Dreamlit
REMOTE · MCP.DREAMLIT.AI · SCANNED AUG 3
Create, test, publish, and manage Dreamlit notification workflows from AI clients.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →
Endpoint Security81
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS not yet verified: we couldn't determine whether a plaintext access path exists. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server supports Client ID Metadata Documents, the current MCP client-registration mechanism. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability81
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2082 tokens (~173/item across 12 items; 11 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
- Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
remote · mcp.dreamlit.ai
claude mcp add --transport http ai-dreamlit-mcp https://mcp.dreamlit.ai/mcp
[mcp_servers.ai-dreamlit-mcp] url = "https://mcp.dreamlit.ai/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"ai-dreamlit-mcp": {
"type": "remote",
"url": "https://mcp.dreamlit.ai/mcp",
"enabled": true
}
}
} openclaw mcp add ai-dreamlit-mcp --url https://mcp.dreamlit.ai/mcp --transport streamable-http
mcp_servers:
ai-dreamlit-mcp:
url: "https://mcp.dreamlit.ai/mcp" {
"mcpServers": {
"ai-dreamlit-mcp": {
"type": "http",
"url": "https://mcp.dreamlit.ai/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 1 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
- 31 Jul 26 +3
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 28 Jul 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 27 Jul 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 26 Jul 26 70
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Probed https://mcp.dreamlit.ai/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=dreamlit.ai | CN=WE1,O=Google Trust Services,C=US | 27 Jun 2026 | 25 Sept 2026 | ECDSA 256 | ECDSA-SHA256 | 7266f134326e582c13026f3d888ae741 |
| SANs: dreamlit.ai, *.mcp.dreamlit.ai, mcp.dreamlit.ai | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
DNSSEC insecure
Validation of mcp.dreamlit.ai. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ai. | present | 3799 | 8 | Verified |
| dreamlit.ai. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
WWW-Authenticate challenge Bearer realm="OAuth", resource_metadata="https://mcp.dreamlit.ai/.well-known/oauth-protected-resource/mcp", error="invalid_token", error_description="Missing or invalid access token"
Bearer realm="OAuth", resource_metadata="https://mcp.dreamlit.ai/.well-known/oauth-protected-resource/mcp", error="invalid_token", error_description="Missing or invalid access token"Protected resource metadata
| Document | https://mcp.dreamlit.ai/.well-known/oauth-protected-resource/mcp |
|---|---|
| Retrieved | Yes |
| Resource | https://mcp.dreamlit.ai/mcp |
| Authorisation server | https://mcp.dreamlit.ai |
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.dreamlit.ai/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.dreamlit.ai/mcp | Inconclusive | 406 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
confirm_publish Confirm publish ~181
Use only after explicit user confirmation and a prior prepare_publish result to publish or schedule a Dreamlit workflow. Side effect: installs live database/repeating/auth triggers, schedules or sends broadcasts, and may enable notification delivery; sandbox mode can hold notifications for inspection. Returns the published workflow status and app URLs. Do not call speculatively or without carrying forward the prepare_publish safety fields.
| Name | Type | Req | Description |
|---|---|---|---|
| expectedEditableVersionId | — | — | Editable version id returned by prepare_publish, used as a safety check. |
| expectedPublishedVersionId | — | — | Published version id returned by prepare_publish, used as a safety check. |
| expectedUpdatedAtIso | — | — | Workflow updatedAt timestamp returned by prepare_publish, used as a safety check. |
| isSandboxed | boolean | — | Whether to publish in sandbox mode so notifications are held for inspection. |
| workflowId | string | yes | Workflow id to publish. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | — | yes | Dreamlit MCP result. success responses contain data and appUrls when relevant; auth_required, clarification_required, confirmation_required, handoff_required, and error responses explain the next act… |
No examples provided.
create_or_update_workflow Create or update workflow ~326
Creates a new Dreamlit workflow draft or updates an existing draft from an outcome-oriented natural-language prompt. Use after get_status; use get_workflow_and_preview_url first when editing an existing workflow. Existing Supabase Auth workflows can be edited except for the immutable trigger step; creating Supabase Auth workflows must happen through Supabase Auth email setup in the Dreamlit web app. Side effect: may create or modify a draft, but does not publish or install live triggers. Returns the workflow/draft result, action-required or handoff details when more input is needed, and relevant app URLs. Do not use for publishing, direct database changes, or low-level graph edits.
| Name | Type | Req | Description |
|---|---|---|---|
| projectId | string | — | Target project id for creating a new workflow draft. |
| prompt | string | yes | Outcome-oriented workflow authoring request. Describe the event or schedule, audience, recipient, message goal, data needed, timing, business rules, and unsubscribe intent. Let Dreamlit choose email… |
| userCurrentTimeIso | string | — | User's current time as an ISO timestamp with offset, useful for relative schedule requests. |
| userCurrentTimeZoneId | string | — | IANA timezone id for the user, useful for repeating workflows and scheduled broadcasts. |
| userEmailStepComments | array | — | Optional inline comments for revising email step content. |
| workflowId | string | — | Existing workflow id to continue editing. Use get_workflow_and_preview_url first when changing an existing workflow. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | — | yes | Dreamlit MCP result. success responses contain data and appUrls when relevant; auth_required, clarification_required, confirmation_required, handoff_required, and error responses explain the next act… |
No examples provided.
get_analytics Get analytics ~309
Read-only. Use to query Dreamlit analytics for overview metrics, notification rows, recipient engagement, or workflow run rows with filters, sorting, and cursor pagination. Returns bounded structured analytics data, effective query metadata, pagination details when rows are included, and relevant app URLs. Do not use for CSV exports, bulk dumps, workflow edits, publishing, or low-level database access.
| Name | Type | Req | Description |
|---|---|---|---|
| channel | string | — | Notification channel for overview and notification analytics. Defaults to email. Recipient analytics are email-only. |
| cursor | string | — | Opaque pagination cursor from a previous get_analytics response. |
| filters | object | — | Optional analytics filters. Unsupported combinations return a clear error. |
| include | array | — | Optional response sections to include. Defaults depend on the requested view. |
| limit | integer | — | Maximum rows to return. Defaults to 25 and is capped at 100. |
| projectId | string | — | Project id to query analytics from. Required when access is ambiguous. |
| range | object | — | Optional explicit timestamp range. Overrides window and is applied to the view's primary timestamp. |
| sort | object | — | Optional row sort. Overview ignores sorting. |
| timeZone | string | — | IANA timezone for daily series bucketing. Defaults to UTC. |
| view | string | yes | Analytics surface to query: overview cards, notification rows, recipient rows, or workflow run rows. |
| window | string | — | Relative analytics window. Defaults to 30d. Ignored when range is provided. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | — | yes | Dreamlit MCP result. success responses contain data and appUrls when relevant; auth_required, clarification_required, confirmation_required, handoff_required, and error responses explain the next act… |
No examples provided.
get_status Get status ~138
Read-only. Use first when the agent needs Dreamlit product guidance, prompting guidance, approved workspace context, project setup, schema hints, workflow state, or relevant app URLs. Returns a compact context pack with concepts, recommended tool flow, actor/workspace/project data, optional authoring context, optional workflow context, and appUrls. Do not use this to create, update, publish, or unpublish workflows.
| Name | Type | Req | Description |
|---|---|---|---|
| projectId | string | — | Optional project id. Include it to return project setup, schema hints, and authoring context. |
| workflowId | string | — | Optional workflow id. Include it to return concise workflow state and preview URL. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | — | yes | Dreamlit MCP result. success responses contain data and appUrls when relevant; auth_required, clarification_required, confirmation_required, handoff_required, and error responses explain the next act… |
No examples provided.
get_workflow_and_preview_url Get workflow and preview URL ~82
Read-only. Use before editing, verifying, or preparing publish for an existing workflow. Returns normalized draft and published workflow structure plus the Dreamlit preview/builder URL and status URLs. Do not use to create, update, publish, or unpublish workflows.
| Name | Type | Req | Description |
|---|---|---|---|
| workflowId | string | yes | Workflow id to inspect before editing, verifying, or publishing. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | — | yes | Dreamlit MCP result. success responses contain data and appUrls when relevant; auth_required, clarification_required, confirmation_required, handoff_required, and error responses explain the next act… |
No examples provided.
list_brand_styles List brand styles ~129
Read-only. Use when the user wants to inspect saved project brand styles for generated email drafts. Returns paginated project brand style summaries, ids, default status, style metadata, and app URLs. Do not use to create, update, delete, or expose raw style provenance.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | — | Maximum number of brand styles to return for this page. |
| offset | integer | — | Zero-based brand style offset for pagination. Use nextOffset from the previous response to fetch the next page. |
| projectId | string | — | Project id to list brand styles from. Required when access is ambiguous. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | — | yes | Dreamlit MCP result. success responses contain data and appUrls when relevant; auth_required, clarification_required, confirmation_required, handoff_required, and error responses explain the next act… |
No examples provided.
list_projects List projects ~82
Read-only. Use when the target project is unknown or the user names a project instead of providing an id. Returns accessible Dreamlit projects in the approved workspace with project and workflow-list URLs. Do not use to inspect workflow structure or author changes.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | — | Maximum number of projects to return. |
| search | string | — | Optional project name search string. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | — | yes | Dreamlit MCP result. success responses contain data and appUrls when relevant; auth_required, clarification_required, confirmation_required, handoff_required, and error responses explain the next act… |
No examples provided.
list_workflows List workflows ~196
Read-only. Use to find workflows in a project by name, description, or trigger type before inspection or editing. Trigger filters include database, auth email, repeating, broadcast, and no-trigger workflows. Returns paginated workflow summaries, published/sandbox state, trigger type, workflow URLs, totalCount, hasMore, and nextOffset. Do not use as the final source of truth before editing; call get_workflow_and_preview_url for full structure.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | — | Maximum number of workflows to return for this page. |
| offset | integer | — | Zero-based workflow offset for pagination. Use nextOffset from the previous response to fetch the next page. |
| projectId | string | — | Project id to list workflows from. Required when access is ambiguous. |
| search | string | — | Optional workflow name or description search string. |
| triggerFilters | array | — | Optional trigger type filters. Use broadcast only for one-time audience emails. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | — | yes | Dreamlit MCP result. success responses contain data and appUrls when relevant; auth_required, clarification_required, confirmation_required, handoff_required, and error responses explain the next act… |
No examples provided.
prepare_publish Prepare publish ~81
Read-only validation step before publishing. Use after the user asks to publish and after inspecting the workflow if needed. Returns validation status, publish mode, preview URL, and a confirmation payload with version/timestamp safety checks for confirm_publish. Does not publish or schedule anything by itself.
| Name | Type | Req | Description |
|---|---|---|---|
| workflowId | string | yes | Workflow id to validate and prepare for explicit publish approval. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | — | yes | Dreamlit MCP result. success responses contain data and appUrls when relevant; auth_required, clarification_required, confirmation_required, handoff_required, and error responses explain the next act… |
No examples provided.
send_workflow_test Send workflow test ~272
Side effect when confirmSend is true: sends one current draft email or Slack message for review, but does not publish, schedule, or edit the workflow. Use after authoring or inspection when the user wants to verify an important message before publishing. Returns sent-test details, app URLs, a confirmation request, or a clarification request with user-facing message choices. Do not expose test target ids as copy; ask users to choose by message label and confirm before sending.
| Name | Type | Req | Description |
|---|---|---|---|
| confirmSend | boolean | — | Set to true only after the user explicitly confirms sending this selected test message. If omitted or false, Dreamlit returns confirmation_required and does not send. |
| messageType | string | — | Optional message type filter when selecting a draft message to test. |
| rowData | object | — | Optional sample data for rendering draft message variables during the test. If omitted, Dreamlit uses the same default preview data as the web builder when available. |
| testRecipientEmail | string | — | Optional recipient for email tests. If omitted, Dreamlit sends to the authenticated user's email address. |
| testTargetId | string | — | Structured test target id from testableMessages. Do not show this id to users; ask them to choose by message label. |
| workflowId | string | yes | Workflow id whose editable draft message should be tested. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | — | yes | Dreamlit MCP result. success responses contain data and appUrls when relevant; auth_required, clarification_required, confirmation_required, handoff_required, and error responses explain the next act… |
No examples provided.
unpublish_workflow Unpublish workflow ~85
Use after explicit user intent to unpublish a Dreamlit workflow. Side effect: disables live triggers or schedules for that workflow and stops future automated sends. Returns updated workflow status and app URLs. Do not use for deleting drafts, canceling one broadcast run, or editing workflow content.
| Name | Type | Req | Description |
|---|---|---|---|
| workflowId | string | yes | Workflow id to unpublish and disable live triggers or schedules. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | — | yes | Dreamlit MCP result. success responses contain data and appUrls when relevant; auth_required, clarification_required, confirmation_required, handoff_required, and error responses explain the next act… |
No examples provided.