Back to Browse

Misardev MCP Server

Developer ToolsModerate5.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Create, build and deploy projects, roll back with checkpoints, connect custom domains, and search…

About

Create, build and deploy projects, roll back with checkpoints, connect custom domains, and search…

Remote endpoints: streamable-http: https://api.misar.io/dev/mcp

Security Report

5.2
Moderate5.2Moderate Risk

The MisarDev MCP server is a developer-tools server requiring an API key (MISARDEV_API_KEY or config file) for all actions, with discovery endpoints intentionally unauthenticated and no evident exfiltration, shell execution, or hardcoded secrets in the reviewed code. Its network access to the MisarDev API and deployment/domain tools matches its stated purpose, though destructive operations rely on prompt-level guidance and the output is truncated so the full vendored upsell module and tool implementations could not be fully reviewed. Supply chain analysis found 5 known vulnerabilities in dependencies (1 critical, 3 high severity). Package verification found 1 issue.

10 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

What You'll Need

Set these up before or after installing:

Your MisarDev API key (mdk_…). Create one at https://misar.dev/settings/api-keys.Required

Environment variable: MISARDEV_API_KEY

Override the API base URL. Only needed for self-hosted instances.Optional

Environment variable: MISARDEV_BASE_URL

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

MisarDev MCP Server

Create, build and deploy projects, roll back with checkpoints, connect custom domains, and search your code and the web — from any AI assistant.

npm smithery license

54 tools · 5 prompts · 3 resources · 4 agent skills

Works with Claude (Desktop, Code, and web), Cursor, VS Code, Windsurf, Cline, Zed, Gemini CLI, ChatGPT, and any other MCP-compatible client — over stdio or Streamable HTTP.


Install

Smithery (recommended)

npx -y @smithery/cli install misar/misardev-mcp --client claude

Claude Code

claude mcp add misardev -- npx -y @misardev/mcp@latest

Manual (any client)

{
  "mcpServers": {
    "misardev": {
      "command": "npx",
      "args": ["-y", "@misardev/mcp@latest"],
      "env": { "MISARDEV_API_KEY": "mdk_your_key_here" }
    }
  }
}

Ready-made configs for every client live in connectors/.

Remote (no install)

{
  "mcpServers": {
    "misardev": {
      "type": "streamable-http",
      "url": "https://api.misar.io/dev/mcp",
      "headers": { "Authorization": "Bearer mdk_your_key_here" }
    }
  }
}

Authentication

Create an API key at https://misar.dev/settings/api-keys (Settings → API keys) — it starts with mdk_ — and give it to the server in one of three ways: the MISARDEV_API_KEY environment variable, your MCP client's env block, or { "api_key": "mdk_…" } in ~/.misardev/config.json.

Self-hosted instances: set MISARDEV_BASE_URL.


Tools

ToolDescription
list_projectsList the projects you own or can access, newest first, with cursor pagination.
get_projectGet one project by ID — name, description, settings, visibility, version and deployment fields.
create_projectCreate a new, empty project (optionally seeded with a file map).
update_projectUpdate a project's name, description, files, settings or visibility.
delete_projectMove a project to the trash.
restore_projectRestore a project from the trash.
archive_projectArchive (archived=true) or un-archive (archived=false) a project.
duplicate_projectCopy a project (files and settings) into a new project you own, named after the original.
get_project_filesGet a project's file tree with file contents.
write_project_filesCreate, update or delete files in a project (1–100 per call, each up to 1 MB; paths are relative, no ..).
import_artifactImport a published Misar artifact page into a project as imported/ARTIFACT_ID.html.
get_project_knowledgeRead a project's knowledge — the standing notes (product context, conventions, constraints) the AI builder reads on every change..
update_project_knowledgeReplace a project's knowledge (up to 20,000 characters) — the standing notes the AI builder reads on every change.
get_project_backendShow a full-stack project's database backend: whether one is provisioned, its schema name, table count and connection state..
provision_project_backendProvision the database backend for a full-stack project: its own isolated schema, protected by row-level security.
list_templatesList the starter templates a new project can begin from, with their IDs, names and categories.
get_templateGet one template by ID — its description, stack and the files it would create..
use_templateCreate a new project from a template.
deploy_projectPublish a project to the public internet on the MisarDev runtime (optionally at a chosen subdomain).
get_deployment_statusGet a project's current deployment: whether it is live, its URL, subdomain and custom-domain state.
unpublish_projectTake a published site offline.
check_subdomainCheck whether a subdomain label is free for this project and, if not, get suggestions.
update_project_subdomainMove a project to a new .misar.app address (check it first with check_subdomain).
list_buildsList your recent AI builds across all projects, newest first, with status, model and the project each belongs to..
get_build_statusGet whether a project currently has a build running and its latest build state.
cancel_buildCancel the build currently running on a project.
list_checkpointsList a project's saved checkpoints (up to 100, newest first) with label, changed paths and timestamp.
restore_checkpointRestore a project's files to a checkpoint.
rename_checkpointGive a checkpoint a human-readable label (1–80 characters) so it is easy to find later..
delete_checkpointDelete one checkpoint from a project's version history.
get_custom_domainGet a project's custom domain, its status, the DNS record the user must set, and whether DNS already resolves to the platform (TLS is issued automatically once it does)..
set_custom_domainAttach a domain the user owns to a published project and provision routing/TLS.
remove_custom_domainDetach a project's custom domain and remove its route.
lookup_domainLook up a domain's public registration data (RDAP): whether it is registered, its registrar and key dates.
search_workspaceSearch across your projects and the public catalogue (templates, skills, the published gallery) by name and description.
web_searchAnswer a question from the live web with citations (MisarDev's grounded search).
create_chat_completionRun a one-shot, non-streaming chat completion on MisarDev's OpenAI-compatible model API.
index_project_codeIndex a project's files for semantic code search (RAG).
search_project_codeSemantic search inside an indexed project's code.
get_code_index_statsGet embedding statistics for a project — how many files and chunks are indexed and when..
clear_code_indexDelete every embedding for a project.
upgradeShow the current MisarDev plan, how much of each quota (builds, edits, projects) is left this period, and the link to compare plans and upgrade.
get_usageGet detailed usage for the account.
get_subscriptionGet the account's subscription: plan, status, current period end and whether it cancels at period end..
list_plansList MisarDev's plans with prices, limits and features — what each upgrade would unlock..
list_notificationsList your notifications (build finished, deploy failed, invitations…), newest first, with the unread count.
mark_notifications_readMark every notification as read, clearing the unread badge.
list_api_keysList your API keys — name, prefix, created/expiry dates and IP allowlist.
create_api_keyCreate a new API key.
revoke_api_keyRevoke an API key by ID.
mark_notification_readMark one notification as read (use mark_notifications_read for all of them)..
list_audit_logList your own audit trail — API-key, deployment and billing events where you were the actor, newest first.
list_connectorsList the connectors available on MisarDev and whether each is enabled for you, with its category, status and dashboard path..
toggle_connectorEnable or disable a connector by slug (from list_connectors).

Prompts

Reusable workflows your client exposes as slash-commands.

PromptDescription
ship_a_projectTake a project from a template to a live, verified deployment.
undo_a_bad_changeRoll a project back to an earlier checkpoint and, if it was live, redeploy.
deployment_healthReview recent builds and deployments and say what needs attention.
search_the_codebaseAnswer a question about a project from its indexed code.
usage_and_keys_auditReview plan usage and API keys for anything unexpected.

Resources

Read-only context an agent can attach without spending a tool call.

URIDescription
misardev://projectsYour active projects, newest first — the IDs every other tool takes..
misardev://templatesAvailable starter templates, so a new project begins from a real one..
misardev://planCurrent plan and remaining builds, edits and projects this period — the baseline for any quota question..

Agent skills

Bundled in skills/ — guidance an agent loads when a task matches.

SkillUse when
connect-custom-domainAttach a domain the user owns to a published MisarDev project and walk them through the DNS record until TLS is live. Use for "use my own domain", custom domain setup, or a domain that is not serving yet.
search-the-codebaseAnswer questions about a MisarDev project from its indexed code, citing the files used. Use when asked how something works, where code lives, or to explain part of a MisarDev project.
ship-a-projectCreate a MisarDev project from a template and publish it, verifying the address before and the live site after. Use when asked to start, build, launch or deploy a project in MisarDev.
undo-a-bad-changeRoll a MisarDev project back to an earlier checkpoint and, if it is published, redeploy the restored version. Use when the user says a change broke something, wants the previous version back, or asks to undo.

Safety

Destructive and irreversible actions are annotated (destructiveHint) so clients can prompt before running them. The skills instruct agents to confirm before anything that sends mail, publishes content, or is otherwise visible to other people.

Discovery (initialize, tools/list, prompts/list, resources/list) never requires credentials, so registries can index the server without one. Every action does.


Links

MIT © Misar.AI

Reviews

No reviews yet

Be the first to review this server!