Back to Browse

Sitehost Port MCP Server

Developer ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Netlify sites, deploys and builds as MCP tools.

About

Netlify sites, deploys and builds as MCP tools.

Security Report

5.2
Moderate5.2Moderate Risk

sitehost-port is a token-authenticated Netlify REST client that requires NETLIFY_AUTH_TOKEN, sends it only as a Bearer header, and validates tool arguments with zod. Its main concerns are the destructive site and deploy operations (delete_site, restore_deploy, update_site) with no confirmation step, and list_env_vars returning environment variable values into the AI assistant's context. Network and env var access match the server's stated purpose. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

NETLIFY_AUTH_TOKENRequired

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-sitehost-port": {
      "env": {
        "NETLIFY_AUTH_TOKEN": "your-netlify-auth-token-here"
      },
      "args": [
        "-y",
        "@reneturcios/sitehost-port"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

sitehost-port

Netlify sites as MCP tools, talking to the Netlify REST API. sitehost-port is a clean-room rebuild of the core surface of the Netlify MCP server, under a new name: fresh code, no copied branding. The original is Netlify's official remote MCP (hosted OAuth); hosted OAuth is NOT reproduced — this rebuild is a token REST client for the same API.

Tools (core subset, 12)

list_sites, get_site, create_site, update_site, delete_site, list_deploys, get_deploy, restore_deploy, trigger_site_build, list_site_builds, get_current_user, list_env_vars.

Not in this subset: forms and submissions, functions deployment and zip uploads, DNS zones and records, accounts/teams/members admin, deploy keys and SSL certificate provisioning, build hooks and build settings depth beyond name/custom_domain, split testing, Netlify Identity, large media, plugins.

Setup

Create a personal access token for your Netlify account and set it:

export NETLIFY_AUTH_TOKEN=nfp_...

Optionally override the API base with NETLIFY_API_BASE_URL (default https://api.netlify.com/api/v1). Without the token, every tool call fails with an error naming the missing variable.

CLI

npx @reneturcios/sitehost-port list_sites '{"per_page":10}'
npx @reneturcios/sitehost-port mcp        # stdio MCP server

Each tool name is a subcommand taking one JSON object argument.

MCP client config

{
  "mcpServers": {
    "sitehost-port": {
      "command": "npx",
      "args": ["-y", "@reneturcios/sitehost-port", "mcp"],
      "env": { "NETLIFY_AUTH_TOKEN": "nfp_..." }
    }
  }
}

Docker

docker run -i -e NETLIFY_AUTH_TOKEN ghcr.io/cloudcorprecords/sitehost-port

Development

npm install
npm run build
npm test

License

MIT

Reviews

No reviews yet

Be the first to review this server!