此 MCP 可以做什么
Publishes and manages HTTPS websites and connects them to cataloged MCP-compatible services whose tools can be called from site pages.
功能
工具
16
工具
attach_site_connector
Attach a connector to a website
Attach an organization connector to a website so pages served from that site can call the connector's tools.
Attaching is a grant, and it is wider than it looks: every person who can open the page can call every tool the connector exposes, using the credential Valet holds for it. On a private site that is every member of the organization; on a password-protected or shared one it is everyone holding the password or the link. Valet does not narrow the connector's reach for a page, so attach only what the page needs and check the site's access mode before you do.
Only an organization connector that is an HTTP MCP server — transport sse or streamable-http — can be attached; list_attachable_connectors reports exactly that set. A connector that belongs to a single agent cannot back a page. A page calls the connector by its own name, which is what list_site_connectors reports and what the page's request path carries. Attaching a connector that is already attached changes nothing and is safe to repeat. Requires connecting a Valet account.
幂等
输入模式
{'type': 'object', 'required': ['site', 'connector'], 'properties': {'site': {'type': 'string', 'description': "Required. The site's name."}, 'org_name': {'type': 'string', 'description': 'The Valet organization the site and the connector belong to. Omit to use the organization the account joined first.'}, 'connector': {'type': 'string', 'description': "Required. The organization connector's name. It is also the name a page served from the site calls it by."}}}
call_site_connector
Call a website's connector
Run one tool on a connector attached to a website and return what the connector answered. It is the sampling step of building a page that calls live data: discover, attach, read the schemas, then call one tool for real before you write any page code.
Call it because a schema is not a shape. list_site_connectors gives you each tool's name and argument schema, which is what your call has to satisfy; this tells you what comes back, which is what the page has to parse. Results are text to read, not JSON to assume: many servers answer in markdown tables or prose, some expose a single meta-tool taking a whole command as one string, and a server that completes the handshake can still refuse half its tools when the stored credential's scope does not cover them. One real call settles all three.
This runs the tool for real, with the organization's own credential and whatever side effects the tool has. It is not a dry run and there is no preview: a tool that sends, writes, or deletes will do so. Prefer a read-only tool when you are only learning the shape, and ask the user before running anything that changes their systems.
The connector must already be attached to the site — attach_site_connector does that — and must be an HTTP MCP server. A tool that answers with an error is reported as an error carrying the connector's own text, which is usually the sentence that says what to fix. Requires connecting a Valet account.
可能执行破坏性操作
可访问外部资源
输入模式
{'type': 'object', 'required': ['site', 'connector', 'tool'], 'properties': {'args': {'type': 'object', 'description': "Arguments for the tool, as an object matching the tool's own input schema from list_site_connectors. Omit it for a tool that takes none."}, 'site': {'type': 'string', 'description': "Required. The site's name."}, 'tool': {'type': 'string', 'description': 'Required. The tool to run, spelled exactly as list_site_connectors reports it.'}, 'org_name': {'type': 'string', 'description': 'The Valet organization the site belongs to. Omit to use the organization the account joined first.'}, 'connector': {'type': 'string', 'description': 'Required. The name the connector is attached under, which is the name a page calls it by.'}}}
create_connector
Create a connector from the catalog
Create an organization connector from a Valet catalog entry. It is the step after list_catalog_connectors found the entry for the product the user named; attach_site_connector then lets a website's pages call it.
It creates an entry whose credential is a secret. Pass each slot the entry asks for in secrets, as slot name to value. A slot the organization already holds as a secret needs no value here. If a required slot has neither, nothing is created and the answer names the slots still needed.
A key given here passes through this conversation. That is a real cost and it is the user's call to make: if they hand you the key, use it, and say that they could instead enter it on the dashboard's Integrations page, where it goes straight to Valet. The answer names the slots that were filled and never the values in them.
An entry that authorizes in a browser — OAuth, or a Composio toolkit — is not created here. The answer gives the entry's name and the Integrations page, which creates the connector and runs the authorization in one place. An entry the organization already has is reported as already there; no second connector is made. Requires connecting a Valet account.
输入模式
{'type': 'object', 'required': ['entry'], 'properties': {'entry': {'type': 'string', 'description': "Required. The catalog entry's name, spelled exactly as list_catalog_connectors reports it."}, 'secrets': {'type': 'object', 'description': "The entry's secret slots, as slot name to value. Valet stores each as an organization secret. A value passed here travels through this conversation; leave it out and point the user at the dashboard's Integrations page when they would rather it did not. A slot the organization already holds needs no value.", 'additionalProperties': {'type': 'string'}}, 'org_name': {'type': 'string', 'description': 'The Valet organization to create the connector in. Omit to use the organization the account joined first.'}}}
delete_site
Delete a website
Permanently delete a website and stop serving it. Identify it by name, which requires connecting a Valet account, or by the site_token returned when it was published anonymously — whoever published a site can always take it down. This cannot be undone.
可能执行破坏性操作
幂等
输入模式
{'type': 'object', 'anyOf': [{'required': ['name']}, {'required': ['site_token']}], 'properties': {'name': {'type': 'string', 'description': "Give this or site_token. The site's name, which requires a connected Valet account."}, 'org_name': {'type': 'string', 'description': 'The Valet organization the site belongs to. Omit to use the organization the account joined first.'}, 'site_token': {'type': 'string', 'description': 'Give this or name. The token returned when the site was published anonymously; it identifies that one site.'}}}
detach_site_connector
Detach a connector from a website
Detach a connector from a website, so pages served from that site can no longer call it. The connector itself is left in place for the rest of the organization, and nothing else about the site changes.
This is how the grant attaching made is taken back. While a connector is attached, everyone who can open the page can call every tool it exposes with the credential Valet holds, so detaching is the way to end that reach. A page that still calls the connector starts getting an error, which is the intended outcome. Requires connecting a Valet account.
可能执行破坏性操作
幂等
输入模式
{'type': 'object', 'required': ['site', 'connector'], 'properties': {'site': {'type': 'string', 'description': "Required. The site's name."}, 'org_name': {'type': 'string', 'description': 'The Valet organization the site belongs to. Omit to use the organization the account joined first.'}, 'connector': {'type': 'string', 'description': 'Required. The name the connector is attached under, which is the name a page calls it by.'}}}
get_connector_client
Get the connector client contract
Get how a page served from a Valet site talks to the connectors attached to it. It is the pair to get_design_system: consult that tool for the artifact's identity, this one for how it talks to its connectors. Call it before writing any page code that fetches from a connector.
Returns the same-origin request contract and a paste-whole session helper that handles both sessionless and stateful connectors, plus the rules a page has to follow: handling a 403, recovering a lapsed session, and never caching a response on the caller's behalf.
This needs no Valet account. It answers with static guidance about how pages work — nothing here reads an organization or a site — so an agent can call it before running any OAuth flow.
只读
幂等
输入模式
{'type': 'object', 'properties': {}}
get_design_system
Get the design system
Get the identity brief to follow before you build or substantially rewrite an artifact. Returns the caller's organization design system when it has one, otherwise the Valet default. Honor an artifact form the user requests. Otherwise choose the artifact form and treatment from its audience, job, and material. The design system supplies identity, not structure. Follow it wherever it speaks, subject to the user's explicit request and to safety, accessibility, and medium correctness. Artifact guidance and model judgment decide every choice it leaves open; do not layer the default design system beneath it. Files a user supplies finished are published unchanged, not restyled. By default this requires a connected account. Pass anonymous: true only when building an explicitly anonymous site; no organization is then consulted and the Valet default is returned.
只读
幂等
输入模式
{'type': 'object', 'properties': {'org_name': {'type': 'string', 'description': 'The Valet organization whose design system to read. Omit to use the organization the account joined first.'}, 'anonymous': {'type': 'boolean', 'description': 'Set true only when building an explicitly anonymous site. No organization is consulted and the Valet default is returned. Omit for the account-first path.'}}}
get_site
Get a website
Get one website's URL, access mode, version, and expiry. Identify it by name, which requires connecting a Valet account, or by the site_token returned when it was published anonymously.
A password-protected site reports that it is gated and never its visitor password. Read the password from the Valet dashboard instead.
只读
幂等
输入模式
{'type': 'object', 'anyOf': [{'required': ['name']}, {'required': ['site_token']}], 'properties': {'name': {'type': 'string', 'description': "Give this or site_token. The site's name, which requires a connected Valet account."}, 'org_name': {'type': 'string', 'description': 'The Valet organization the site belongs to. Omit to use the organization the account joined first.'}, 'site_token': {'type': 'string', 'description': 'Give this or name. The token returned when the site was published anonymously; it identifies that one site.'}}}
list_attachable_connectors
List connectors a website can hold
List the organization connectors a website can hold — the discovery step before attach_site_connector.
Only connectors a page can actually call appear: HTTP MCP servers reached over the sse or streamable-http transport. Command connectors and stdio MCP servers are excluded by definition — they run inside an agent's container and no page can reach them — so a connector the organization has that is not listed here cannot back a site.
Pass site to mark which connectors that site already holds; attached connectors stay listed because attaching is idempotent. Tool schemas are not included — attach the connector, then list_site_connectors reports its live tools and their schemas, which is the moment to write the page's calls. Requires connecting a Valet account.
只读
幂等
输入模式
{'type': 'object', 'properties': {'site': {'type': 'string', 'description': 'A site to mark already-attached connectors against. Omit for the plain organization-wide list.'}, 'org_name': {'type': 'string', 'description': 'The Valet organization whose connectors to list. Omit to use the organization the account joined first.'}}}
list_catalog_connectors
List the connector catalog
List the connectors Valet curates — the catalog an organization creates a connector from. Reach for it when list_attachable_connectors returned nothing that serves the data a page needs: the organization has no connector for it yet, and this says whether Valet has an entry for the product and what setting it up would take.
Each entry says how its credential arrives. An entry that takes a secret names each slot it asks for and what the slot is. An entry that authorizes in a browser, or connects through Composio, says so — a person completes those on the dashboard's Integrations page, and no answer here can stand in for that.
Each entry also says whether a website's pages could call it. That is a marker, not a filter: an entry only an agent's container can run is still listed, because "Valet has your product, but no page can call it" is a real answer and reporting it as missing is not. Requires connecting a Valet account.
只读
幂等
输入模式
{'type': 'object', 'properties': {'org_name': {'type': 'string', 'description': 'The Valet organization a connector would be created in. The catalog is the same for every organization; this names the one the answer points the next step at. Omit to use the organization the account joined first.'}}}
list_site_connectors
List a website's connectors
List the connectors attached to a website, each with the tools a page served from that site can call. Read it before writing a page that calls one: the tool names and argument schemas it returns are what the page's own calls have to match, and guessing them produces a page that fails on its first click.
It lists what is attached to this one site, not what the organization has available. A connector nobody attached to this site does not appear here, and attaching one is a separate, deliberate act — it hands the connector's reach to everyone who can open the page.
Each connector says whether a page can call it, and whether the server keeps an MCP session the page must hold — the page runs the initialize handshake, replays the Mcp-Session-Id header, and re-initializes when the session lapses. The broker forwards the handshake and the tool calls, and always hands the page one JSON document per request, whatever framing the server chose. A connector that could not be reached reports its own error and leaves every other row intact, so one expired credential does not hide the rest. Requires connecting a Valet account.
只读
可访问外部资源
幂等
输入模式
{'type': 'object', 'required': ['site'], 'properties': {'site': {'type': 'string', 'description': "Required. The site's name."}, 'org_name': {'type': 'string', 'description': 'The Valet organization the site belongs to. Omit to use the organization the account joined first.'}}}
list_sites
List websites
List the websites in a Valet organization: name, URL, access mode, and when each was last published. It is the way to recover a site's name when an earlier publish has scrolled out of the conversation. Requires connecting a Valet account.
只读
幂等
输入模式
{'type': 'object', 'properties': {'org_name': {'type': 'string', 'description': 'The Valet organization to list. Omit to use the organization the account joined first.'}}}
publish_site
Publish a website
Publish files as a live website on the public internet, served over HTTPS. Use it when a report, essay, slide-like narrative, dashboard, marketing surface, or other static artifact reads better at a live URL than as conversation text. Honor an artifact form the user requests. Otherwise choose the artifact form and treatment from its audience, job, and material. A request for a live URL chooses delivery, not one long scrolling page.
Before building or substantially rewriting an artifact, call get_design_system. The organization design system supplies identity, not structure. Follow it wherever it speaks. Artifact guidance and model judgment decide the remaining choices; do not layer the default design system beneath it. Safety, accessibility, and medium correctness may adapt an identity choice. When the artifact is HTML, render it at 390px and verify the document itself does not overflow. Give wide flex or grid children min-width: 0. Use minmax(0, 1fr) for flexible tracks so local scrollers stay local. When a local scroller is necessary, show a visible cue when more content is available. For a table, keep the identifying column visible when practical or use another narrow-screen representation. Inspect computed foreground and background colors and verify rendered text contrast on every surface; safe tokens do not prove the intended selectors matched. Valet may place a bottom-center dock over the published page. When the page scrolls vertically, give its main scroll container bottom padding or equivalent clearance of about calc(6rem + env(safe-area-inset-bottom)) so the final content can scroll fully above the dock. Do not introduce scrolling solely to create this clearance. For fixed-height or slide-like artifacts, keep essential content and controls away from the bottom center when the composition allows.
title and description are required on every publish, and a call missing either is refused: title names the site for a person, and description says in one sentence what it holds. A site's name becomes part of its URL, so those two are what a reader has to go on wherever the site is listed. Write them for the person who will come back to this page in a month.
Content is text written here: HTML, CSS, JavaScript, Markdown, JSON, SVG. Images, PDFs, video, and other binary assets are not supported on this surface — publish those with the Valet CLI.
Publishing uses a connected Valet account by default and creates a permanent, private site. Pass anonymous: true only when the user explicitly wants a temporary public site. It is public to anyone who has the link, and it may be removed 36 hours after it is created, unless it is claimed. The result carries a claim URL that moves the site into a Valet account and makes it permanent, and a site_token that updates the same site on a later call. Give that token back to revise the site instead of publishing a second copy of it; with an account, give the site's name instead.
可能执行破坏性操作
可访问外部资源
输入模式
{'type': 'object', 'required': ['files', 'title', 'description'], 'properties': {'name': {'type': 'string', 'description': "The site's name, which becomes the last segment of its URL, https://<org>.valet.run/<name>. Omit to have one generated. Naming a site that already exists republishes it. Requires a connected Valet account."}, 'files': {'type': 'array', 'items': {'type': 'object', 'required': ['path', 'content'], 'properties': {'path': {'type': 'string', 'description': "Required. Path within the site, relative and with no leading slash: index.html, styles/main.css. It may not contain '..'."}, 'content': {'type': 'string', 'description': "Required. The file's complete text content."}}}, 'minItems': 1, 'description': "Required. The site's files. One file named index.html is the minimum; add more for stylesheets, scripts, or further pages."}, 'title': {'type': 'string', 'maxLength': 1024, 'minLength': 1, 'description': "Required. What the site is called, written for a person: 'Q3 Migration Audit', not a hostname. It labels the site wherever it is listed, so write the same thing the page's own <title> says."}, 'org_name': {'type': 'string', 'description': 'The Valet organization to publish into. Omit to use the organization the account joined first.'}, 'anonymous': {'type': 'boolean', 'description': 'Set true only when the user explicitly wants a temporary public site without account ownership. Omit for the account-first path, which connects a Valet account when needed.'}, 'site_token': {'type': 'string', 'description': 'The token an earlier anonymous publish returned. Give it back to update that same site instead of creating another.'}, 'description': {'type': 'string', 'maxLength': 1024, 'minLength': 1, 'description': 'Required. One sentence saying what the site holds, for a person deciding whether to open it. It is shown beside the title wherever the site is listed.'}, 'idempotency_key': {'type': 'string', 'description': "An opaque key of your choosing. Repeating a call with the same key returns the first call's result instead of publishing a second site, which makes a retry safe."}}}
rename_site
Rename a website
Rename a website and move it to https://<org>.valet.run/<new-name>. The old address stops serving the site and its name becomes available to another site or app in the same organization. Requires connecting a Valet account.
可能执行破坏性操作
输入模式
{'type': 'object', 'required': ['name', 'new_name'], 'properties': {'name': {'type': 'string', 'description': "Required. The site's current name."}, 'new_name': {'type': 'string', 'description': "Required. The site's new name. It also becomes the last path segment of the new URL."}, 'org_name': {'type': 'string', 'description': 'The Valet organization the site belongs to. Omit to use the organization the account joined first.'}}}
set_site_access
Set website access
Set who can reach a website: public serves it to anyone who has the link, private serves it only to members of the organization that owns it, and password serves it to anyone who enters a shared visitor password. Requires connecting a Valet account.
Password mode takes the password as the password argument. It is a shared visitor password the owner hands to whoever should see the site, not a Valet credential, and it is at most 72 bytes.
幂等
输入模式
{'type': 'object', 'required': ['name', 'mode'], 'properties': {'mode': {'enum': ['public', 'private', 'password'], 'type': 'string', 'description': 'Required. The access mode. public serves the site to anyone who has the link. private serves it only to members of the organization that owns it. password serves it to anyone who enters the shared visitor password.'}, 'name': {'type': 'string', 'description': "Required. The site's name."}, 'org_name': {'type': 'string', 'description': 'The Valet organization the site belongs to. Omit to use the organization the account joined first.'}, 'password': {'type': 'string', 'description': "The shared visitor password. Required for password mode and rejected for the others. Anyone who enters it can open the site, so a site's owner passes it to whoever should see the page. At most 72 bytes."}}}
share_site
Share a website by email
Share a website with specific people by email, whether it is private or password-protected — sharing does not change who else can reach it. Each address is mailed a link from Valet that opens the site; the recipient needs no Valet account of their own, only the link, so anyone holding the email can open the site and forwarding it forwards access. Sharing again with an address that already has access re-sends the same link rather than creating a second one. Requires connecting a Valet account.
可能执行破坏性操作
输入模式
{'type': 'object', 'required': ['name', 'emails'], 'properties': {'name': {'type': 'string', 'description': "Required. The site's name."}, 'emails': {'type': 'array', 'items': {'type': 'string'}, 'minItems': 1, 'description': 'Required. The email addresses to share the site with, at most 10 at a time. Sharing again with an address that already has access re-sends the same link rather than creating a second one.'}, 'message': {'type': 'string', 'description': 'An optional note included in the email, shown to the recipient as a quote beside the link. At most 500 characters.'}, 'org_name': {'type': 'string', 'description': 'The Valet organization the site belongs to. Omit to use the organization the account joined first.'}, 'access_ttl_seconds': {'type': 'integer', 'minimum': 0, 'description': 'How many seconds of access the first open starts, after which the link stops working. Omit, or pass 0, for access that never expires this way. Composes with expires_in_seconds: the unopened deadline governs until the first open replaces it.'}, 'expires_in_seconds': {'type': 'integer', 'minimum': 0, 'description': 'How many seconds from now the link stops working if nobody has opened it yet. Omit, or pass 0, for a link that never expires this way.'}}}
历史
近期工具变更
已添加
share_site
2026年9月17日 12:52
已添加
set_site_access
2026年9月17日 12:52
已添加
rename_site
2026年9月17日 12:52
已添加
publish_site
2026年9月17日 12:52
已添加
list_sites
2026年9月17日 12:52
已添加
list_site_connectors
2026年9月17日 12:52
已添加
list_catalog_connectors
2026年9月17日 12:52
已添加
list_attachable_connectors
2026年9月17日 12:52
已添加
get_site
2026年9月17日 12:52
已添加
get_design_system
2026年9月17日 12:52
已添加
get_connector_client
2026年9月17日 12:52
已添加
detach_site_connector
2026年9月17日 12:52
已添加
delete_site
2026年9月17日 12:52
已添加
create_connector
2026年9月17日 12:52
已添加
call_site_connector
2026年9月17日 12:52
已添加
attach_site_connector
2026年9月17日 12:52
发现
类似的 MCP 服务器
agent-exec
io.sslip.128.221.67.45.agent-exec/agent-exec
Provides pay-per-use sandbox code execution, temporary storage, distributed locks, attestations, durable watches, and process han…
hyperion
com.thetempleofdoom.hyperion/hyperion
Acts as a paid MCP tool marketplace and utility gateway with server discovery, HTTP and JavaScript tools, research, data conversi…
Algenta MCP Server
io.github.thyn-ai/algenta
Provides governed data onboarding, connector browsing, deterministic simulations, agent-run lifecycles, capability routing, deplo…
mcphost
dev.mcphost/mcphost
Hosts MCP tools over HTTP and provides tenant billing, tool publishing and discovery, agent directories, inter-agent messaging, g…
shiply
now.shiply/shiply
Publishes and manages web applications with SQL databases, serverless functions, domains, email tests, client intake, contracts, …
XGR MCP Gateway
io.github.xgr-network/xdala-workflow-builder
Provides an MCP gateway for XGRChain and XDaLa workflows, including blockchain explorer queries, session inspection, transaction …
Fine Structure
ai.finestructure/fine-structure
Builds and hosts full-stack applications from prompts and supports agent communication through WhatsApp and email.
mcp
cloud.redu/mcp
Provisions and manages cloud instances, networks, storage, databases, backups, VPNs, application deployments, and autocoding-agen…