# Spala Public MCP (remote · mcp.spala.ai)

Discovery, OAuth, project operations, and exact project MCP handoff for Spala backend projects.

- Trust score: 64/100 (medium)
- Change this week: +8
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `mcp.spala.ai`: 64/100 (this document), [markdown](https://verifymcp.io/servers/ai-spala-public-mcp/mcp.md), [page](https://verifymcp.io/servers/ai-spala-public-mcp/mcp)

## Channel facts

- Endpoint: `https://mcp.spala.ai/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.2`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 57/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (account_setup).
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 60/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 2119 tokens (~132/item across 16 items; 16 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http ai-spala-public-mcp https://mcp.spala.ai/mcp
```

### Codex

```toml
[mcp_servers.ai-spala-public-mcp]
url = "https://mcp.spala.ai/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ai-spala-public-mcp": {
      "type": "remote",
      "url": "https://mcp.spala.ai/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add ai-spala-public-mcp --url https://mcp.spala.ai/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  ai-spala-public-mcp:
    url: "https://mcp.spala.ai/mcp"
```

### Other

```json
{
  "mcpServers": {
    "ai-spala-public-mcp": {
      "type": "http",
      "url": "https://mcp.spala.ai/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 64, +1)

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-01 (score 63, +1)

No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-31 (score 62, +1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 61, +1)

No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-29 (score 60, +4)

No change was recorded against any check on this day. Schema Quality & AI Usability went from 43 to 55. Other categories moved too: Stability & Change Management rose 7.

### 2026-07-27 (score 56, +1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-26 (score 55)

First indexed and scored.

## MCP tools (16)

### `spala_help` (~62 tokens)

Learn About Spala

Returns a human-readable overview of Spala, canonical start URLs, and the boundary between public discovery and project-scoped backend MCPs. Invoke for product, setup, or integration orientation. This read-only tool requires no authentication and does not access or modify project data.

Output parameters:

- `markdown` (string)

### `spala_get_onboarding` (~47 tokens)

Get Spala Onboarding

Returns machine-readable Spala onboarding information for MCP clients. Includes product scope, OAuth metadata, supported installer client identifiers, authenticated project-handoff status, workflow stages, and canonical links.

Output parameters:

- `handoffExample` (object)
- `intentBoundary` (object)
- `product` (string)
- `projectMcpRole` (string)
- `publicMcpRole` (string)
- `supportedInstallerClients` (array)
- `urls` (object)
- `workflow` (array)

### `spala_get_tool_map` (~49 tokens)

Get Spala Tool Map

Returns a machine-readable routing map for Spala MCP clients. Identifies public and authenticated tools, supported installer clients, OAuth endpoints, project handoff rules, and project-MCP entry points.

Output parameters:

- `projectMcp` (object)
- `publicMcp` (object)

### `docs_search` (~111 tokens)

Search Spala Documentation

Searches the public Spala agent-facing documentation index by query. Invoke for setup, OAuth, installer, public-versus-project MCP, pricing, limits, security, templates, addons, or project handoff questions. Returns ranked docs entries with URLs and summaries.

Input parameters:

- `limit` (integer): Maximum number of ranked documentation results to return.
- `query` (string): Optional search phrase. Use words such as auth, OAuth, MCP, templates, addons, pricing, limits, frontend handoff, or project handoff.

Output parameters:

- `query` (string)
- `results` (array)

### `template_list` (~92 tokens)

List Spala Templates

Lists public Spala backend templates matching an optional query. Invoke to discover available backend starting points such as marketplace, dashboard API, reservation, inventory, or document management. Returns template ids, names, descriptions, and tags.

Input parameters:

- `limit` (integer): Maximum number of catalog entries to return.
- `query` (string): Optional filter phrase for matching public Spala templates or addons by name, tag, or use case.

Output parameters:

- `query` (string)
- `templates` (array)

### `addon_list` (~95 tokens)

List Spala Addons

Lists public Spala addons and integrations matching an optional query. Invoke to discover capabilities such as webhooks, outbound HTTP API calls, transactional email, media uploads, and realtime messaging. Returns addon ids, names, descriptions, and tags.

Input parameters:

- `limit` (integer): Maximum number of catalog entries to return.
- `query` (string): Optional filter phrase for matching public Spala templates or addons by name, tag, or use case.

Output parameters:

- `addons` (array)
- `query` (string)

### `spala_start` (~74 tokens)

Start Spala

AUTH REQUIRED; READ-ONLY STARTUP. Invoke after OAuth to begin Spala account or project setup. Returns a versioned startup phase with account readiness, organizations, safely scoped project discovery, and one explicit next action. Reports missing account fields, automatically scopes a sole organization, and returns all accessible choices when multiple organizations exist.

Output parameters:

- `accountSetup` (object)
- `authenticated` (boolean)
- `backendProvider` (string)
- `nextAction` (object)
- `organizations` (array)
- `phase` (string)
- `projects` (array)
- `schemaVersion` (integer)
- `selectedOrganizationId` (string)
- `user` (object)

### `account_status` (~47 tokens)

Check Spala Account

AUTH REQUIRED; READ-ONLY. Verifies the current public MCP OAuth identity and account readiness. Returns the authenticated identity, available organizations, and exact missing account fields without exposing OAuth or dashboard credentials.

Output parameters:

- `accountSetup` (object)
- `authenticated` (boolean)
- `next` (string)
- `oauthResource` (string)
- `organizations` (array)
- `subject` (string)
- `tokenStatus` (string)
- `user` (object)

### `account_setup` (~121 tokens)

Complete Spala Account Setup

AUTH REQUIRED; WRITES MISSING ACCOUNT DATA TO THE SPALA CONTROL PLANE. Fills missing first and last name fields and creates the first company or workspace organization when none exists. Invoke only with real account and organization values supplied by the user.

Input parameters:

- `companyName` (string): Company or workspace name. Required when account_status reports companyName missing.
- `firstName` (string): Account holder first name. Required when account_status reports firstName missing.
- `lastName` (string): Account holder last name. Required when account_status reports lastName missing.

Output parameters:

- `accountSetup` (string)
- `nextAction` (object)
- `organization` (object)
- `organizationCreated` (boolean)
- `profileUpdated` (boolean)
- `user` (object)

### `organization_create` (~51 tokens)

Create Spala Organization

AUTH REQUIRED; WRITES A NEW SPALA ORGANIZATION FOR THE SIGNED-IN ACCOUNT. Creates an additional company or workspace organization using the supplied name.

Input parameters:

- `name` (string, required): Human-readable company or workspace name.

Output parameters:

- `created` (boolean)
- `nextAction` (object)
- `organization` (object)

### `project_list` (~70 tokens)

List Spala Projects

AUTH REQUIRED; READ-ONLY. Lists projects accessible to the authenticated Spala user in one organization. Accepts an organization id when multiple organizations are available and automatically scopes a sole organization.

Input parameters:

- `organizationId` (string): Organization ID returned for the signed-in account. Optional only when exactly one organization is available.

Output parameters:

- `organization` (object)
- `projects` (array)

### `project_create` (~103 tokens)

Create Spala Project

AUTH REQUIRED; WRITES TO THE SPALA CONTROL PLANE. Creates a real Spala project with the supplied project name in an accessible organization. Accepts an organization id when multiple organizations are available and automatically scopes a sole organization. This operation is not idempotent.

Input parameters:

- `name` (string, required): Human-readable name for the new Spala project.
- `organizationId` (string): Organization ID returned for the signed-in account. Optional only when exactly one organization is available.

Output parameters:

- `created` (boolean)
- `mcpUrlResolved` (boolean)
- `next` (string)
- `organization` (object)
- `project` (object)
- `provisioning` (object)

### `project_connect` (~177 tokens)

Connect Spala Project

AUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Prepares one accessible Spala project for agent access. Accepts one installer client (codex, roo, claude-code, cursor, a2a); when omitted, returns a client-selection response without executable arguments. Returns a protected one-time bootstrap capability and a workspace-scoped project binding plan without exposing bearer credentials.

Input parameters:

- `client` (string): Target MCP client for @spala-ai/mcp-install. Omit to receive client_selection_required without an executable mutation plan.
- `organizationId` (string): Optional organization ID returned for the signed-in account.
- `projectId` (string): Exact Spala project ID. Mutually exclusive with subdomain.
- `subdomain` (string): Exact project subdomain returned by the Spala projects API. Mutually exclusive with projectId.

Output parameters:

- `bootstrap` (object)
- `bootstrapPreparedByProjectBackend` (boolean)
- `handoff` (object)
- `installPlan` (object)
- `intentBoundary` (object)
- `mcpUrl` (string)
- `nextSteps` (array)
- `preparedByProjectBackend` (boolean)
- `project` (object)
- `rule` (string)
- `serverName` (string)
- `transport` (string)
- `workspaceOnly` (boolean)

### `project_select` (~139 tokens)

Select Spala Project

AUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Compatibility alias for project_connect. Prepares one accessible project and returns its protected one-time bootstrap capability and workspace-scoped binding plan.

Input parameters:

- `client` (string): Target MCP client for @spala-ai/mcp-install. Omit to receive client_selection_required without an executable mutation plan.
- `organizationId` (string): Optional organization ID returned for the signed-in account.
- `projectId` (string): Exact Spala project ID. Mutually exclusive with subdomain.
- `subdomain` (string): Exact project subdomain returned by the Spala projects API. Mutually exclusive with projectId.

Output parameters:

- `bootstrap` (object)
- `bootstrapPreparedByProjectBackend` (boolean)
- `handoff` (object)
- `installPlan` (object)
- `intentBoundary` (object)
- `mcpUrl` (string)
- `nextSteps` (array)
- `preparedByProjectBackend` (boolean)
- `project` (object)
- `rule` (string)
- `serverName` (string)
- `transport` (string)
- `workspaceOnly` (boolean)

### `project_get_mcp_manifest` (~178 tokens)

Get Project MCP Manifest

AUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Prepares one accessible project and returns its exact platform-provided project MCP manifest URL, MCP URL, protected bootstrap capability, and workspace binding plan. Accepts one installer client (codex, roo, claude-code, cursor, a2a); when omitted, returns a client-selection response without executable arguments.

Input parameters:

- `client` (string): Target MCP client for @spala-ai/mcp-install. Omit to receive client_selection_required without an executable mutation plan.
- `organizationId` (string): Optional organization ID returned for the signed-in account.
- `projectId` (string): Exact Spala project ID. Mutually exclusive with subdomain.
- `subdomain` (string): Exact project subdomain returned by the Spala projects API. Mutually exclusive with projectId.

Output parameters:

- `auth` (string)
- `bootstrap` (object)
- `handoff` (object)
- `installPlan` (object)
- `intentBoundary` (object)
- `manifestUrl` (string)
- `mcpUrl` (string)
- `name` (string)
- `nextSteps` (array)
- `project` (object)
- `rule` (string)
- `schemaVersion` (integer)
- `serverName` (string)
- `transport` (string)

### `project_get_public_context` (~107 tokens)

Get Project Public Context

AUTH REQUIRED; READ-ONLY. Returns documented MCP handoff fields for one accessible project without exposing tokens, private source code, unrelated customer data, or executable installer arguments.

Input parameters:

- `organizationId` (string): Optional organization ID returned for the signed-in account.
- `projectId` (string): Exact Spala project ID. Mutually exclusive with subdomain.
- `subdomain` (string): Exact project subdomain returned by the Spala projects API. Mutually exclusive with projectId.

Output parameters:

- `handoff` (object)
- `intentBoundary` (object)
- `project` (object)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/ai-spala-public-mcp/mcp#diagnostics

## Score history

- 2026-08-03: 64
- 2026-08-02: 63
- 2026-08-01: 63
- 2026-07-31: 62
- 2026-07-30: 61
- 2026-07-29: 60
- 2026-07-27: 56
- 2026-07-26: 55

## Links

- Remote endpoint: https://mcp.spala.ai/mcp
- Repository: https://github.com/spala-ai/spala-public-mcp
- Website: https://spala.ai/mcp-profile/
- Changelog RSS feed: https://verifymcp.io/servers/ai-spala-public-mcp/mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/ai-spala-public-mcp/mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/ai-spala-public-mcp/mcp