Impreza Host
REMOTE · MCP.IMPREZAHOST.COM · 2 COMPONENTS
No-KYC offshore hosting an AI agent runs end-to-end: no-email signup, crypto, VPS, deploy, Tor.
Available components
Last scanned (1 hour ago)
Scores higher than 99% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Cloud Infrastructure
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security100
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
- The authorisation server supports Client ID Metadata Documents, the current MCP client-registration mechanism. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability68
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1518 tokens (~189/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (50% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 0
- This server's schema is too large to store in full, so we cannot compare its tools day to day functional
- 4 Nov 26 0
- This server's schema is too large to store in full, so we cannot compare its tools day to day functional
- 3 Nov 26 0
- This server's schema is too large to store in full, so we cannot compare its tools day to day functional
- 2 Nov 26 0
- This server's schema is too large to store in full, so we cannot compare its tools day to day functional
- 1 Nov 26 0
- This server's schema is too large to store in full, so we cannot compare its tools day to day functional
- 31 Oct 26 0
- This server's schema is too large to store in full, so we cannot compare its tools day to day functional
- 30 Oct 26 0
- This server's schema is too large to store in full, so we cannot compare its tools day to day functional
- 29 Oct 26 0
- This server's schema is too large to store in full, so we cannot compare its tools day to day functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://mcp.imprezahost.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=mcp.imprezahost.com | CN=WE1,O=Google Trust Services,C=US | 18 Oct 2026 | 16 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | 39e4197821b8548a0e128949415e8805 |
| SANs: mcp.imprezahost.com | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC secure
Validation of mcp.imprezahost.com. — Secure
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| imprezahost.com. | present | 2371 | 13 | Verified |
| mcp.imprezahost.com. | Verified address RRset verified with the apex keys |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
WWW-Authenticate challenge Bearer scope="read", resource_metadata="https://mcp.imprezahost.com/.well-known/oauth-protected-resource"
Bearer scope="read", resource_metadata="https://mcp.imprezahost.com/.well-known/oauth-protected-resource" | Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains |
| content-security-policy | default-src 'none'; frame-ancestors 'none' |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | no-referrer |
| permissions-policy | geolocation=(), camera=(), microphone=() |
Protected resource metadata
| Document | https://mcp.imprezahost.com/.well-known/oauth-protected-resource |
|---|---|
| Retrieved | Yes |
| Resource | https://mcp.imprezahost.com/mcp |
| Authorisation server | https://mcp.imprezahost.com |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.imprezahost.com/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.imprezahost.com/mcp | HTTPS enforced | 301 | https://mcp.imprezahost.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
impreza_bootstrap_account Create an anonymous account ~304
Create a brand-new ANONYMOUS Impreza account — no e-mail, no KYC — and get an operating credential in ONE call. Use this when you have no account or token yet. Returns: account_id, api_key + api_secret (REST), a fresh mcp_token valid for 15 minutes (reconnect THIS MCP server with it as the Bearer to unlock the full toolset), its mcp_token_expires_at, renewal instructions, and a recovery_code shown once (save it for account recovery, including after MCP expiry). Renew with POST /v1/credentials authenticated by the returned REST key and secret, explicit scopes and ttl_seconds; the renewal example includes daily and monthly spending ceilings for manage. Omit manage to prevent purchases. After bootstrapping, reconnect with the mcp_token. Have a server already? impreza_add_server installs the agent on it, and the first external server is free (no plan, no credit). Otherwise fund the account in crypto with impreza_topup (BTC/XMR) before ordering a VPS.
| Name | Type | Req | Description |
|---|---|---|---|
| idempotency_key | string | – | Optional unique string so a retried call does not create a duplicate account. |
| label | string | – | Optional label for the account/credential (e.g. your agent name). |
| scopes | array | – | Optional credential scopes. Omit for read, deploy and manage; provide a non-empty list to restrict the returned REST and MCP credentials. |
No output schema declared.
No examples provided.
impreza_domain_check Check domain availability ~55
Check domain availability + price before registering. Pass one domain or several comma-separated. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Domain(s) to check, e.g. "example.com" or "a.com,b.net". |
No output schema declared.
No examples provided.
impreza_domain_pricing Domain price list ~56
List registration, renewal and transfer prices for the TLDs Impreza sells, in the account currency. Use this to compare prices and choose a TLD before impreza_domain_check or impreza_register_domain. Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
impreza_list_apps Browse app catalog ~65
List apps available in the Impreza curated catalog. Optional filters: category and search. For a custom app outside the catalog, use impreza_deploy_custom.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Optional category filter. |
| search | string | – | Optional case-insensitive search term. |
Structured output declared, but exposes no named fields.
No examples provided.
impreza_list_products List products and prices ~150
List the products a customer can order (VPS, Tor hosting, dedicated servers, …) with pricing in the account currency. Filter to server products with type "server". The VPS is one configurable product (configurable: true, priced from its smallest size) — get its locations, operating systems and sizes with impreza_vps_offer. Fixed plans return id, name, group and per-cycle price + setup fee — feed the id + a billing_cycle into impreza_order_vps.
| Name | Type | Req | Description |
|---|---|---|---|
| group | string | – | Filter by product group name (substring), e.g. "VPS". |
| type | string | – | Product type filter. Use "server" for VPS / dedicated plans. |
No output schema declared.
No examples provided.
impreza_search_docs Search documentation ~216
Search the Impreza documentation and get the actual paragraph back. Use this BEFORE guessing an argument, a field name or how a flow works — "container_name 502", "onion", "how does topup work", "manifest routing", "rate limit". Returns the matching sections with their heading trail and the relevant excerpt, so you answer from what the docs say instead of from a guess. A guessed argument costs a 400 and a round trip; this costs one call. Also use it when a customer asks how something works: the answer is written down and you can quote it.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Maximum sections (1-10, default 3). |
| query | string | – | Plain words or an exact term, e.g. "container_name", "ready_for_deploy", "crypto payment". |
| section | string | – | Instead of searching, return one whole section by the heading a previous result gave you (e.g. "Manifest-mode routing contract"). Use when the excerpt was cut short. |
Structured output declared, but exposes no named fields.
No examples provided.
impreza_validate_manifest Validate deploy manifest ~209
Check a custom-deploy manifest BEFORE deploying it. Returns `errors` — the exact reasons the deploy endpoint would reject it, checked by the same validator, so no errors means it will not be turned away for a known reason — and `warnings`: footguns that deploy fine and then hurt (unpinned image, no restart policy, a published port bypassing the reverse proxy) plus the PRIVACY findings that matter on this product: third-party CDN/font/analytics origins, public DNS resolvers, hardcoded timezones, literal secrets, outbound mail. Every finding carries a `fix`. Call this before impreza_deploy_custom: one call here beats a deploy that reports "running" and 502s. Never include credentials in source text: secret detection cannot inspect arbitrary source or configuration. Enter runtime secrets through the owner portal link.
| Name | Type | Req | Description |
|---|---|---|---|
| manifest | object | yes | The full manifest object you would pass to impreza_deploy_custom, including runtime.compose_yaml and any network.reverse_proxy.routes. |
Structured output declared, but exposes no named fields.
No examples provided.
impreza_vps_offer VPS options and prices ~400
What a new VPS can be, and what it costs. Lists the locations (with each jurisdiction's note), the operating systems, the CPU/memory/disk ranges with the price per unit for every billing cycle, and the apps it can be born with, in the account currency. Pass a whole configuration (billing_cycle, location, os, cpu_cores, memory_gb, disk_gb) to get its exact price instead — what is due today, what it renews at, whether the balance covers it and whether that location has room right now. With app omitted the quote means '@agent', this MCP's default, the same as impreza_order_vps. Then order it with impreza_order_vps using the same values. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| app | string | – | Optional: what it is born with — '@agent' (this MCP's default when omitted: the Impreza agent, which installs on first boot, not instantly); 'none' for a bare OS; '@agent-mcp', a '@panel-*' choice or… |
| billing_cycle | string | – | Optional, to price a configuration: monthly, quarterly, semiannually, annually, biennially or triennially. |
| cpu_cores | number | – | Optional: vCPU count, inside the range this tool lists. |
| disk_gb | number | – | Optional: SSD disk in GB, inside the range this tool lists. |
| location | string|number | – | Optional: a location id, slug or name from this tool, e.g. "romania". |
| memory_gb | number | – | Optional: memory in GB, inside the range this tool lists. |
| os | string|number | – | Optional: an operating system id, slug or name from this tool, e.g. "ubuntu-24.04". |
Structured output declared, but exposes no named fields.
No examples provided.
How do I install the Impreza Host MCP server?
Impreza Host is a hosted endpoint at https://mcp.imprezahost.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.imprezahost.com
claude mcp add --transport http imprezahost-impreza-mcp 'https://mcp.imprezahost.com/mcp'
What is the Impreza Host MCP server?
Impreza Host is an MCP server listed in the public MCP registry as io.github.imprezahost/impreza-mcp. No-KYC offshore hosting an AI agent runs end-to-end: no-email signup, crypto, VPS, deploy, Tor. This page covers its hosted endpoint (https://mcp.imprezahost.com/mcp).
Is the Impreza Host MCP server safe to use?
Impreza Host scores 94 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Impreza Host MCP server expose?
Impreza Host exposes 8 tools: impreza_bootstrap_account, impreza_list_apps, impreza_search_docs, impreza_validate_manifest, impreza_domain_check, and 3 more. Their descriptions and schemas cost roughly 1,455 tokens of context every time the server is loaded.
Does the Impreza Host MCP server require authentication?
Yes. Impreza Host asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the Impreza Host MCP server still maintained?
Impreza Host is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.