Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Provision Stack

REMOTE · API.PROVISION-STACK.COM · SCANNED AUG 22

Outcome-based infrastructure for agents — verified AWS deployments, metered billing

−35 this week 0 Trust /100

Dead

Every channel of this server has been unreachable for long enough to be marked dead. Its trust score is pinned to 0 and does not recover automatically: even once the server responds again it stays dead until it is manually reinstated.

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security11
Transport & Reachability0
Schema Quality & AI Usability0
  • Schema not yet verified: we couldn't read the endpoint's schema.Unverified
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
  • Tool coverage not yet verified: we couldn't read the endpoint's tools.Unverified
Tool Safety

Not scored yet: our latest scan of this component recorded no findings here. It fills in the next time we score it.

Capabilities0
  • Capabilities not yet verified: we couldn't read the endpoint's capabilities.Unverified

Unverified: 4 categories

Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

Install

How do I install the Provision Stack MCP server?

Provision Stack is a hosted endpoint at https://api.provision-stack.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · api.provision-stack.com

# add to Claude Code
claude mcp add --transport http com-provision-stack-provision-stack 'https://api.provision-stack.com/mcp'
// .cursor/mcp.json
{
  "mcpServers": {
    "com-provision-stack-provision-stack": {
      "url": "https://api.provision-stack.com/mcp"
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "com-provision-stack-provision-stack": {
      "type": "http",
      "url": "https://api.provision-stack.com/mcp"
    }
  }
}
# ~/.codex/config.toml
[mcp_servers.com-provision-stack-provision-stack]
url = "https://api.provision-stack.com/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-provision-stack-provision-stack": {
      "type": "remote",
      "url": "https://api.provision-stack.com/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add com-provision-stack-provision-stack --url 'https://api.provision-stack.com/mcp' --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  com-provision-stack-provision-stack:
    url: "https://api.provision-stack.com/mcp"
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "com-provision-stack-provision-stack": {
      "Transport": "http",
      "Url": "https://api.provision-stack.com/mcp"
    }
  }
}
# add to Vellum
assistant mcp add com-provision-stack-provision-stack -t streamable-http -u 'https://api.provision-stack.com/mcp'
// mcp.json
{
  "mcpServers": {
    "com-provision-stack-provision-stack": {
      "type": "http",
      "url": "https://api.provision-stack.com/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 22 Aug 26 −12

    The score moved with no change recorded against any check. We would rather say so than guess.

  • 17 Aug 26 −12

    The score moved with no change recorded against any check. We would rather say so than guess.

  • 16 Aug 26 −11

    The score moved with no change recorded against any check. We would rather say so than guess.

  • 15 Aug 26 −12

    The score moved with no change recorded against any check. We would rather say so than guess.

  • 13 Aug 26 −12

    The score moved with no change recorded against any check. We would rather say so than guess.

  • 11 Aug 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 2 Aug 26 0
    • Endpoint reachability: reachable → unreachable security
    • DNSSEC: fail → unverified security
    • Authorization: fail → unverified security
    • HSTS header: fail → unverified security
    • TLS certificate: pass → unverified security
    • Stability: 0.20 → unverified security
    • Transport: pass → fail security
    • Capabilities: pass → unverified functional
    • Tool coverage: 100 → unverified functional
    • First check of Schema quality: unverified functional
  • 31 Jul 26 +1
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 22 Aug 2026 · Probed https://api.provision-stack.com/mcp

TLS unreached
DNSSEC inconclusive

Validation of api.provision-stack.com. Inconclusive

Zone DS Keys Algorithms Outcome
api.provision-stack.com. Error no A/AAAA/CNAME RRset answered for the name
Authentication Inconclusive

We could not reach the endpoint well enough to judge its authorisation posture.

Result Inconclusive

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://api.provision-stack.com/mcp Unreachable
http (plaintext) http://api.provision-stack.com/mcp HTTPS enforced
MCP tools · 12 exposed · ~1,602 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
billing.balance ~87

Return the account credit position as total, held, and available USD without modifying the balance. Call when deploy.run returns HTTP 402 insufficient_credits, or before deploy.run when you need to confirm availableUsd covers the hold. Do not use this to add funds — call billing.top_up when availableUsd is insufficient, then retry deploy.run. Read-only; does not create charges or hold credits.

Input schema present but exposes no named parameters.

NameTypeReqDescription
accountIdstringyes
availableUsdnumberyes
balanceUsdnumberyes
heldUsdnumberyes

No examples provided.

billing.top_up ~159

Create a credit top-up intent for the account (does not immediately increase balance). Call when deploy.run fails with HTTP 402 or billing.balance shows availableUsd below the required hold; choose rail=xrp (agent pays on-ledger with REQUIRED destination tag + exact amount) or rail=stripe (human Checkout URL). Do not call to inspect balance — use billing.balance. After funds confirm, retry the failed deploy.run. Side effects: opens a payment/deposit flow (open world); not idempotent — each call creates a new top-up.

NameTypeReqDescription
amountUsdnumberyesAmount to add, in USD (e.g. 20)
railstringPayment rail: xrp (agent-native) or stripe (human)
NameTypeReqDescription
amountUsdnumber
amountXrpnumber
checkoutUrlstring
creditedOnstring
depositAddressstring
destinationTagnumber
expiresAtstring
memostring
rateUsdPerXrpnumber
topupIdstringyes

No examples provided.

credentials.list ~65

Check cloud provider credential configuration without exposing secrets. Call before deploy.run to confirm AWS/GCP/Azure/Oracle/Cloudflare are ready. Returns configured=true/false plus guidance — never returns secret values.

NameTypeReqDescription
providerstringCloud provider to check (defaults to checking all)
NameTypeReqDescription
awsobject
azure
cloudflare
gcp
oracle

No examples provided.

deploy.destroy ~84

DESTRUCTIVE: permanently destroy all cloud resources owned by a deployment. Irreversible — confirm the deploymentId with the user first. Prefer deploy.teardown_latest only when intentionally removing the newest active deployment. Optional reason is stored for audit.

NameTypeReqDescription
deploymentIdstringyesDeployment id whose resources should be destroyed
reasonstringOptional audit reason for the destroy
NameTypeReqDescription
deploymentIdstringyes
destroyedAtstringyes
statusstringyes

No examples provided.

deploy.list ~100

Return the Execution API’s tracked deployments (deploymentId, status, category, createdAt) so you can select a target for status checks or teardown. Call when you need a deploymentId and do not already have one from deploy.run, or to inventory active work before deploy.destroy/deploy.teardown_latest. Do not use this to monitor a known deployment — poll deploy.status with that id instead. Read-only; does not create, modify, or destroy resources.

Input schema present but exposes no named parameters.

NameTypeReqDescription
countnumberyesNumber of deployments returned
deploymentsarrayyes

No examples provided.

deploy.run ~229

Provision the explicitly selected suggestion through the Execution API. Never call before presenting options and receiving user approval. Pass resources from the chosen suggestions.generate option as selection evidence. The deploy fee is held from the account credit balance and captured only after verification passes (failed deployments are free). On HTTP 402, call billing.top_up and retry. When the outcome includes a custom domain and CLOUDFLARE_API_TOKEN is set, DNS records are automatically created pointing the domain at the deployed endpoint. After accept, poll deploy.status.

NameTypeReqDescription
maxMonthlyCostUsdnumberCustomer max monthly cost cap in USD — deploy is rejected when the estimate exceeds the cap
outcomestringyesNatural language deployment objective
projectIdstringOptional project id to group related deployments
providerstringCloud provider (auto-detected from resources if omitted)
regionstringTarget region; defaults via region.detect for provider
resourcesarrayyesResources from the selected suggestion; used as selection evidence
tierstringSelected suggestion tier; defaults to MVP
NameTypeReqDescription
categorystring
createdAtstringyes
deploymentIdstringyes
messagestringyes
providerstringyes
quoteobjectyes
regionstringyes
statusstringyes
tierstringyes

No examples provided.

deploy.status ~64

Check deployment progress and retrieve verification evidence when complete. Poll after deploy.run until status is verified/failed/destroyed. On success, result.endpoints and result.verificationResults contain live URLs and check outcomes.

NameTypeReqDescription
deploymentIdstringyesDeployment id returned by deploy.run
NameTypeReqDescription
agentIdstringyes
categorystring
createdAtstringyes
deploymentIdstringyes
desiredOutcomestringyes
projectIdstringyes
resultobject
statusstringyes
updatedAtstringyes

No examples provided.

deploy.teardown_latest ~81

DESTRUCTIVE: destroy the newest active deployment, or all active deployments when all=true. Skips already destroyed/failed entries. Confirm with the user before calling — especially with all=true. Prefer deploy.destroy with an explicit deploymentId when targeting a specific deployment.

NameTypeReqDescription
allbooleanWhen true, destroy every active deployment; otherwise only the newest
NameTypeReqDescription
destroyednumberyesHow many deployments were destroyed
resultsarrayyes

No examples provided.

pricing.get ~365

Estimate monthly and hourly USD cost for one cloud resource type (e.g. ec2_instance, rds_instance, gcp_cloud_run) without provisioning anything. Use after suggestions.generate when the user wants a component-level breakdown for a single resource; prefer region from region.detect. Provider is inferred from resourceType prefixes (gcp_*, azure_*, oracle_*) when omitted. Do not use for full-stack option comparison — that is suggestions.generate. Does not create resources or hold credits.

NameTypeReqDescription
instanceCountnumberNumber of instances to price (default 1)
instanceTypestringAWS instance type (e.g. t3.micro) for compute/RDS
machineTypestringGCP machine type (e.g. e2-medium)
memoryInGbsnumberOracle memory in GiB for flexible shapes
ocpusnumberOracle OCPU count for flexible shapes
providerstringCloud provider (auto-detected from resourceType if omitted)
regionstringCloud region; defaults via region.detect for the provider
resourceTypestringyesCloud resource type to price (prefix gcp_/azure_/oracle_ selects provider)
shapestringOracle compute shape (e.g. VM.Standard.E4.Flex)
sizeGbnumberDisk/volume size in GiB (EBS, etc.)
storageGbnumberObject/database storage size in GiB
vmSizestringAzure VM size (e.g. Standard_B1s)
volumeTypestringVolume type (e.g. gp3, io2)
zonestringGCP/Azure availability zone when required
NameTypeReqDescription
componentsarrayyes
descriptionstringyes
estimateIdstringyes
hourlyCostUsdnumberyes
monthlyCostUsdnumberyes
providerstringyes
regionstringyes
resourceTypestringyes

No examples provided.

providers.detect ~58

Detect all configured cloud providers and their regions in one call. Prefer this over repeated region.detect when comparing AWS/GCP/Azure/Oracle. Returns { providers: [...] } with source (env|config|default) and a guidance message per provider.

Input schema present but exposes no named parameters.

NameTypeReqDescription
providersarrayyesDetected region for each supported cloud provider

No examples provided.

region.detect ~90

Resolve the active region for one cloud provider from env/config, or a documented default when unset. Call before suggestions.generate/deploy.run when targeting a single provider so pricing and placement match local config. Prefer providers.detect instead when comparing AWS/GCP/Azure/Oracle in one step. Read-only; does not change cloud config.

NameTypeReqDescription
providerstringCloud provider to detect region for (defaults to aws)
NameTypeReqDescription
messagestringyesHuman-readable detection summary
providerstringyesCloud provider id
regionstringyesDetected or default region
sourcestringyesWhere the region value came from

No examples provided.

suggestions.generate ~220

START HERE for any deployment. STEP 1: Call region.detect or providers.detect. STEP 2: Call this tool with the detected region. Returns Starter/MVP/Startup/Enterprise options with monthly costs. When the response includes a clarificationRequest, answer the suggested questions and call again with requirements. Present all options and wait for an explicit choice before deploy.run. When the outcome mentions a custom domain (e.g. 'deploy to api.example.com') and CLOUDFLARE_API_TOKEN is set, DNS records are auto-detected and will be created during deployment.

NameTypeReqDescription
crossProviderbooleanInclude cross-provider suggestions (default: true)
maxMonthlyCostUsdnumberCustomer max monthly cost cap in USD — options above the cap are filtered out
outcomestringyesNatural language description of the desired outcome
providerstringFilter to specific cloud provider
regionstringCloud provider region
requirementsobjectRequirements to rank patterns — use this when responding to a clarificationRequest
NameTypeReqDescription
clarificationRequestobject
infraTypestringyes
optionCountnumberyesNumber of suggestion options returned
optionsarrayyes
outcomestringyes
providersarrayyesProviders covered by the options
resultIdstringyes

No examples provided.

Common questions

What is the Provision Stack MCP server?

Provision Stack is an MCP server listed in the public MCP registry as com.provision-stack/provision-stack. Outcome-based infrastructure for agents, verified AWS deployments, metered billing. This page covers its hosted endpoint (https://api.provision-stack.com/mcp).

Is the Provision Stack MCP server safe to use?

Provision Stack scores 0 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Provision Stack MCP server expose?

Provision Stack exposes 12 tools: suggestions.generate, pricing.get, credentials.list, region.detect, providers.detect, and 7 more. Their descriptions and schemas cost roughly 1,602 tokens of context every time the server is loaded.

Does the Provision Stack MCP server require authentication?

Its publisher declares no required credentials for Provision Stack. We have not been able to confirm that against the live endpoint, and a server can require authorisation without declaring it here.

Is the Provision Stack MCP server still maintained?

Provision Stack has been unreachable for long enough that we treat it as dead, and its score is pinned to zero. We last reached this channel on 1 August 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.