VibeHost

VibeHost is a hosting platform built for coding agents. The Model Context Protocol (MCP) server lets a connected AI agent — Claude Desktop, ChatGPT, Cursor, Claude Code, Codex, Windsurf, and others — deploy your sites, manage releases, and inspect logs through 46 tools.

VibeHost ships a remote MCP server that any MCP-compatible agent can connect to. Once authorised, the agent can create apps, push deployments (tarball over signed URL), promote between channels, roll back, manage custom domains and redirects, stream container logs, gate apps with passwords or share links, and grant per-app or per-team access. Every action runs through the same OAuth-bound permissions the dashboard uses — agents only see what the signing user can see.

- MCP server:https://api.vibehost.com/mcp— Streamable HTTP transport (the spec's recommended transport since 2025-06).
- OAuth 2.1 authorization server metadata:https://api.vibehost.com/.well-known/oauth-authorization-server(RFC 8414).
- Protected resource metadata:https://api.vibehost.com/.well-known/oauth-protected-resource/mcp(RFC 9728).
- Dynamic client registration:https://api.vibehost.com/api/v1/oauth/register(RFC 7591) — new agents self-register on first connect.

OAuth 2.1 authorization-code flow with mandatory PKCE (S256). Agents request themcpscope, plusoffline_accessif they need a refresh token. Access tokens are 60 minutes; refresh tokens are 30 days with single-use rotation and reuse detection (if the same refresh token is used twice, the entire chain for that client is revoked). Token audience is bound tohttps://api.vibehost.com/mcpvia RFC 8707, so a token minted for VibeHost won't be accepted by another resource server.

Public clients (Claude Desktop, Cursor, ChatGPT, Codex, Windsurf, Raycast, Continue, Devin, VS Code, and similar native agents) authenticate via dynamic client registration and PKCE — no client secret needed. The accepted redirect-URI schemes are:https://, loopbackhttp://localhostandhttp://127.0.0.1, plus a fixed set of native-agent custom schemes (claude-desktop:,cursor:,vscode:,windsurf:,raycast:,continue:,devin:,claude:,claude-code:,codium:). Confidential clients with a static client_id/secret pair are supported for server-to-server integrations; contact us to provision one.

The 46 tools split into 8 surfaces. Read-only tools are marked with(read); tools that change publicly visible internet state (deploys, public URLs, custom domains, password gates) carryopenWorldHint: trueso the client can prompt for confirmation.

- list_workspaces(read)— workspaces the OAuth token can reach.
- list_apps(read),get_app(read)— apps + their metadata.
- create_app,delete_app— provision a new app (private by default) or soft-delete one.
- set_app_visibility— public / workspace / private.

- check_blobs_missing(read),request_upload— chunked tarball upload via signed R2 URLs.
- deploy— promote a manifest to a channel. Returns immediately withstatus: starting; pollget_deploymentuntil healthy.
- get_deployment(read),get_logs(read)— release inspection + container logs.
- request_deployment_download(read)— signed URL to re-download a deployment's tarball (powersvibehost pull).
- get_screenshot(read)— preview image captured by the previewer worker on each healthy deploy.

- list_channels(read),create_channel.
- promote— takes an existing deployment in one channel and points another channel at the same release bytes (no rebuild). Typical flow: deploy to a preview channel, verify, then promote toproduction.
- rollback— within a single channel, re-points it at one of that channel's earlier deployments.

- list_app_grants(read)— who has access (team / email).
- grant_app_email_access,revoke_app_email_access,grant_app_team_access,revoke_app_team_access— viewer / deployer / admin per recipient.
- get_app_password_info(read),set_app_password,clear_app_password— shared password gate on top of visibility.
- list_share_links(read),create_share_link,revoke_share_link— anonymous tokenised URLs with optional TTL.

- list_custom_domains(read),add_custom_domain,verify_custom_domain,remove_custom_domain.
- verify_custom_domainqueries public DNS resolvers for your CNAME / TXT records.add_custom_domainandremove_custom_domainchange VibeHost's view of the domain.list_custom_domainsis read-only.

- list_redirect_rules(read),add_redirect_rule,remove_redirect_rule,bulk_import_redirect_rules— per-app redirect / rewrite rules served by Cloudflare Workers.

- list_workspace_members(read),remove_workspace_member.
- list_team_members(read),remove_team_member.
- list_workspace_invitations(read),invite_to_workspace,revoke_workspace_invitation.
- list_team_invitations(read),invite_to_team,revoke_team_invitation. Invitation emails are sent via Resend.

Once your agent is connected tohttps://api.vibehost.com/mcp, these prompts work out-of-the-box. The agent calls multiple tools in sequence; you usually don't pick tool names manually.

- “Deploy the contents of./distto a new VibeHost app calledlanding-v2and give me the URL.”
→create_app→check_blobs_missing→request_upload→deploy→get_deployment.
- “Sharelanding-v2withbob@example.comas a deployer.”
→get_app→grant_app_email_access. (Email grants persist until revoked; for time-bounded access usecreate_share_linkwith a TTL instead.)
- “Rolllanding-v2production back to the previous release.”
→list_channels+get_deployment→rollback.
- “Add the custom domainlanding.example.comtolanding-v2and tell me what CNAME I need to set.”
→add_custom_domain→verify_custom_domain(returns the expected CNAME + TXT records).
- “Show me the last 50 log lines fromlanding-v2's current production deployment.”
→list_channels→get_deployment→get_logs.

Read + write. Of the 46 tools, 18 are strictly read-only (everything prefixedlist_,get_,check_); the remaining 28 write or change state. The write tools are annotated withdestructiveHint(delete / revoke / clear) andopenWorldHint(changes publicly visible internet state — deploys, share links, custom domains, password gates) so MCP clients can surface a confirmation prompt before calling.

See VibeHost'sprivacy policy— same policy applies to MCP-mediated access. The MCP server stores no additional data: every tool call is authenticated against the same user / token DB rows the dashboard uses, every state change is audit-logged the same way, and OAuth refresh tokens are hashed at rest. Tools that touch third-party services (invitation emails via Resend; DNS lookups against public resolvers forverify_custom_domain) declareopenWorldHint: trueso clients can warn users.

{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://gntc.com/#organization","name":"GNTC","url":"https://gntc.com/","logo":{"@type":"ImageObject","url":"https://gntc.com/logo-512.png","width":512,"height":512},"description":"Agentic Enterprise AI. GNTC builds enterprise AI agents, not tools that need clicking.","sameAs":["https://www.wikidata.org/wiki/Q140278791"]},{"@type":"WebSite","@id":"https://vibehost.com/#website","name":"VibeHost","url":"https://vibehost.com/","description":"Deploy AI-built apps to a private team URL in seconds. Free static hosting for sites built with Claude Code, Cursor, Codex, and ChatGPT.","publisher":{"@id":"https://gntc.com/#organization"}},{"@type":"SoftwareApplication","@id":"https://gntc.com/#product-vibehost","name":"VibeHost","url":"https://vibehost.com/","applicationCategory":"DeveloperApplication","operatingSystem":"Web","description":"Deploy AI-built static sites and Next.js apps to private team URLs via CLI, MCP, or Chrome extension. Works with Claude Code, Cursor, Codex, ChatGPT, and 10+ coding agents.","datePublished":"2026-05-28","offers":[{"@type":"Offer","name":"Free","price":"0","priceCurrency":"USD"},{"@type":"Offer","name":"Business","price":"20","priceCurrency":"USD"}],"publisher":{"@id":"https://gntc.com/#organization"},"sameAs":["https://www.wikidata.org/wiki/Q140278813"]}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"VibeHost MCP Server","description":"How to connect AI coding agents to VibeHost via the Model Context Protocol. Deploy static sites and Next.js apps, manage releases, and stream logs through 46 MCP tools.","author":{"@id":"https://vibehost.com/#organization"},"publisher":{"@id":"https://vibehost.com/#organization"},"mainEntityOfPage":"https://vibehost.com/docs/mcp","inLanguage":"en","proficiencyLevel":"Beginner"}

An MCP server for integrating with Coolify, the self-hostable alternative to Netlify and Vercel.

Multi-cloud deployment MCP server — deploy to Cloudflare Pages, Vercel, or Netlify from a single tool with 26 MCP tools.

The remote MCP bridge that lets any AI agent deploy, manage, and scale applications to Cloudflare, Netlify, or Vercel.

Core AWS MCP server providing prompt understanding and server management capabilities.

An MCP service for deploying HTML content to EdgeOne Pages and obtaining a publicly accessible URL.

Create, build, deploy, and manage Netlify resources using natural language.

An authentication-free, remote MCP server designed for deployment on Cloudflare Workers.

An authentication-free, remote MCP server designed for deployment on Cloudflare Workers.

An authentication-free, remote MCP server designed for easy deployment on Cloudflare Workers.

A template for deploying a remote MCP server on Cloudflare Workers without authentication. It supports one-click deployment or local setup via npm.