MCP servers › io.github.replohq › replo

MCP server · registry snapshot 2026-10-23 · last tested 2026-10-23

io.github.replohq/replo

Research competitors and build, edit, and manage ecommerce sites from your AI assistant. — the publisher's description

1 of 2 record checks metRead-only · tools listed 2026-10-23Topic: commerce-and-marketing · AI-classifiedversion 1.0.0streamable HTTP84 tools

Summary

io.github.replohq/replo is a remote MCP server listed in the official MCP registry at version 1.0.0. On 2026-10-23 ProtocolProbe connected to it in read-only mode and read its inventory: 84 tools, 1 resource and 0 prompts.

Record checks

1 of 2 record checks met · 7 do not apply

met: Registry entry is active and says how to run it
not met: Source repository link opens
not applicable: Repository is not archived
not applicable: Code pushed to the repository in the 90 days before our check
not applicable: Repository publishes a security policy (SECURITY.md)
not applicable: Package names its licence with a standard (SPDX) identifier
not applicable: The version the registry lists can be installed and is not withdrawn
not applicable: npm package carries build provenance (attestation)
not applicable: No known critical or high advisory in the package or its dependencies

Not ranked by downloads: a remote server publishes no download figure
Not ranked by stars: no public GitHub repository

From public records, not a safety rating. Each check with its reason · Is it safe to install?

Key facts

Runs: remote (hosted by the publisher)
Transport: streamable HTTP
Sign-in: none needed to open a session
Tools: 84
Described as changing data: 39 of 84 toolsAI-classified
Mainly works on: files and code on the machine it runs on; accounts and data in outside web servicesAI-classified
Topic: commerce-and-marketingAI-classified
Last tested: 2026-10-23

Add to your client

Observed fact

This server accepted a session without any credential and lists 33 tools whose name or declaration suggests they change data (resolve_agent_interaction, abort_agent_session, create_api_key, upload_asset, create_file and 28 more). That is our reading of the names; we did not call them. Source: our connection, 2026-10-23.

Worth knowing before you connect it

39 tools are described as changing something (resolve_agent_interaction, abort_agent_session, create_api_key, …): our AI model's reading of the descriptions, not something we tested, and the server opened a session without any credential. We did not call them.

Each line comes from a section below, with its source and date.

How fresh this is

Live-tested: yes, a real session (not a text-only review)
Last tested: 2026-10-23
Mode: read-only (no tool calls)
Latest version: 1.0.0, published 2026-10-19 (registry, as of the 2026-10-23 snapshot)
First listed version: 2026-10-19 (earliest version still in the registry; older removed versions would be earlier)
Registry data: snapshot 2026-10-23
Package and repository: checked 2026-10-23
Engine: mcp-runtime-engine@0.1.0 · sdk@1.32.0

Changes since the last refresh

New in the registry: not in the list of 2026-10-04, listed on 2026-10-23 with version 1.0.0 (published 2026-10-19).

Source: the official MCP Registry list on 2026-10-04 and on 2026-10-23.

What it is

What does this server offer?

Observed inventory

84tools

1resources

0prompts

What it mainly works on, as our AI model read its tool descriptions: files and code on the machine it runs on; accounts and data in outside web services.

39 of 84 tools are described as changing something (creating, editing, deleting, sending or running). For 4 the reading was uncertain, so no mark is shown.

get_agent_sessionon 1 other serverreads or searches
“Retrieve a Replo session's current status, latest response, tool activity, errors, and pending interactions (permission requests and questions).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- sessionIdstringrequired
resolve_agent_interactiondoes something elsedescribed as changing data
“Resolve one pending Replo agent interaction with the user's explicit answer.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
5 inputs, 3 required
- sessionIdstringrequired
- interactionIdstringrequired“The id copied from get_agent_session.pendingInteractions after the user answers using that interaction's response contract.”
- typestringrequired“The interaction's type from pendingInteractions.”
- decisionstring“For a permission: the user's selected option value from its response contract.”
- answersarray“For a question: one array per form step, in order.”
abort_agent_sessiondescribed as changing data
“Cancel the in-progress turn of a Replo session.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
1 input, 1 required
- sessionIdstringrequired
query_replo_analyticsruns code or commands
“Run read-only ClickHouse SQL over a project's Replo analytics for traffic, conversion, revenue, and session-level questions.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 2 required
- projectIdstringrequired
- querystringrequired“Run a read-only analytics query for a project.”
create_api_keyon 34 other serverscreates or changes datadescribed as changing data
“Create an API key for user-requested local Git development of one Replo project at git.replo.app.”
Publisher declares: read-only no · destructive no · idempotent no · open-world no
4 inputs, 3 required
- workspaceIdstringrequired
- projectIdstringrequired
- namestringrequired
- scopesarray
find_assetson 3 other serversreads or searches
“Find media and files in a project's asset library using semantic search or library metadata.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
8 inputs, 1 required
- projectIdstringrequired
- tagsarray
- searchTermstring
- typestring“AssetType”
- statusstring“AssetStatusFilter”
- labelstring
- limitinteger
- cursorstring“Opaque cursor from next_cursor.”
upload_asseton 13 other serverscreates or changes datadescribed as changing data
“Import a file or publicly accessible URL into a project's asset library.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
7 inputs, 1 required
- projectIdstringrequired
- urlstring
- assetFileobject
- namestring
- altTextstring
- tagsarray
- generateEmbeddingboolean
connect_custom_domainon 2 other serverscreates or changes datadescribed as changing data
“Begin connecting a custom domain to a Replo site.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
2 inputs, 2 required
- siteIdstringrequired
- domainstringrequired
get_custom_domain_statusreads or searches
“Diagnose a connected custom domain by inspecting its activation state and required DNS records.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- customDomainIdstringrequired
verify_custom_domainon 2 other serverscreates or changes datadescribed as changing data
“Check DNS for a pending or stale custom domain and activate it when records have propagated.”
Publisher declares: read-only no · destructive no · idempotent yes · open-world yes
1 input, 1 required
- customDomainIdstringrequired
report_bugon 1,116 other serverscreates or changes datadescribed as changing data
“Report a credible user-reported or directly observed Replo defect, including API, MCP, or documentation defects.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
5 inputs, 4 required
- titlestringrequired“Short headline describing the broken behavior.”
- descriptionstringrequired“Attempted task, expected/actual behavior, impact, retries/workarounds, and recurrence.”
- reproStepsstringrequired“Numbered reported or performed steps, labeled by source, with expected/actual behavior.”
- errorContextstring
- projectIdstringrequired“Project ID from list_projects.”
submit_feature_requeston 2 other serverscreates or changes datadescribed as changing data
“Submit a feature request to Replo when the user asks to send feedback about a missing capability.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
3 inputs, 3 required
- titlestringrequired“Short headline for the feature request.”
- descriptionstringrequired“Concise description of the requested Replo capability.”
- projectIdstringrequired“Project ID from list_projects.”

Show 72 more tools

list_fileson 47 other serversreads or searches
“List private working documents and folders in a project.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
5 inputs, 1 required
- projectIdstringrequired
- parentIdstring
- kindstring
- limitinteger
- cursorstring
get_fileon 18 other serversreads or searches
“Retrieve metadata for an existing Files document or folder by fileId.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- fileIdstringrequired
read_fileon 35 other serversreads or searches
“Read complete small UTF-8 documents in Files, or obtain a temporary download URL for binary and larger files.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- fileIdstringrequired
create_fileon 9 other serverscreates or changes datadescribed as changing data
“Create a private document or folder in Files.”
Publisher declares: read-only no · destructive no · idempotent no · open-world no
5 inputs, 3 required
- projectIdstringrequired
- parentIdstring or null
- namestringrequired
- kindstringrequired
- sourceobject“Required when kind is file.”
update_fileon 6 other serverscreates or changes datadescribed as changing data
“Rename or move an entry within its project.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
3 inputs, 1 required
- fileIdstringrequired
- namestring
- parentIdstring or null
list_insights_reportsreads or searches
“Discover accessible private, team-shared, and individually shared Insights reports in a project.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
4 inputs, 1 required
- projectIdstringrequired
- searchstring“Case-insensitive report filename search.”
- offsetinteger
- limitinteger
get_insights_reporton 1 other serverreads or searches
“Read an existing report's definition, formulas, SQL, data sources, permissions, and resolved default scope.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 2 required
- projectIdstringrequired
- reportIdstringrequired“Report file ID from list_insights_reports, or the final UUID in its Insights URL.”
query_insights_reportruns code or commands
“Execute saved report queries using the same formulas and scope compiler as the Insights UI.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
4 inputs, 2 required
- projectIdstringrequired
- reportIdstringrequired“Report file ID from list_insights_reports, or the final UUID in its Insights URL.”
- queryIdsarray“Query IDs from get_insights_report.”
- scopeobject“Override selected report defaults.”
find_ordersreads or searches
“Find storefront orders when investigating a payment state or fulfillment state.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
5 inputs, 1 required
- projectIdstringrequired
- cursorstring
- limitinteger
- financialStatusstring“OrderFinancialStatus”
- customerEmailstring
get_orderon 56 other serversreads or searches
“Inspect the public record of one storefront order: line items, fulfillment, refunds, and event history.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- orderIdstringrequired
find_productson 14 other serversreads or searches
“Find Replo-managed products for catalog, product-page, or checkout work.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
4 inputs, 1 required
- projectIdstringrequired
- querystring
- cursorstring
- limitinteger
get_producton 242 other serversreads or searches
“Retrieve the current public catalog details for a specific Replo-managed product.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- productIdstringrequired
create_producton 19 other serverscreates or changes datadescribed as changing data
“Create a Replo-managed product for native product pages or checkout flows.”
Publisher declares: read-only no · destructive no · idempotent no · open-world no
5 inputs, 2 required
- projectIdstringrequired
- titlestringrequired
- descriptionstring or null
- slugstring or null
- externalCheckoutUrlstring or null
update_producton 14 other serverscreates or changes datadescribed as changing data
“Change the current catalog details of a Replo-managed product.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
6 inputs, 1 required
- productIdstringrequired
- titlestring
- descriptionstring or null
- slugstring or null
- statusstring
- externalCheckoutUrlstring or null
set_product_inventorycreates or changes datadescribed as changing data
“Set stock counts and stock policy for a Replo-managed product's variants, addressing each variant by its option-value combination (empty optionValues for a product with no options).”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
2 inputs, 2 required
- productIdstringrequired
- variantsarrayrequired
list_projectson 157 other serversreads or searches
“List accessible Replo projects, optionally within one workspace.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs
- workspaceIdstring
- cursorstring
- limitinteger
create_projecton 101 other serverscreates or changes datadescribed as changing data
“Create a Replo project in a workspace selected for the user's requested work.”
Publisher declares: read-only no · destructive no · idempotent no · open-world no
2 inputs, 2 required
- workspaceIdstringrequired
- namestringrequired
get_projecton 111 other serversreads or searches
“Read one Replo project's settings: name, time zone, currency, support email, and checkoutProvider ('shopify' means Shopify Checkout, 'replo' means Replo checkout, null means checkout is off).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- projectIdstringrequired
update_projecton 37 other serverscreates or changes datadescribed as changing data
“Update the supplied settings of a Replo project: name, time zone, currency, support email, or checkoutProvider.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
6 inputs, 1 required
- projectIdstringrequired
- namestring
- timeZonestring
- currencystring“Currency”
- supportEmailstring or null
- checkoutProviderstring
create_shared_previewcreates or changes datadescribed as changing data
“Create or recover a public live preview link to a site page without publishing.”
Publisher declares: read-only no · destructive no · idempotent yes · open-world yes
4 inputs, 3 required
- projectIdstringrequired
- siteIdstringrequired
- routestringrequired“The site route to preview, e.g.”
- localestring“BCP 47 language tag to render the page in, e.g.”
revoke_shared_previewdeletesdescribed as changing data
“Disable a public shared preview link using the id returned by create_shared_preview.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes
1 input, 1 required
- sharedPreviewIdstringrequired
list_siteson 38 other serversreads or searches
“Find the Replo site to inspect, manage, or clone within a project.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- projectIdstringrequired
- cursorstring
- limitinteger
update_siteon 7 other serverscreates or changes datadescribed as changing data
“Rename a Replo site's dashboard display name.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
2 inputs, 1 required
- siteIdstringrequired
- namestring
publish_siteon 10 other serversmanages infrastructuredescribed as changing data
“Publish a site to make changes live.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
2 inputs, 1 required
- siteIdstringrequired“The ID of the site to publish.”
- promoteRoutesarray“Routes whose unpublished edits go live in this publish — pages and content entries alike, e.g.”
list_taskson 66 other serversreads or searches
“List scheduled Replo tasks in a project.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- projectIdstringrequired
- cursorstring
- limitinteger
get_taskon 93 other serversreads or searches
“Inspect the schedule and current timing of a specific recurring Replo task.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- taskIdstringrequired
delete_taskon 22 other serversdeletesdescribed as changing data
“Permanently delete a scheduled Replo task and stop all future runs.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
1 input, 1 required
- taskIdstringrequired
apply_brand_kit_to_sitecreates or changes datadescribed as changing data
“Apply the project's saved brand to the selected site's shared style tokens, fonts, layout, and shared components.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
3 inputs, 2 required
- siteIdstringrequired“Site ID from list_sites.”
- instructionsstringrequired“Requested changes for this operation only.”
- sessionIdstring“Omit to start this operation.”
update_site_navigationcreates or changes datadescribed as changing data
“Update the selected site's shared navigation, header, or footer in its layout and shared components.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
3 inputs, 2 required
- siteIdstringrequired“Site ID from list_sites.”
- instructionsstringrequired“Requested changes for this operation only.”
- sessionIdstring“Omit to start this operation.”
update_site_metadataon 1 other servercreates or changes datadescribed as changing data
“Update site-wide SEO title, description, social preview, favicon references, or search visibility in the selected site's root layout.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
3 inputs, 2 required
- siteIdstringrequired“Site ID from list_sites.”
- instructionsstringrequired“Requested changes for this operation only.”
- sessionIdstring“Omit to start this operation.”
update_site_trackingcreates or changes datadescribed as changing data
“Add, change, or remove a user-requested analytics or marketing script in the selected site's root layout.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
3 inputs, 2 required
- siteIdstringrequired“Site ID from list_sites.”
- instructionsstringrequired“Requested changes for this operation only.”
- sessionIdstring“Omit to start this operation.”
get_integration_statuson 1 other serverreads or searches
“Check one integration's connection status in the selected Replo project.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 2 required
- integrationKeystringrequired“Integration to check, e.g.”
- projectIdstringrequired“Replo project id, from list_projects.”
get_brand_kiton 3 other serversreads or searches
“Read the selected project's saved business information, overviews, colors, fonts, logo marks, and personas.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- projectIdstringrequired“The project whose saved brand to read.”
create_or_update_brand_kitcreates or changes datadescribed as changing data
“Create or update the project's saved brand: business information, colors, fonts, logos, personas, overviews, and brand-context file tags.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
3 inputs, 2 required
- projectIdstringrequired
- instructionsstringrequired“Requested changes for this operation only.”
- sessionIdstring“Omit to start this operation.”
create_site_pagecreates or changes datadescribed as changing data
“Create a draft page at one route in an existing site.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
4 inputs, 3 required
- siteIdstringrequired“Site ID from list_sites.”
- routestringrequired“Page route within the selected site, such as / or /products/[handle].”
- instructionsstringrequired“Requested changes for this operation only.”
- sessionIdstring“Omit to start this operation.”
edit_site_pagecreates or changes datadescribed as changing data
“Edit the selected site's draft page at one route, including its copy, sections, product display, forms, and page-local components.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
4 inputs, 3 required
- siteIdstringrequired“Site ID from list_sites.”
- routestringrequired“Page route within the selected site, such as / or /products/[handle].”
- instructionsstringrequired“Requested changes for this operation only.”
- sessionIdstring“Omit to start this operation.”
delete_site_pagedeletesdescribed as changing data
“Remove the selected route's draft page.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
4 inputs, 3 required
- siteIdstringrequired“Site ID from list_sites.”
- routestringrequired“Page route within the selected site, such as / or /products/[handle].”
- instructionsstringrequired“Requested changes for this operation only.”
- sessionIdstring“Omit to start this operation.”
create_insights_reportcreates or changes datadescribed as changing data
“Create a saved Replo Insights report from instructions, existing reports, analytics, or files.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes
5 inputs, 3 required
- projectIdstringrequired
- instructionsstringrequired“Requested changes for this operation only.”
- operationIdstringrequired“Generate a fresh UUID for each new instruction.”
- sessionIdstring“Omit to start this operation.”
- sourcesarray“Optional existing reports, analytics SQL, or Files documents.”
edit_insights_reportcreates or changes datadescribed as changing data
“Edit an existing saved Insights report in place, preserving its identity and sharing.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes
6 inputs, 4 required
- projectIdstringrequired
- instructionsstringrequired“Requested changes for this operation only.”
- operationIdstringrequired“Generate a fresh UUID for each new instruction.”
- sessionIdstring“Omit to start this operation.”
- sourcesarray“Optional existing reports, analytics SQL, or Files documents.”
- fileIdstringrequired“The existing report file ID or artifact folder ID.”
create_artifacton 2 other serverscreates or changes datadescribed as changing data
“Create a saved Replo artifact from instructions, existing reports, analytics, or files.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes
5 inputs, 3 required
- projectIdstringrequired
- instructionsstringrequired“Requested changes for this operation only.”
- operationIdstringrequired“Generate a fresh UUID for each new instruction.”
- sessionIdstring“Omit to start this operation.”
- sourcesarray“Optional existing reports, analytics SQL, or Files documents.”
edit_artifacton 2 other serverscreates or changes datadescribed as changing data
“Edit an existing saved artifact in place, preserving its identity and sharing.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes
6 inputs, 4 required
- projectIdstringrequired
- instructionsstringrequired“Requested changes for this operation only.”
- operationIdstringrequired“Generate a fresh UUID for each new instruction.”
- sessionIdstring“Omit to start this operation.”
- sourcesarray“Optional existing reports, analytics SQL, or Files documents.”
- fileIdstringrequired“The existing report file ID or artifact folder ID.”
sightglass_showreads or searches
“Show a prior Sightglass result to the user as an inline card, in hosts that draw cards.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- resultIdstringrequired“resultId from the Sightglass call whose results answer the user's question, or from its sign_in_required result.”
sightglass_find_adsreads or searches
“Search a library of real Meta ads and the landing pages they drive to.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
16 inputs
- searchstring“Semantic search over the ad's copy, creative caption and advertiser.”
- companyIdsstring“CSV of company ids.”
- displayFormatsstring“CSV of image,video,carousel,dco,dpa,text,other”
- pageTypesstring“CSV of landing-page types: offer_page,advertorial,listicle,quiz,lead_capture,homepage,pdp,collection,blog,marketplace,app_store,social_profile.”
- hookTypesstring“CSV of hook types: question,bold_claim,problem_callout,curiosity,proof_number,before_after,first_person_story,offer_first,us_vs_them,demo,audience_callout,cont…”
- angleTypesstring“CSV of angle types: problem_solution,mechanism,proof,comparison,identity,founder_story,objection_handling,urgency,education,transformation,price_or_value,quali…”
- offerTagsstring“CSV of offer tags: discount,bundle,subscription,trial_or_sample,gift_with_purchase,financing,free_shipping,giveaway”
- funnelStagesstring“CSV of funnel stages: cold,warm,retargeting”
- technologiesstring“CSV of stack names on the brand's site, e.g.”
- scoreTiersstring“CSV of testing,scaling,growing,optimized,winning.”
- statusstring
- sortstring
- limitinteger“Results per page: 20 by default, up to 40.”
- cursorstring“nextCursor from the previous page of this same call, to get the next page.”
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_search_companiesreads or searches
“Search Sightglass companies — what users call brands: the business behind one or more Meta advertiser pages, keyed on its domain.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
11 inputs
- searchstring“Semantic by default: describe the business (what it sells, to whom), not one keyword.”
- searchModestring
- domainSearchstring“A brand's website, e.g.”
- categoryIdsstring“CSV of category ids from sightglass_search_companies results; a node matches its whole subtree.”
- similarToCompanyIdstring“Find the nearest competitors of this company instead of searching.”
- activeAdsCountGteinteger
- sortstring
- limitinteger“Results per page: 20 by default, up to 40.”
- cursorstring“nextCursor from the previous page of this same call, to get the next page.”
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_get_companyreads or searches
“One company's full profile plus its six nearest competitors.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- companyRefstringrequired“Company id or slug.”
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_get_company_activityreads or searches
“How one brand's advertising has moved: its daily active-ad trend, ads launched per week, how long its ads stay live (longevity buckets), and the technology stack on its site with when each tool was f…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
5 inputs, 1 required
- companyRefstringrequired“Company id or slug.”
- daysinteger“Trend window in days; defaults to 90.”
- weeksinteger“Weeks of launches; defaults to 26.”
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_get_rankingsreads or searches
“The market view: who holds what share of active ads, week by week.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
6 inputs
- groupBystring“What to rank by share of active ads: company (default), category, platform, country or plan.”
- categoryIdstring“Scope to one category's subtree; ids come from the `categories` in this tool's result.”
- weeksinteger
- limitinteger
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_find_site_pagesreads or searches
“Find destination pages ads drive to — what users call 'landing pages'.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
10 inputs
- searchstring
- domainsstring“CSV of site domains”
- pageTypesstring“CSV of landing-page types: offer_page,advertorial,listicle,quiz,lead_capture,homepage,pdp,collection,blog,marketplace,app_store,social_profile.”
- technologiesstring“CSV of technology names”
- activeAdsCountGteinteger
- sortstring
- limitinteger“Results per page: 20 by default, up to 40.”
- cursorstring“nextCursor from the previous page of this same call, to get the next page.”
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_get_site_pagereads or searches
“Fetch one landing page in full: desktop, mobile and pre-popup screenshots as viewable URLs, the site's detected technology stack, its traffic estimates, and how many live ads point at it.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- sitePageIdstringrequired
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_get_adreads or searches
“Fetch one ad in full: copy, creative caption, duplication facts, its destination landing page, and presigned media URLs you can pull into context to look at the creative itself.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- adIdstringrequired
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_find_technologiesreads or searches
“The technology directory: the apps and vendors detected on tracked brands' sites (Shopify, Klaviyo, Recharge…), ranked by how many brands use each and how those brands are doing.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
7 inputs
- slugstring“One technology's slug from an earlier result: returns its adopter stats and peers instead of the directory.”
- searchstring
- categorystring“App category as the fingerprinter labels it, e.g.”
- sortstring
- limitinteger
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_get_accessreads or searches
“What the user's Replo plan includes in Sightglass: the plan name, row caps per list, whether sales and traffic estimates are included, the history and trend windows, and how many new-brand researches…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_list_savedreads or searches
“What the user has collected in Sightglass.”
Publisher declares: read-only no · destructive no · idempotent yes · open-world no
7 inputs
- boardCursorstring“Pass nextBoardCursor from a prior result to list more boards.”
- kindstring“Which saved items to list.”
- boardIdstring“Limit to one board; ids come from `boards` in this result.”
- limitinteger“Results per page: 20 by default, up to 40.”
- cursorstring“nextCursor from the previous page of this same call, to get the next page.”
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_create_boardcreates or changes datadescribed as changing data
“Create a named board in the user's Sightglass collection.”
Publisher declares: read-only no · destructive no · idempotent no · open-world no
4 inputs, 2 required
- namestringrequired
- kindstringrequired“What the board holds; a board takes one kind of item.”
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_update_boardcreates or changes datadescribed as changing data
“Rename one of the user's Sightglass boards.”
Publisher declares: read-only no · destructive no · idempotent yes · open-world no
4 inputs, 2 required
- boardIdstringrequired
- namestringrequired
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_delete_boarddeletesdescribed as changing data
“Delete one of the user's Sightglass boards and everything saved on it.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
3 inputs, 1 required
- boardIdstringrequired
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_follow_companiescreates or changes datadescribed as changing data
“Set the brands the user follows in Sightglass.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
3 inputs, 1 required
- companyIdsarrayrequired“The full list of company ids to follow; it replaces the current list, so include the ones to keep.”
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_research_companycreates or changes datadescribed as changing data
“Find or add a company by website domain and queue background research into its ads, landing pages, store details, and technologies.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
3 inputs, 1 required
- domainstringrequired“The brand's website domain, e.g.”
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_copy_creative_to_assetscreates or changes datadescribed as changing data
“Copy one ad creative's image from Sightglass into the Replo project's Assets, so it can be used as a reference in the project.”
Publisher declares: read-only no · destructive no · idempotent yes · open-world no
3 inputs, 2 required
- creativeIdstringrequired“An ad's `creative.id`, not the ad's own id.”
- projectIdstringrequired“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_find_campaignsreads or searches
“A brand's offer campaigns: what deal it ran (discount, bundle, free gift…), in plain English, from when to when, how deep, on how many ads and landing pages, with the exact quote it was read from.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
5 inputs, 1 required
- companyRefstringrequired“Company id or slug.”
- fromstring“YYYY-MM-DD; defaults to six weeks back”
- tostring“YYYY-MM-DD; defaults to a week ahead”
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_find_offersreads or searches
“Offer campaigns across brands.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
8 inputs
- companyRefsarray“Company ids or slugs: returns the promo calendar for these brands.”
- fromstring“Calendar only.”
- tostring“Calendar only.”
- daysinteger“Top offers only.”
- sortstring“Top offers only.”
- limitinteger
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_find_anglesreads or searches
“A brand's angles: the pitch each ad leans on, for whom; offers sit on top.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- companyRefstringrequired“Company id or slug.”
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_find_top_anglesreads or searches
“The angles in use across every tracked brand in the trailing window: the same shape as sightglass_find_angles, with the brand on each.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
8 inputs
- typestring“SightglassAngleType”
- ageBandstring“SightglassAgeBand”
- awarenessstring“ProjectPersonaAwareness”
- daysinteger
- sortstring“SightglassTopAnglesSort”
- limitinteger
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_find_personasreads or searches
“A brand's customer personas: who it markets to, their age range and awareness stage, with the angles and offers aimed at each.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- companyRefstringrequired“Company id or slug.”
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_arena_comparereads or searches
“Place personas, ads, landing pages or companies (brands) on one or two 'this vs that' axes, the same map the user sees in Sightglass Arena.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
6 inputs, 1 required
- kindstringrequired“What to place: personas, ads, pages (landing pages) or companies”
- lensstring“A preset pair of axes: who (Beginner↔Expert × Solo↔Social), why (Feeling↔Logic × Need↔Treat), price (Cheap↔Premium × Classic↔Modern), occasion (Everyday↔Specia…”
- axesarray“One or two axes; overrides lens”
- companyRefsarray“Company ids or slugs to compare; omit for the top companies.”
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_get_site_page_versionsreads or searches
“How one landing page changed over time: its dated captures, newest first, each with a screenshot and the offers read from it.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- sitePageIdstringrequired
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_xraydescribed as changing data
“Start an X-ray: a graded teardown of one ad (with its landing page, as a funnel) or one landing page, scored against what works in its category.”
Publisher declares: read-only no · destructive no · idempotent no · open-world no
4 inputs, 1 required
- adIdstring“Grade this ad together with its landing page, as a funnel.”
- sitePageIdstring“Grade this landing page alone.”
- projectIdstringrequired“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
sightglass_get_xrayreads or searches
“Read an X-ray.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
5 inputs
- adIdstring“Grade this ad together with its landing page, as a funnel.”
- sitePageIdstring“Grade this landing page alone.”
- requestIdstring“A request id from sightglass_xray: returns its status.”
- projectIdstring“Replo project id, from list_projects: where the charge or the asset lands.”
- workspaceIdstring“Replo workspace id, from list_workspaces.”
connect_replo_account
“Sign the user in to Replo.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.
list_workspaceson 44 other servers
“The user's Replo workspaces with each one's plan (free, starter or pro).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.
get_plan_optionson 1 other server
“The workspace's current Replo plan, and the Starter and Pro plans' monthly prices and what each adds in Sightglass (sales and traffic estimates, trends, more brand research).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- workspaceIdstringrequired“Replo workspace id, from list_workspaces.”
start_plan_upgradeon 1 other server
“Start buying a Replo plan for a free workspace.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
3 inputs, 2 required
- workspaceIdstringrequired“Replo workspace id, from list_workspaces.”
- planstringrequired“The plan to buy: starter or pro.”
- intervalstring“Billing interval; monthly only from chat.”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

How well are its tools described?

Features #4 and #5

How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.

Descriptions

AI reading of each description

Says what the tool does: 100% of 80 tools
Says what it returns: 52% of 60 tools
States limits, defaults or errors: 16% of 75 tools
Says when to use it: 18% of 73 tools
Items covered per tool: 1.9 of 4 on average

Counted from the listing

Parameters with a description: 62% of 313
Tools with a description: 100% of 84
Typical description length: 458 characters

The tool set

Counted from the listing

Tools: 84
Size of the list: about 49,604 tokens for an agent to load (characters ÷ 4)
Naming: 84 of 84 names use snake_case

AI reading: easy to mix up

get_agent_session and resolve_agent_interaction
list_files and get_file
list_files and read_file

The AI items cover 80 of 84 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found these, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.

How do I add it to my client?

Config from the registry entry

From the remote endpoint (Streamable HTTP)

We connected to this URL on 2026-10-23 (a read-only session: no tool was called).

Add to CursorAn install link in the format Cursor documents, holding the Cursor config below.

Claude Desktop or claude.ai

Settings → Connectors → Add custom connector, then paste:
https://api.replo.app/v1/mcp

Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "replo": {
      "url": "https://api.replo.app/v1/mcp"
    }
  }
}

VS Code · .vscode/mcp.json

{
  "servers": {
    "replo": {
      "type": "http",
      "url": "https://api.replo.app/v1/mcp"
    }
  }
}

VS Code (command line) · Bash or zsh terminal (macOS, Linux)

code --add-mcp '{"name":"replo","type":"http","url":"https://api.replo.app/v1/mcp"}'

Claude Code

claude mcp add --transport http replo https://api.replo.app/v1/mcp

Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+

npx @modelcontextprotocol/inspector@2.11.0 --server-url https://api.replo.app/v1/mcp --transport http

The server runs on the operator's infrastructure; it may ask you to sign in when you first connect.
The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Does the registry listing match what we found?

Feature #6

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.

Registry says	We found	Result	Source · date
Remote endpoint api.replo.app/v1/mcp	Session opened	matches	our test · 2026-10-23
No credential declared as required	Opened a session without any credential	matches	our test · 2026-10-23

Choosing

Record checks

Public records · not a safety rating

1 of 2 record checks met · 7 do not apply

Not ranked by downloads: a remote server publishes no download figure
Not ranked by stars: no public GitHub repository

MetRegistry entry is active and says how to run itActive, with a package or a remote address.
Not metSource repository link opensThe registry entry gives no repository link.
Does not applyRepository is not archivedNo public GitHub repository to read.
Does not applyCode pushed to the repository in the 90 days before our checkNo public GitHub repository to read.
Does not applyRepository publishes a security policy (SECURITY.md)No public GitHub repository to read.
Does not applyPackage names its licence with a standard (SPDX) identifierRemote server: it ships no package.
Does not applyThe version the registry lists can be installed and is not withdrawnRemote server: it ships no package.
Does not applynpm package carries build provenance (attestation)Remote server: it ships no package.
Does not applyNo known critical or high advisory in the package or its dependenciesRemote server: it ships no package.

Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-23. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards

Common questions about io.github.replohq/replo

Answered from the data above

Is io.github.replohq/replo safe to install?

We do not rate servers as safe or unsafe. 1 of its 2 applicable record checks are met (facts from public records, each listed on this page). What the records show: 39 of its tools describe changing data (our AI model's reading of the descriptions). These are facts with their sources on this page, not a safety guarantee, and we did not run its tools.

Does io.github.replohq/replo need an API key or sign-in?

It opened a session without any credential on 2026-10-23. The registry entry declares no required credential; no declaration is not a guarantee.

Has io.github.replohq/replo been security tested?

Partly. 4 of the 15 checks that apply to it were exercised. It accepted a session without any credential and lists tools whose names suggest they change data. We did not call them. No security verdict is published before verification.

What can io.github.replohq/replo do?

It lists 84 tools. In our AI model's reading of their descriptions (two runs had to agree, nobody checked it by hand), they include tools that read or search, create or change data, delete, run code or commands, manage infrastructure and do something else. We did not call any tool, so this describes the text, not the behaviour.

Can io.github.replohq/replo change or delete data?

39 of its tools say in their description that they create, edit, delete, send or run something (our AI model's reading). We did not call any tool, so we cannot say what actually happens.

Found this page useful?

Anonymous · no sign-in

A quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.

Similar servers

Same topic · AI-read

com.finalpos/finalFinal POS – Custom POS Builderalso has tools that creates or changes data, deletes, runs code or commands, manages infrastructure, does something else, reads or searchescompare with this one
io.github.hermoso-ai/hermosoHermosoalso has tools that creates or changes data, deletes, runs code or commands, does something else, reads or searchescompare with this one
io.favcrm/favcrmFavCRMalso has tools that creates or changes data, deletes, runs code or commands, does something else, reads or searchescompare with this one
ai.spideriq/leadsalso has tools that creates or changes data, deletes, runs code or commands, does something else, reads or searchescompare with this one
com.sulvo.publisher-revenue-audit/auditalso has tools that creates or changes data, deletes, runs code or commands, does something else, reads or searchescompare with this one
com.getadloop/adloopAdLoopalso has tools that creates or changes data, deletes, runs code or commands, reads or searchescompare with this one

Active servers whose topic is also “commerce-and-marketing” and that have at least one tool of the same kind; most kinds in common first, then most GitHub stars. The topic and the tool kinds are an AI model's reading of the publishers' descriptions, not checked by hand. Similar is not a recommendation.

Compare with another server

Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.

Security testing

What did we test, and what did we leave out?

18 checks · features #1, #2

Open without sign-in

It accepted a session without any credential and lists tools whose names suggest they change data. We did not call them. No security score is given; a check we did not run is never counted as passed.

The 18 checks at a glanceour test · 2026-10-23

Inventory: exercised
Hidden instructions: exercised
Real execution: not run · our policy
Secret leak: not run · nothing to check it against
Internal addresses: not run · our policy
Unconfirmed changes: not run · our policy
Bad input: not run · our policy
Model requests: not run · nothing to check it against
Sensitive questions: not run · nothing to check it against
Folder boundary: not run · our policy
Log leaks: not run · nothing to check it against
Hidden content: exercised
Fake assistant turns: not applicable
Token passthrough: not applicable
Token audience: not applicable
Sign-in redirect: not run · our policy
Consent handling: not testable from outside
Sign-in metadata: exercised

4 exercised11 not run (reason given)3 not applicable

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 4 of the 15 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.

Exercised · 4

1Inventory
tool-listReads the declared tools, resources and prompts.exercised
2Hidden instructions
description-poisoningLooks for hidden instructions in tool descriptions.exercised
12Hidden content
audience-hidingChecks resources that hide content from the user.exercised
18Sign-in metadata
oauth-url-schemeChecks the published sign-in metadata for unsafe URLs.exercised

Not run, with the reason · 11

3Real execution
real-executionCalls a tool and checks what really happens.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
4Secret leak
canary-leakPlants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
5Internal addresses
ssrfChecks whether a tool can be steered to internal addresses.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
6Unconfirmed changes
write-without-confirmationChecks whether tools that change data act without asking.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
7Bad input
error-handlingSends bad input and watches how the server answers.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
8Model requests
samplingChecks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
9Sensitive questions
elicitation-sensitive-dataChecks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
10Folder boundary
root-boundaryChecks whether the server reaches outside the folders it was given.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
11Log leaks
logging-side-channelChecks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
16Sign-in redirect
open-redirectChecks the sign-in redirect for abuse.Testing the sign-in redirect means sending probes to the operator's sign-in service, which we do not do.not run · our policy
17Consent handling
confused-deputyChecks consent handling when one service acts for another.Depends on the operator's own consent screen, which differs per server and cannot be tested from outside.not testable from outside

Does not apply to this server · 3

13Fake assistant turns
fake-assistant-turnChecks prompts that pose as the assistant's own words.The server exposes no prompts.not applicable
14Token passthrough
token-passthroughChecks whether the server forwards a user's token to other services.The server opened a session without sign-in, so there is no token flow to check.not applicable
15Token audience
token-audience-validationChecks whether tokens meant for another service are accepted.The server opened a session without sign-in, so there is no token flow to check.not applicable

Source: our own test, 2026-10-23, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

What happened during the test?

Feature #8

The steps in order, as the test record holds them.

0 msStarted a read-only session with the server's remote endpoint
5,246 msConnected after 0 redirects. No credential was sent or needed.
Read the inventory: 84 tools, 1 resource, 0 prompts.
9,070 msFinished: 4 checks exercised.

Reference

How is it classified?

18 fields

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

TopicAI-classified

commerce-and-marketing

AI-classified · 2026-10-23

Pricing modelAI-classified

no value

No value: the AI answer was held back because the quoted text did not clearly support it.

Programming language

does not apply

no existing GitHub repository (server declares no repository link, so there is nothing to fetch)

Hosting type

remote (hosted by the publisher)

registry · 2026-10-23

MCP capability

resources, tools

our test · 2026-10-23

Transport

streamable HTTP

registry · 2026-10-23

Required credentials

none declared

registry · no declaration is not a guarantee

Package registry

does not apply

remote-only server: no package is shipped, so there is no package registry

Freshness

0–30 days

registry updatedAt · 2026-10-23

Lifecycle status

active

registry · 2026-10-23

License class

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Integrity hash

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Signature / provenance

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Dependency advisories

does not apply

ships no package, so there are no dependencies to audit

Popularity

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Publisher signals

not stated

no readable GitHub owner to describe

Maintenance

does not apply

server declares no repository link, so there is nothing to fetch

Environment

the publisher's infrastructure

where it runs, from the hosting type

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.

Cite or correct this page

Sources and corrections

Suggested citation

ProtocolProbe. “io.github.replohq/replo: MCP server record.” Data checked 2026-10-23. https://protocolprobe.com/mcp/servers/io.github.replohq/replo

Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.

As JSON: this record in the API · API documentation.

Badge for your README

[![ProtocolProbe](https://protocolprobe.com/api/v1/badge/io.github.replohq/replo)](https://protocolprobe.com/mcp/servers/io.github.replohq/replo)

It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.

Something wrong, or is this yours?

If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.

Write to hello@protocolprobe.com · corrections log · methodology