Novence
REMOTE · API.NOVENCE.AI
Hosted MCP for creating, checking, deploying, and hosting static sites for AI agents.
Available components
Last scanned (5 hours ago)
Scores higher than 68% of remote servers
Reachable. Last reached 18 Oct 2026.
Category Cloud Infrastructure
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security46
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (reissue_key). See how to fix → View diagnostics → Fail
- HTTPS check failed: the endpoint is reachable over plaintext HTTP. See how to fix → View diagnostics → Fail
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability83
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 5051 tokens (~101/item across 50 items; 50 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 6 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 50 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 9 Oct 26 0
- Tool “bootstrap” rewrote its description, which is the text the model reads security
- “bootstrap” added an optional parameter “attribution” cosmetic
- 28 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 21 Sept 26 −1
- Tool “update_project_settings” rewrote its description, which is the text the model reads security
- New tool “get_site_brief” functional
- New tool “list_site_events” functional
- New tool “put_site_brief” functional
- “update_project_settings” added an optional parameter “data_edit_emails” cosmetic
- “update_project_settings” added an optional parameter “data_edit_names” cosmetic
- “update_project_settings” added an optional parameter “data_edit_path” cosmetic
- 20 Sept 26 +1
- Stability: 0.97 → pass security
- 18 Sept 26 +1
- Tool “update_project_settings” rewrote its description, which is the text the model reads security
- “update_project_settings” added an optional parameter “site_mcp” cosmetic
- 16 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Sept 26 73
- New tool “put_site_data” functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 18 Oct 2026 · Probed https://api.novence.ai/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=novence.ai | CN=WE1,O=Google Trust Services,C=US | 15 Sept 2026 | 14 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | 39fcb932008a2670132df0ad10a14053 |
| SANs: novence.ai, *.novence.ai | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of api.novence.ai. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ai. | present | 3799 | 8 | Verified |
| novence.ai. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://api.novence.ai/mcp | Verified | 200 | |
| http (plaintext) | http://api.novence.ai/mcp | Served over HTTP | 200 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
accept_project_invite Accept project invite ~105
Accept an invite token (from email or invite_project_member in local/dev). Unverified invitees must pass otp. Returns a project-scoped nv_ key once — never email it. Collaborating uses this project_id; create_project still bills the caller.
| Name | Type | Req | Description |
|---|---|---|---|
| otp | string | – | Email OTP required when the invitee is not yet verified. Optional if already verified. |
| token | string | yes | Invite token from the invitation email (or invite_project_member in local/dev). |
No output schema declared.
No examples provided.
billing_portal Billing portal ~53
Stripe Customer Portal URL for an existing subscriber (manage/cancel). Not first-time subscribe — use checkout or mpp_upgrade for that.
| Name | Type | Req | Description |
|---|---|---|---|
| return_url | string | – | Browser URL after leaving the Stripe portal. Optional. |
No output schema declared.
No examples provided.
bootstrap Bootstrap account ~117
Create an account + nv_ API key from an email. No Bearer key required. Unverified trial still publishes; OTP/verify_email is AFTER the live URL. Returns apiKey immediately — do not wait for OTP. If the human message includes a Signup attribution object, pass it as attribution unchanged.
| Name | Type | Req | Description |
|---|---|---|---|
| attribution | object | – | First-touch fields from the novence.ai page that sent the human here. Pass through unchanged. Do not invent values. |
| string | yes | Account email. Receives the OTP after the first live URL. |
No output schema declared.
No examples provided.
checkout Stripe Checkout ~96
Return a Stripe Checkout URL for Pro ($29) or Scale. Requires nv_ + verified email. Use after a 2nd project or a 402 — never after the first live URL.
| Name | Type | Req | Description |
|---|---|---|---|
| cancel_url | string | – | Browser return URL if the customer cancels Checkout. Optional. |
| plan | string | – | Paid plan to subscribe. Defaults to pro. |
| success_url | string | – | Browser return URL after successful payment. Optional. |
No output schema declared.
No examples provided.
configure_custom_domain Configure custom domain ~173
Attach a custom domain. For site domains, enables apex+www. Default primary=www. Required DNS: CNAME www → fallback.novence.ai. Then do exactly one apex option: ALIAS/ANAME/CNAME-flattening @ → fallback.novence.ai, or registrar URL-redirect @ → https://www.{domain}/. Pass primary=apex only when the apex must serve (ALIAS required; URL-redirect would loop).
| Name | Type | Req | Description |
|---|---|---|---|
| hostname | string | yes | Custom hostname (e.g. example.com or www.example.com). |
| primary | string | – | Which host is canonical. Default www. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
| redirect | boolean | – | If true, redirect the non-primary host to the primary. Default true. |
No output schema declared.
No examples provided.
confirm_upload Confirm upload ~122
Record one staged file after the client PUT to the presigned URL from get_upload_url. Use confirm_uploads_batch when several files were uploaded. Does not publish the site — call deploy after confirms. Re-confirming the same path updates metadata.
| Name | Type | Req | Description |
|---|---|---|---|
| content_type | string | – | MIME type for the file. Optional; inferred from the path extension when omitted. |
| path | string | yes | Site-relative path (e.g. index.html or css/app.css). No leading slash required. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
confirm_uploads_batch Confirm uploads (batch) ~90
Confirm many uploads after get_upload_urls_batch PUTs. 200 body is { files, errors }. errors is always an array (empty on full success); retry only failed paths. Use confirm_upload for a single file. Does not deploy.
| Name | Type | Req | Description |
|---|---|---|---|
| files | array | yes | Same paths that were presigned and PUT. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
create_account_session Create account session ~43
Mint a short-lived mgmt_ token for a local HTML console (account:read, billing:portal, project:members). Never put nv_ keys in HTML.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
create_form Create form ~143
Create a Novence form on a project (optional — sites may use Formspree/Web3forms instead). Returns submit URLs for edge + public API.
| Name | Type | Req | Description |
|---|---|---|---|
| fields | array | – | Field definitions. Empty array allowed; add fields later with update_form. |
| honeypot_field | string | – | Hidden field name used as a spam honeypot. Optional. |
| name | string | yes | Display name for the form in the account. |
| notify_email | – | – | Where to email new submissions. Optional. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
| slug | string | – | URL slug. Optional; generated from name if omitted. |
No output schema declared.
No examples provided.
create_project Create project ~76
Create a new hosting project on the caller's account (counts against the caller's project quota). To edit a shared site, pass that project's project_id to upload/deploy tools instead.
| Name | Type | Req | Description |
|---|---|---|---|
| description | string | – | Optional notes stored on the project. Not shown on the live site. |
| name | string | yes | Human-readable project name. |
No output schema declared.
No examples provided.
delete_file Delete file ~93
Remove one path from staging. Does not change the already-live deploy until the next deploy. Irreversible for that staged path; re-upload to restore. Use delete_form_submission for form PII, not this.
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | Site-relative path (e.g. index.html or css/app.css). No leading slash required. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
delete_form_submission Delete form submission ~84
Permanently delete one form submission (PII). Does not disable the form — use update_form status=disabled. Irreversible.
| Name | Type | Req | Description |
|---|---|---|---|
| form_id | string | yes | Form UUID from create_form or list_forms. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
| submission_id | string | yes | Submission UUID from list_form_submissions. |
No output schema declared.
No examples provided.
deploy Deploy site ~98
Publish the site. Verified accounts run quality checks; unverified accounts skip checks (checkRuns: 0) and still go live. POST returns quickly — poll get_deployment_status until live or failed. Do not retry POST while status is promoting or checking.
| Name | Type | Req | Description |
|---|---|---|---|
| force | boolean | – | If true, publish even when quality checks would block. Optional; default false. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
get_account Get account ~49
Full account snapshot: profile, subscription, quotas, usage, projects. Use get_quotas_and_usage for limits only; use get_account_console_kit to render a local HTML console. Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_account_console_kit Get account console kit ~58
JSON kit to write a local novence-console.html: snapshot, HTML template, session mint instructions. Serve on localhost. Use create_account_session for the mgmt_ token; use get_account for JSON without the kit. Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_checks_results Get check results ~91
Read Lighthouse, a11y, and link results for a deployment. Omit deployment_id for the latest. Use run_checks to trigger a new cycle; use get_deployment_status for publish/promote state, not scores.
| Name | Type | Req | Description |
|---|---|---|---|
| deployment_id | string | – | Specific deployment UUID. Omit to use the project's latest deployment. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
get_deployment_status Get deployment status ~100
Poll publish state after deploy (queued, checking, promoting, live, failed). Omit deployment_id for the latest. Use get_checks_results for Lighthouse/a11y scores and get_preview_url once live. Read-only; do not retry deploy while promoting or checking.
| Name | Type | Req | Description |
|---|---|---|---|
| deployment_id | string | – | Specific deployment UUID. Omit to use the project's latest deployment. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
get_domain_status Get domain status ~96
Read DNS for the project's custom hostname after configure_custom_domain. Returns dns.www, dns.apex, and dns.next (a single next DNS step, or null when www CNAME is in place and apex has records). customDomainStatus stays pending after attach — poll dns.next until null. Do not use this to attach a domain. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
get_file Get file ~79
Return metadata for one staged path (not file bytes). Use list_files to discover paths; use get_upload_url to replace content. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | Site-relative path (e.g. index.html or css/app.css). No leading slash required. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
get_preview_url Get preview URL ~103
Return the public site URL. On Pro/Scale this is the per-deploy https://{suffix}--{ref}.novence.ai alias (last 5 successful deploys stay). On Free it is the live https://{suffix}.novence.ai host. Use get_deployment_status to know if live yet; use configure_custom_domain for a custom hostname. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
get_project Get project ~77
Return one hosting project (name, suffix, settings, membership). Use list_projects to discover IDs. Use get_preview_url for the public URL (alias on Pro/Scale), and get_project_usage for quotas on that site. Read-only; does not mutate.
| Name | Type | Req | Description |
|---|---|---|---|
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
get_project_analytics Get project analytics ~130
Cookieless edge analytics for a hosted site: pageviews, 404s, top pages, referrers, and countries. Off by default. Enable with update_project_settings analytics_enabled=true. Default last 7 days (max 90). If disabled, returns enabled=false and empty totals.
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | – | Inclusive start date (ISO). Optional; default 7 days ago. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
| to | string | – | Inclusive end date (ISO). Optional; default today. Range max 90 days. |
No output schema declared.
No examples provided.
get_project_usage Get project usage ~75
Per-project usage (storage, deploys, check minutes, bandwidth, forms). Bandwidth is live from edge-served bytes. Use get_quotas_and_usage for account totals; use get_project_analytics for pageviews. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
get_quotas_and_usage Get quotas and usage ~56
Account-level plan limits and current consumption (projects, storage, deploys, bandwidth). Use get_project_usage for one site; use get_account for profile plus quotas together. Read-only snapshot, not a live meter stream.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_site_brief Get site brief ~72
Private webmaster brief for this project (Pro/Scale). Markdown or JSON, max 64 KB. Not on the live origin. On session start call this then list_site_events. Empty is brief: null. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
get_upload_url Get upload URL ~112
Get a presigned PUT URL for one site file. content_type is optional (inferred from extension). Use get_upload_urls_batch for multi-file sites, then confirm_upload after the PUT.
| Name | Type | Req | Description |
|---|---|---|---|
| content_type | string | – | MIME type for the file. Optional; inferred from the path extension when omitted. |
| path | string | yes | Site-relative path (e.g. index.html or css/app.css). No leading slash required. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
get_upload_urls_batch Get upload URLs (batch) ~86
Presign many site files at once (max 100). Prefer this over get_upload_url for multi-file sites. After PUTs, call confirm_uploads_batch, not confirm_upload.
| Name | Type | Req | Description |
|---|---|---|---|
| files | array | yes | Files to presign, max 100. Each needs a site-relative path. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
invite_project_member Invite project member ~117
Invite a collaborator by email. Requires Pro/Scale on the project owner. Only the owner can invite as admin. Creates a new project on the caller's account if you use create_project instead — pass project_id here. Do not share the owner's nv_ key.
| Name | Type | Req | Description |
|---|---|---|---|
| string | yes | Invitee's email. They accept with accept_project_invite. | |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
| role | string | – | Access level. Default editor. Only the owner can grant admin. |
No output schema declared.
No examples provided.
leave_project Leave project ~60
Leave a project you were invited to. Owners cannot leave — transfer or stay. Revokes your project keys. Use remove_project_member if you are the owner removing someone else.
| Name | Type | Req | Description |
|---|---|---|---|
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
list_files List files ~63
List staged site files for a project (paths, types, sizes). Use get_file for one path's metadata; use delete_file to remove a path. Read-only; does not deploy.
| Name | Type | Req | Description |
|---|---|---|---|
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
list_form_submissions List form submissions ~108
List visitor submissions for one Novence form (paginated). Use delete_form_submission to remove PII. Not for update_form schema changes. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| form_id | string | yes | Form UUID from create_form or list_forms. |
| limit | integer | – | Page size, 1–100. Optional. |
| offset | integer | – | Number of submissions to skip. Optional; default 0. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
list_forms List forms ~65
List Novence forms on a project (ids, slugs, status). Use update_form to change one; use list_form_submissions to read leads. Not for third-party widgets. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
list_project_members List project members ~62
List members and pending invites for a project. Use invite_project_member to add; use revoke_project_invite for pending tokens; use remove_project_member for accepted collaborators. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
list_projects List projects ~66
List hosting projects the caller owns or is invited to (ids, names, suffixes). Use get_project for one project's settings; use get_preview_url for the public URL (per-deploy alias on Pro/Scale, live host on Free). Read-only; does not create a project.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_site_events List site events ~118
Webmaster inbox (Pro/Scale): form.submitted, collection.updated (agent vs owner_edit), check.completed, deploy.live. Default last 7 days, max 100. Pass since from the last session. Forms still email the owner. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Max rows (1–100). Optional; default 50. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
| since | string | – | ISO timestamp; only events after this. Optional; default 7 days ago. |
No output schema declared.
No examples provided.
mpp_upgrade MPP upgrade ~112
Start or complete Pro/Scale via Machine Payments Protocol. Requires nv_ + verified email. First call returns a 402 Payment challenge; retry with payment_authorization (Payment credential) or _meta org.paymentauth/credential. Use after a 2nd project or a 402 — never after the first live URL.
| Name | Type | Req | Description |
|---|---|---|---|
| payment_authorization | string | – | Payment credential from settling the 402 challenge. Omit on the first call. |
| plan | string | – | Paid plan to start. Defaults to pro. |
No output schema declared.
No examples provided.
publish_html Publish HTML ~187
Publish one HTML document (report, dashboard, Claude-style artifact) as index.html and deploy. Omit project_id to create a project. Hosted MCP cannot read local files — pass the HTML string (read the file first). Returns url, project_id, and deployment. Poll get_deployment_status until live or failed. For multi-file sites use the upload + deploy loop instead. Re-call with the same project_id to replace the live page.
| Name | Type | Req | Description |
|---|---|---|---|
| force | boolean | – | If true, publish even when quality checks would block. Optional; default false. |
| html | string | yes | Full HTML document to publish as /index.html. If you have a local file, read it and pass the contents here. |
| project_id | string | – | Hosting project UUID from create_project or list_projects. |
| title | string | – | Project display name when creating a project. Optional; defaults to artifact. |
No output schema declared.
No examples provided.
put_site_brief Put site brief ~91
Write the private webmaster brief (Pro/Scale, max 64 KB). What the site is, which /data files matter, form ids, owner email, what not to touch. Empty string clears it. Survives deploys.
| Name | Type | Req | Description |
|---|---|---|---|
| brief | string | yes | Markdown or JSON. Empty string clears the brief. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
put_site_data Put live site JSON ~155
Write /data/{name}.json on the live site without a deploy (Pro/Scale). Page JS keeps fetch("/data/{name}.json"). JSON must be an object or array, max 256 KB. Include the file in the next deploy or a repo upload that omits it can wipe it. Do not store secrets — the URL is public. Free: upload the JSON and call deploy instead.
| Name | Type | Req | Description |
|---|---|---|---|
| json | – | yes | JSON object/array, or a JSON string of the same. |
| name | string | yes | Collection name only (e.g. menu). Becomes /data/menu.json. Letters, digits, _ or -. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
reissue_key Reissue API key ~74
Mint a new account nv_ key from email OTP. No Bearer key required. WARNING: revokes prior account-scoped nv_ keys. Also verifies email if needed.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | yes | OTP from resend_verification or the latest verification email. |
| string | yes | Account email that owns the key. |
No output schema declared.
No examples provided.
remove_project_member Remove project member ~80
Remove an accepted collaborator and revoke their project API keys. Owner-only for admins. For a pending invite, use revoke_project_invite instead. Irreversible; they must be invited again.
| Name | Type | Req | Description |
|---|---|---|---|
| account_id | string | yes | Collaborator account UUID from list_project_members. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
resend_verification Resend verification ~46
Email a new OTP (also used for reissue_key). No Bearer key required. Works when already verified.
| Name | Type | Req | Description |
|---|---|---|---|
| string | yes | Account email to receive a new OTP. |
No output schema declared.
No examples provided.
revoke_project_invite Revoke project invite ~85
Cancel a pending invite so the token no longer works. Does not remove someone who already accepted — use remove_project_member for that. Irreversible for that invite_id; send a new invite_project_member if needed.
| Name | Type | Req | Description |
|---|---|---|---|
| invite_id | string | yes | Pending invite UUID from list_project_members. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
rollback Rollback live site ~121
Re-promote a previous successful snapshot to https://{suffix}.novence.ai without a new upload. Pro/Scale only (HTTP 402 on Free). Omit deployment_id to restore the previous live deploy. Only the last 5 successful deploys are retained. HTML Cache-Control is 60s — hard-refresh or wait. Does not run Lighthouse or increment deploys_count.
| Name | Type | Req | Description |
|---|---|---|---|
| deployment_id | string | – | Specific deployment UUID. Omit to use the project's latest deployment. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
run_checks Run quality checks ~86
Start a Lighthouse, a11y, and link check cycle on the latest deployment. Does not publish a new deploy — use deploy for that. Then poll get_checks_results (not get_deployment_status) until scores appear. Unverified accounts skip checks on deploy; this still queues a cycle when allowed.
| Name | Type | Req | Description |
|---|---|---|---|
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
set_redirects Set redirects ~106
Write /_redirects (Netlify subset) into staging. Call deploy afterwards to publish. SPA History routing: /* /index.html 200. Exact files always win. Optional custom 404 is a separate /404.html upload. Does not write the live prefix.
| Name | Type | Req | Description |
|---|---|---|---|
| body | string | yes | Contents of /_redirects. Example: /* /index.html 200 |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
No output schema declared.
No examples provided.
update_form Update form ~208
Patch an existing Novence form (name, slug, fields, notify_email, honeypot, active|disabled). Partial update: omitted fields stay unchanged. Use create_form for a new form; use list_forms to get form_id. Does not delete submissions.
| Name | Type | Req | Description |
|---|---|---|---|
| fields | array | – | Replacement field list when provided. Omit to leave the current schema unchanged. |
| form_id | string | yes | Form UUID from create_form or list_forms. |
| honeypot_field | string | – | Spam honeypot field name. Omit to leave unchanged. |
| name | string | – | New display name. Omit to leave unchanged. |
| notify_email | – | – | Notification inbox. Pass null to clear. Omit to leave unchanged. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
| slug | string | – | New URL slug. Omit to leave unchanged. |
| status | string | – | active accepts submissions; disabled rejects them. Omit to leave unchanged. |
No output schema declared.
No examples provided.
update_project_member Update project member role ~97
Change a collaborator's role. Only the owner can grant or demote admin. Use remove_project_member to revoke access entirely. Does not affect pending invites — use revoke_project_invite for those.
| Name | Type | Req | Description |
|---|---|---|---|
| account_id | string | yes | Collaborator account UUID from list_project_members. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
| role | string | yes | New role. Only the owner can set admin. |
No output schema declared.
No examples provided.
update_project_settings Update project settings ~399
Update project name, description, check thresholds, analyticsEnabled (cookieless edge traffic; off by default), shareGateEmails (optional OTP gate on platform hosts only; empty = public), siteMcp (off | read | forms visitor MCP on Pro/Scale), or owner-edit (data_edit_emails + data_edit_names, optional data_edit_path; Pro/Scale, off by default).
| Name | Type | Req | Description |
|---|---|---|---|
| analytics_enabled | boolean | – | Enable cookieless edge analytics. Required true before get_project_analytics returns totals. |
| check_thresholds | object | – | Quality-check threshold overrides. Omit to leave unchanged. |
| data_edit_emails | array | – | Up to 5 owner emails for live /edit (OTP). Empty turns owner-edit off. Pro/Scale. Custom domains included. Requires data_edit_names. |
| data_edit_names | array | – | 1–5 collection names the owner may edit (e.g. menu, hours). Required when data_edit_emails is set. |
| data_edit_path | string | – | Single path segment for the editor (default edit → /edit). Letters, digits, hyphen. |
| description | string | – | New internal notes. Omit to leave unchanged. |
| name | string | – | New display name. Omit to leave unchanged. |
| project_id | string | yes | Hosting project UUID from create_project or list_projects. |
| share_gate_emails | array | – | Up to 5 client emails. Non-empty turns on email OTP on *.novence.ai and /p/{suffix}/ only. Custom domains stay public. Empty array turns the gate off. Saving the list does not send mail. |
| site_mcp | string | – | Visitor Site MCP. off (default), read (list_pages + get_site_data), or forms (also list_forms + submit_form). Pro/Scale. Cannot enable while share_gate_emails is set. Control plane stays /mcp with nv… |
No output schema declared.
No examples provided.
verify_email Verify email ~68
Confirm the email OTP (15 min TTL). No Bearer key required. Call after the first live URL, before checkout/mpp_upgrade.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | yes | One-time code from the verification email (about 15 minutes TTL). |
| string | yes | Same email used with bootstrap. |
No output schema declared.
No examples provided.
How do I install the Novence MCP server?
Novence is a hosted endpoint at https://api.novence.ai/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · api.novence.ai
claude mcp add --transport http ai-novence-mcp 'https://api.novence.ai/mcp'
What is the Novence MCP server?
Novence is an MCP server listed in the public MCP registry as ai.novence/mcp. Hosted MCP for creating, checking, deploying, and hosting static sites for AI agents. This page covers its hosted endpoint (https://api.novence.ai/mcp).
Is the Novence MCP server safe to use?
Novence scores 75 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Novence MCP server expose?
Novence exposes 50 tools: bootstrap, verify_email, resend_verification, reissue_key, checkout, and 45 more. Their descriptions and schemas cost roughly 5,051 tokens of context every time the server is loaded.
Does the Novence MCP server require authentication?
No. We connected to Novence without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Novence MCP server still maintained?
Novence is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.