has io.github.kapaweb/kapaweb-deploy been security tested?

Partly. 2 of the 12 checks that apply to it were exercised. We started the package in an isolated sandbox and read what it declares, but this test round was read-only, so its tools were not called. No security verdict is published before verification.

What can io.github.kapaweb/kapaweb-deploy do?

It lists 60 tools. In our AI model's reading of their descriptions (two runs had to agree, nobody checked it by hand), they include tools that read or search, create or change data, delete and run code or commands. We did not call any tool, so this describes the text, not the behaviour.

Can io.github.kapaweb/kapaweb-deploy change or delete data?

37 of its tools say in their description that they create, edit, delete, send or run something (our AI model's reading). We did not call any tool, so we cannot say what actually happens.

Does io.github.kapaweb/kapaweb-deploy publish a security policy?

We found no SECURITY.md in its repository (root, .github/ or docs/) or in its owner's .github repository.

Where is the source code of io.github.kapaweb/kapaweb-deploy?

In github.com/kapaweb/kapaweb-deploy, which opens publicly.

Found this page useful?

Anonymous · no sign-in

A quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.

Similar servers

Same topic · AI-read

Active servers whose topic is also “cloud-and-devops” and that have at least one tool of the same kind; most kinds in common first, then most GitHub stars. The topic and the tool kinds are an AI model's reading of the publishers' descriptions, not checked by hand. Similar is not a recommendation.

Compare with another server

Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.

Security testing

What did we test, and what did we leave out?

18 checks · features #1, #2

Not probed (read-only run)

We started the package in an isolated sandbox and read what it declares, but this test round was read-only, so its tools were not called. No security score is given; a check we did not run is never counted as passed.

The 18 checks at a glanceour test · 2026-10-23
  1. Inventory: exercised
  2. Hidden instructions: exercised
  3. Real execution: not run · our policy
  4. Secret leak: not run · nothing to check it against
  5. Internal addresses: not run · our policy
  6. Unconfirmed changes: not run · our policy
  7. Bad input: not run · our policy
  8. Model requests: not run · nothing to check it against
  9. Sensitive questions: not run · nothing to check it against
  10. Folder boundary: not run · our policy
  11. Log leaks: not run · nothing to check it against
  12. Hidden content: not run · nothing to check it against
  13. Fake assistant turns: not applicable
  14. Token passthrough: not applicable
  15. Token audience: not applicable
  16. Sign-in redirect: not applicable
  17. Consent handling: not applicable
  18. Sign-in metadata: not applicable

2 exercised10 not run (reason given)6 not applicable

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 2 of the 12 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.

Exercised · 2
  • 1Inventory
    tool-list    Reads the declared tools, resources and prompts.exercised
  • 2Hidden instructions
    description-poisoning    Looks for hidden instructions in tool descriptions.exercised
Not run, with the reason · 10
  • 3Real execution
    real-execution    Calls a tool and checks what really happens.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy
  • 4Secret leak
    canary-leak    Plants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
  • 5Internal addresses
    ssrf    Checks whether a tool can be steered to internal addresses.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy
  • 6Unconfirmed changes
    write-without-confirmation    Checks whether tools that change data act without asking.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy
  • 7Bad input
    error-handling    Sends bad input and watches how the server answers.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy
  • 8Model requests
    sampling    Checks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
  • 9Sensitive questions
    elicitation-sensitive-data    Checks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
  • 10Folder boundary
    root-boundary    Checks whether the server reaches outside the folders it was given.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy
  • 11Log leaks
    logging-side-channel    Checks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
  • 12Hidden content
    audience-hiding    Checks resources that hide content from the user.This check needs content the server returns, and nothing was read or called.not run · nothing to check it against
Does not apply to this server · 6
  • 13Fake assistant turns
    fake-assistant-turn    Checks prompts that pose as the assistant's own words.The server exposes no prompts.not applicable
  • 14Token passthrough
    token-passthrough    Checks whether the server forwards a user's token to other services.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable
  • 15Token audience
    token-audience-validation    Checks whether tokens meant for another service are accepted.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable
  • 16Sign-in redirect
    open-redirect    Checks the sign-in redirect for abuse.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable
  • 17Consent handling
    confused-deputy    Checks consent handling when one service acts for another.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable
  • 18Sign-in metadata
    oauth-url-scheme    Checks the published sign-in metadata for unsafe URLs.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable

Source: our own test in an isolated sandbox, 2026-10-23, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

What happened during the test?

Feature #8

The steps in order, as the test record holds them.

  1. 0 msStarted the published package in an isolated sandbox (read-only mode)
  2. 131 msConnected after 0 redirects.
  3. Read the inventory: 60 tools, 0 resources, 0 prompts.
  4. 1,009 msFinished: 2 checks exercised.

Reference

How is it classified?

18 fields

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

TopicAI-classified
cloud-and-devops
AI-classified · 2026-10-23
Pricing modelAI-classified
no value
The pages we read do not state how the product is priced.
Programming language
JavaScript
api.github.com · 2026-10-23
Hosting type
local package
registry · 2026-10-23
MCP capability
tools
our test · 2026-10-23
Transport
standard input/output
registry · 2026-10-23
Required credentials
none declared
registry · no declaration is not a guarantee
Package registry
mcpb
registry · 2026-10-23
Freshness
0–30 days
registry updatedAt · 2026-10-23
Lifecycle status
active
registry · 2026-10-23
License class
does not apply
package ecosystem not queried by this layer (mcpb); only npm and PyPI are supported here
Integrity hash
does not apply
package ecosystem not queried by this layer (mcpb); only npm and PyPI are supported here
Signature / provenance
does not apply
package ecosystem not queried by this layer (mcpb); only npm and PyPI are supported here
Dependency advisories
not checked
only npm and PyPI packages are audited
Popularity
does not apply
package ecosystem not queried by this layer (mcpb); only npm and PyPI are supported here
Publisher signals
owner: a personal account · repository age: 0–30 days · stars: 0–9
api.github.com · 2026-10-23
Maintenance
active
api.github.com · 2026-10-23
Environment
your machine
where it runs, from the hosting type

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.

Cite or correct this page

Sources and corrections

Suggested citation

ProtocolProbe. “io.github.kapaweb/kapaweb-deploy: MCP server record.” Data checked 2026-10-23. https://protocolprobe.com/mcp/servers/io.github.kapaweb/kapaweb-deploy

Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.

As JSON: this record in the API · API documentation.

Badge for your README

ProtocolProbe: 4 of 5 record checks met

[![ProtocolProbe](https://protocolprobe.com/api/v1/badge/io.github.kapaweb/kapaweb-deploy)](https://protocolprobe.com/mcp/servers/io.github.kapaweb/kapaweb-deploy)

It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.

Something wrong, or is this yours?

If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.

Write to hello@protocolprobe.com · corrections log · methodology