Boosthis
REMOTE · WWW.BOOSTHIS.COM · SCANNED SEP 28
Read-only performance insights for your Boosthis projects: speed, crashes, traces, and fixes.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security94
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability68
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 4532 tokens (~156/item across 29 items; 29 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management84
- Stability check failed: schema churn in the 29 days we've observed: 3 tool removals, 0 breaking changes, 0 auth/transport breaks, 8 additions. See how to fix → Fail
Tool Coverage97
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 92% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 29 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 30 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
How do I install the Boosthis MCP server?
Boosthis is a hosted endpoint at https://www.boosthis.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · www.boosthis.com
claude mcp add --transport http com-boosthis-boosthis 'https://www.boosthis.com/mcp'
{
"mcpServers": {
"com-boosthis-boosthis": {
"url": "https://www.boosthis.com/mcp"
}
}
} {
"servers": {
"com-boosthis-boosthis": {
"type": "http",
"url": "https://www.boosthis.com/mcp"
}
}
} [mcp_servers.com-boosthis-boosthis] url = "https://www.boosthis.com/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-boosthis-boosthis": {
"type": "remote",
"url": "https://www.boosthis.com/mcp",
"enabled": true
}
}
} openclaw mcp add com-boosthis-boosthis --url 'https://www.boosthis.com/mcp' --transport streamable-http
mcp_servers:
com-boosthis-boosthis:
url: "https://www.boosthis.com/mcp" {
"McpServers": {
"com-boosthis-boosthis": {
"Transport": "http",
"Url": "https://www.boosthis.com/mcp"
}
}
} assistant mcp add com-boosthis-boosthis -t streamable-http -u 'https://www.boosthis.com/mcp'
{
"mcpServers": {
"com-boosthis-boosthis": {
"type": "http",
"url": "https://www.boosthis.com/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 28 Sept 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 27 Sept 26 0
- Server version: 1.0.0-alpha.230 → 1.0.0-alpha.235 functional
- 26 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 74 to 78.
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 24 Sept 26 0
- Server version: 1.0.0-alpha.225 → 1.0.0-alpha.229 functional
- 23 Sept 26 +1
- Tool “boosthis_get_integration_kit” rewrote its description, which is the text the model reads security
- Tool “boosthis_which_kits” rewrote its description, which is the text the model reads security
- Server version: 1.0.0-alpha.219 → 1.0.0-alpha.225 functional
- “boosthis_get_integration_kit” reworded the description of “files_page” cosmetic
- “boosthis_get_integration_kit” reworded the description of “install_command” cosmetic
- “boosthis_get_integration_kit” reworded the description of “runtimes” cosmetic
- 22 Sept 26 0
- Server version: 1.0.0-alpha.206 → 1.0.0-alpha.219 functional
- 21 Sept 26 +1
- Server version: 1.0.0-alpha.202 → 1.0.0-alpha.206 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 28 Sept 2026 · Probed https://www.boosthis.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=www.boosthis.com | CN=YE1,O=Let's Encrypt,C=US | 21 Jul 2026 | 19 Oct 2026 | ECDSA 256 | ECDSA-SHA384 | 56eca0cfe20a397df248fb362839dce15cb |
| SANs: www.boosthis.com | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of www.boosthis.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| boosthis.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
WWW-Authenticate challenge Bearer resource_metadata="https://www.boosthis.com/.well-known/oauth-protected-resource/mcp"
Bearer resource_metadata="https://www.boosthis.com/.well-known/oauth-protected-resource/mcp" | Header | Value |
|---|---|
| strict-transport-security | max-age=63072000; includeSubDomains |
| content-security-policy | frame-ancestors 'none' |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | same-origin |
| permissions-policy | geolocation=(), camera=(), microphone=(), browsing-topics=() |
Protected resource metadata
| Document | https://www.boosthis.com/.well-known/oauth-protected-resource/mcp |
|---|---|
| Retrieved | Yes |
| Resource | https://www.boosthis.com/mcp |
| Authorisation server | https://www.boosthis.com |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://www.boosthis.com/mcp | Verified | 200 | |
| http (plaintext) | http://www.boosthis.com/mcp | HTTPS enforced | 301 | https://www.boosthis.com:443/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
boosthis_ai_changes Ai Changes ~95
What happened after the changes Boosthis witnessed here - only those that passed through it: a fix it served, or a sentence it was asked to check. Each reads kept, broken or cant_tell, in the promise vocabulary and refused for the same named reasons. cant_tell is the ordinary answer: thin evidence, never that the change was fine. No score for any assistant, and none derivable. Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
boosthis_alerts Alerts ~172
This account's Boosthis alerts, in the dashboard's words: Open, Read, Fixed, Returned (marked fixed, then happened again) or Dismissed, each saying whether its screen or check is Muted. The reply states how many matched, so a trimmed list is never mistaken for the whole. Read-only: it cannot mark anything fixed, muted or dismissed, and returns no credentials.
| Name | Type | Req | Description |
|---|---|---|---|
| account_token | string | yes | Durable account token: dashboard "Connect AI once" card. |
| limit | number | – | Rows to return (default 20, maximum 50). |
| search | string | – | Plain-text match on the alert wording, screen or check. |
| status | string | – | open | read | fixed | returned | dismissed | all. Default: the open list (includes returned). |
No output schema declared.
No examples provided.
boosthis_check_claim Check Claim ~165
Holds a sentence an assistant is about to say against what the running app actually did. Exactly one of four answers: supported, not supported by the measurements, cannot tell yet, or outside what Boosthis measures. Boosthis picks the comparison window; one named in the sentence is not used. It catches only a minority of wrong claims - the best measured result in this field is about one in six - and a vague claim is never caught at all. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| account_token | string | – | Optional, the developer's account token: a sentence the word match cannot place then gets a one-shot AI reading, which spends AI allowance. |
| claim | string | yes | The sentence to check, up to 240 characters. One carrying a credential or personal details is refused. |
No output schema declared.
No examples provided.
boosthis_check_for_update Check For Update ~179
Whether a newer Boosthis kit exists for this project, without fetching it: latest_version, update_available, comparison (behind/current/ahead/unknown), the changelog for every release behind, a severity (cosmetic/recommended/important/security) and a recommendation. kit_download_url serves the whole kit. latest_version is authoritative only on the hosted MCP; a local stdio server answers with its own. Withheld reply? Same answer at GET https://www.boosthis.com/api/kit/<runtime>/update (project key as bearer).
| Name | Type | Req | Description |
|---|---|---|---|
| installed_version | string | – | The kit version installed here. |
| repair_steps | boolean | – | Adds step-by-step repair text. Default false. |
| runtime | string | – | Required. Which runtime's kit to check; each kit has its own release line, so it is never guessed. |
No output schema declared.
No examples provided.
boosthis_connection_status Connection Status ~114
What Boosthis knows about this account's installs (same check over plain HTTPS: GET /api/connection-status, project key as bearer): for each, the runtime, its state, when it was last heard from, and what that state means. It answers "is it working?" without guessing - an install that registered but never measured anything reads differently from one that is quiet because the app is. Read-only; returns no credentials.
| Name | Type | Req | Description |
|---|---|---|---|
| repair_steps | boolean | – | Adds step-by-step repair text. Default false. |
No output schema declared.
No examples provided.
boosthis_crash_risk Crash Risk ~126
Crash classes this app recorded - uncaught errors, unhandled rejections and caught render near-misses - newest first, each with an error name, a redacted top frame, an occurrence bucket and relatedRules, joined with the JS-thread Stability summary and stabilityRules. Signatures are code-derived, never the raw message: no user value is exposed. No credentials, or no crash recorded yet: a note. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| install_id | string | – | Install id (Connect AI card). |
| read_token | string | – | Read-only token, same card. |
No output schema declared.
No examples provided.
boosthis_exposure Exposure ~51
What this app was OBSERVED exposing: leaks, cookie flags, dev settings left on, turned-away traffic, build age, swallowed errors. Each carries its limits; never a safety claim. Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
boosthis_full_stack_trace Full Stack Trace ~140
One user action across the stack as a nested waterfall of spans (layer, route label, duration, start offset, rating), each under the call that caused it; criticalHop names the hop responsible for the end-to-end time, not just the longest. Relative timings, code-defined labels only. A read token sees one install, account_token the whole chain. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| install_id | string | – | Install id (Connect AI card). |
| read_token | string | – | Read-only token, same card. |
| trace_id | string | – | One trace by id (32 hex, from the trace page). Absent: the latest. |
No output schema declared.
No examples provided.
boosthis_get_integration_kit Get Integration Kit ~306
A Boosthis kit for THIS project - no upload; the single-use address needs no key, include_files no shell. Withheld reply? Same kit at GET https://www.boosthis.com/api/kit/<runtime> (project key as bearer). runtimes: every runtime this project has in ONE call, same key; runtime picks one, see enum. The reply carries file_list (path + sha256), version, kit_download_once_url; install_command adds typed commands. Writing the files is not the install: the kit is wired in, reporting switched on, and the app confirmed checked in.
| Name | Type | Req | Description |
|---|---|---|---|
| files_page | number | – | Page of the by-value walk (guide parts, then files). Default 1; files_next_page names the next if any. |
| include_files | boolean | – | Send every kit file by value instead of the manifest, a page at a time. Only when no shell can be run. |
| install_command | boolean | – | Adds the typed download commands. |
| project_code | string | – | The 8-character code from this description's lead, not the name two projects can share. Account token only. |
| runtime | string | – | Required. Which runtime kit to deliver. Boosthis names every runtime a project spans at https://www.boosthis.com/scan. |
| runtimes | array | – | The normal route: every runtime this project has in one call - an address each, not a kit's files. |
No output schema declared.
No examples provided.
boosthis_get_removal_kit Get Removal Kit ~131
Removing Boosthis from this project: the ordered sequence, every kit file, the package entries, the config, the calls to strip, and the Boosthis entries in an AI tool's config. Order is load-bearing - forget(), where a kit has one, only reaches the server while the key is set.
| Name | Type | Req | Description |
|---|---|---|---|
| project_code | string | – | The 8-character code from this description's lead, not the name two projects can share. Account token only. |
| runtime | string | – | Which runtime's install to remove; one per call. Naming none is refused, never defaulted. |
No output schema declared.
No examples provided.
boosthis_get_rule Get Rule ~190
Full detail for one rule: title, when_to_apply, evidence, and - for a registered project - the fix_template. fix_available: false means no fix text is served here; fix_note says what would change that. `counterparts` names the same idea's rule in other languages; also_applies_here names the other places in THIS project it applies, with a count.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Rule id, e.g. 'split-driver-jitter' |
| route_label | string | – | The route or screen being worked on, so the places listed leave out the one already open. |
| skip | string | – | The `part` id of one also_applies_here entry that does not need doing. Recorded permanently: never raised again for this project. |
| skip_decided_by | string | – | Who decided to skip it. Use 'developer' when the person said so. |
No output schema declared.
No examples provided.
boosthis_jobs Jobs ~139
Every scheduled job this runtime reports, each in one state: on time; late; app unheard (the app, not the job, went quiet); never reported a run; or no rhythm declared, so it is remembered, not watched. A rhythm is declared on the project's page, or by a kit that offers expectEvery(). Each carries its rhythm, the lateness allowed and its last run. Only names and timings, never arguments or data; Boosthis never runs or schedules a job. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| install_id | string | yes | Install id (Connect AI card). |
| read_token | string | yes | Read-only token, same card. |
No output schema declared.
No examples provided.
boosthis_list_rules List Rules ~33
Every Boosthis performance rule available to this runtime, as ids and titles. The index for boosthis_get_rule.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
boosthis_maintenance_mix Maintenance Mix ~127
The Maintenance Mix: of the issues a project actually fixed, how many were fixed before users felt them (flagged by a Boosthis rule, app still healthy) versus after a crash or a poor rating. A project with too few fixed issues reports null rather than a made-up ratio. Read-only; returns no credentials.
| Name | Type | Req | Description |
|---|---|---|---|
| account_token | string | yes | Durable account token: dashboard "Connect AI once" card. |
| window_days | number | – | Only count fixes first seen in the last N days (default 90; 0 or 'all' = all time). |
No output schema declared.
No examples provided.
boosthis_match_rules_for_code Match Rules For Code ~68
Ranks Boosthis rules against a code snippet on each rule's id tokens and when_to_apply text, up to 8 candidates. Ranked guesses from a text match, not findings: each rule's when_to_apply settles whether it really applies.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | yes | – |
No output schema declared.
No examples provided.
boosthis_platform_allowances Platform Allowances ~120
What this project's hosting platform allows, confirmed on real installs. One answer per fact: the time and memory limits a run can read, a live countdown, a processor clock that moves, whether work after the reply runs, each with its source and when it was confirmed. An unconfirmed fact says so and carries no answer - never a limit, never a zero. Read from this project's own installs. A phone or browser reads as a device family with no allowance facts yet; an unrecognised host reads unknown, never production. Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
boosthis_project_diary Project Diary ~84
This project's life in order, joined from what Boosthis already keeps: fixes served, claims checked, promises and their verdicts, history moves, and changes assistants filed. Each entry says whether Boosthis measured it or was told it; a told one stays a claim however old. An empty stretch means nothing was recorded, never that all was well. Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
boosthis_promises Promises ~73
The standing promises this project's developer has recorded - what they want kept as the project changes, surviving earlier sessions and assistants. Each says whether Boosthis can measure it: 'watched' names the exact line it is held to, 'remembered only' is a standing instruction with nothing measuring it. Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
boosthis_record_change Record Change ~150
File a change you made here, so the next assistant knows - Boosthis cannot see code or commits. Kept as YOUR claim, never evidence. Passwords, keys and personal details are refused. This one writes.
| Name | Type | Req | Description |
|---|---|---|---|
| account_token | string | yes | Durable account token: dashboard "Connect AI once" card. |
| done | string | – | The name from intend, now finished. |
| intend | string | – | One thing you are starting - a route as the app registers it, or a migration, a fix. |
| subject | string | – | The screen, endpoint or job it touched. |
| summary | string | – | What you changed, in one or two sentences (max 300 characters). |
No output schema declared.
No examples provided.
boosthis_release_check Release Check ~150
How the last release held up, from the running app after it shipped, against the version this project's own measurements reported. Six answers: did served fixes stop the problems, did anything get slower, did new problems appear, did an old one come back, did a recorded promise pass its line, did the changes Boosthis witnessed hold up. Each carries its numbers and window; a part without enough evidence says so, and when it could answer. No combined score. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| install_id | string | – | Install id (Connect AI card). |
| runtime | string | – | Which runtime to read, e.g. node, web, rn or py. Omit: whichever reported most recently. |
No output schema declared.
No examples provided.
boosthis_remember_promise Remember Promise ~147
Saves what the developer wants kept true from now on as a promise on the project, in their words, surviving later sessions and other assistants. Restating one replaces it rather than duplicating it. Boosthis says what it reads the sentence to mean; nothing counts as measured until the developer confirms it on their project page. Passwords, keys and personal details are refused, not stored. This one writes.
| Name | Type | Req | Description |
|---|---|---|---|
| account_token | string | yes | Durable account token: dashboard "Connect AI once" card. |
| promise | string | yes | The standing instruction, in the developer's own plain words (up to 240 characters). E.g. the list screen stays under one second. |
No output schema declared.
No examples provided.
boosthis_session_summary Session Summary ~118
Per-screen p50/p75/p95 and worst rating, worst screens first, with p99, spike ratio and stdev spread where the server has them. No read credentials: a dashboard pointer, never empty. Read-only. More projects: `your_projects`.
| Name | Type | Req | Description |
|---|---|---|---|
| install_id | string | – | Install id (Connect AI card). |
| project | string | – | Dashboard name, 'name (runtime)' or install id; needs account_token. Default: newest reporter. |
| read_token | string | – | Read-only token, same card. |
No output schema declared.
No examples provided.
boosthis_snapshot Snapshot ~140
The latest upload from one install: per-route rows, per-screen diagnosis, summary and budgets where present. `section` takes a page section (incl. coverage) or `all`; an empty one names its silence, not a clean result. No credentials or none uploaded: a dashboard pointer. Read-only. More projects: `your_projects`.
| Name | Type | Req | Description |
|---|---|---|---|
| install_id | string | – | Install id (Connect AI card). |
| project | string | – | Dashboard name, 'name (runtime)' or install id; needs account_token. Default: newest reporter. |
| read_token | string | – | Read-only token, same card. |
| section | string | – | – |
No output schema declared.
No examples provided.
boosthis_structure Structure ~177
What is structurally wrong with this app, from the actions it traced: the route to fix first, single points of failure, pairs bouncing back and forth, call bursts, unexplained waits. Name a `route` (as recorded, e.g. GET /orders/:id) for that route's neighbourhood: what ran inside it, what ran it, which flows include it, is it a single point of failure. Each finding reads measured (real call links) or inferred (timing alone). `view`:"map" instead lists the parts observed running, their states and the calls between them, worst first. Every answer states how many traced actions it read, over what window; too few says so, never a clean bill of health. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| route | string | – | – |
| view | string | – | – |
No output schema declared.
No examples provided.
boosthis_trend Trend ~128
One project's last 30 days: for each finished day, how many measurements arrived, typical and worst-case screen time, how many were rated poor, new crashes, and alerts opened and closed - plus a verdict comparing the last 7 days with the 7 before. Days that reported nothing are no_data: unknown, never zero, never healthy. Too few measurements gives not-enough-data, not a guess. Read-only; returns no credentials.
| Name | Type | Req | Description |
|---|---|---|---|
| install_id | string | yes | Install id (Connect AI card). |
| read_token | string | yes | Read-only token, same card. |
No output schema declared.
No examples provided.
boosthis_verify_kit_install Verify Kit Install ~158
Check a Boosthis kit's FILES ON DISK are byte-perfect (same check over plain HTTPS: POST https://www.boosthis.com/api/kit/<runtime>/verify) - a pass proves the files, never that anything is measured yet. The verdict names the exact missing, modified and unexpected paths, each with expected sha256. Read-only; returns no credentials.
| Name | Type | Req | Description |
|---|---|---|---|
| files | array | yes | Each written kit file, sha256 lowercase-hex of its exact contents. |
| installed_version | string | – | The kit version installed here. |
| repair_steps | boolean | – | Adds step-by-step repair text. Default false. |
| runtime | string | – | Which runtime's kit to verify against. Required, never guessed. |
No output schema declared.
No examples provided.
boosthis_vigilance Vigilance ~139
One project's Vigilance verdict and every watch behind it, worst first: what each watches, what it says now, and its evidence. Also what it cannot watch and why - nothing declared yet, no history, reporting off, kit too old, part never named - unknowns, never good news, each with its way out: a rhythm is declared by expectEvery() or on the project's page, never from here. No score. Read-only, no credentials, never counted as an AI read.
| Name | Type | Req | Description |
|---|---|---|---|
| install_id | string | yes | Install id (Connect AI card). |
| read_token | string | yes | Read-only token, same card. |
No output schema declared.
No examples provided.
boosthis_what_should_i_look_at_next What Should I Look At Next ~120
A triage ordering: the worst-rated and slowest screens first, each with a one-line reason. No read credentials: a dashboard pointer, never empty. Read-only. More projects: `your_projects`.
| Name | Type | Req | Description |
|---|---|---|---|
| install_id | string | – | Install id (Connect AI card). |
| limit | integer | – | – |
| project | string | – | Dashboard name, 'name (runtime)' or install id; needs account_token. Default: newest reporter. |
| read_token | string | – | Read-only token, same card. |
No output schema declared.
No examples provided.
boosthis_which_kits Which Kits ~140
Which Boosthis kits this project needs, from manifest file names visible in it - nothing downloaded or executed. The inventory step before boosthis_get_integration_kit, whose `runtimes` list takes them all at once. Names the kit each file implies, what is already registered under this key, and the files whose contents decide one. With no arguments: the signal table.
| Name | Type | Req | Description |
|---|---|---|---|
| files | array | – | Manifest files visible in the project: path (project-relative, e.g. apps/api/package.json) and dependencies (names read out of it, where contents decide the kit - empty means none found, omitted mean… |
No output schema declared.
No examples provided.
What is the Boosthis MCP server?
Boosthis is an MCP server listed in the public MCP registry as com.boosthis/boosthis. Read-only performance insights for your Boosthis projects: speed, crashes, traces, and fixes. This page covers its hosted endpoint (https://www.boosthis.com/mcp).
Is the Boosthis MCP server safe to use?
Boosthis scores 88 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Boosthis MCP server expose?
Boosthis exposes 29 tools: boosthis_list_rules, boosthis_get_rule, boosthis_get_integration_kit, boosthis_get_removal_kit, boosthis_match_rules_for_code, and 24 more. Their descriptions and schemas cost roughly 3,880 tokens of context every time the server is loaded.
Does the Boosthis MCP server require authentication?
Yes. Boosthis asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the Boosthis MCP server still maintained?
Boosthis is still listed as active in the MCP registry. We last reached this channel on 28 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.