Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.bootify/mcp

REMOTE · BOOTIFY.IO

Build Spring Boot applications, ready for coding agents, including best practices.

Available components

0 this week 79 Trust /100

Last scanned (2 hours ago)

Scores higher than 79% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Developer Tools

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security63
Transport & Reachability100
Schema Quality & AI Usability68
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 7919 tokens (~138/item across 57 items; 57 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage92
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 74% of tool parameters carry a description.Partial
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 12 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 58 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 29 Oct 26 +1
    • Stability: 0.97 → pass security
  • 27 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.

  • 25 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

  • 22 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.

  • 20 Oct 26 +1
    • Tool “getProjectFile” rewrote its description, which is the text the model reads security
    • “getProjectFile” reworded the description of “path” cosmetic
  • 18 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.

  • 16 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.

  • 14 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://bootify.io/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=bootify.io CN=YR2,O=Let's Encrypt,C=US 18 Sept 2026 17 Dec 2026 RSA 4096 SHA256-RSA 61a496566cbc0993e5e7f985585445d1452
SANs: bootify.io
CN=YR2,O=Let's Encrypt,C=US (CA) CN=Root YR,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 RSA 2048 SHA256-RSA 4ebd24947e24d394802d84a52fd5b319
CN=Root YR,O=ISRG,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 RSA 4096 SHA256-RSA f24b6d17f9d9ad7cb1c9fea78782699f

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of bootify.io. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
io. present 38690 8 Verified
bootify.io. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000 ; includeSubDomains
x-content-type-options nosniff
x-frame-options DENY

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://bootify.io/mcp Verified 200
http (plaintext) http://bootify.io/mcp HTTPS enforced 302 https://bootify.io/mcp
MCP tools · 57 exposed · ~7,267 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
updateDatabaseNaming ~87

Update one or more database naming settings of an existing Bootify project. Background information: https://bootify.io/docs/general-tab.html

NameTypeReqDescription
namingStrategystring––
pluralizeTableNameboolean––
projectIdstringyesThe project ID returned by startProject
tablePrefixstring|null––
tableSuffixstring|null––
NameTypeReqDescription
affectedAreasarrayyesObject lists changed directly or by automatic effects. Lists are not returned; use getProject with these details when needed. Empty for no list changes.
changesobjectyesOnly settings whose values actually changed, including automatic effects, using final stored values in MCP format. Nested objects contain changed properties only. Empty when no settings changed; valu…
projectIdstringyesThe project ID returned by startProject
userProjectChangedboolean–Present only once when the project appears to have been changed by the user since the preceding MCP call within the last two hours

No examples provided.

updateDataObject ~168

Update or rename a custom data object by name. Entity-generated DTOs are returned by getProject with generated=true and must be changed through their entity fields or REST/frontend options. Background information: https://bootify.io/spring-data/hibernate-json-type.html

NameTypeReqDescription
appModulestring|null–Custom app module; null selects base. Available with Bootify Professional.
featurePackagestring|null–Optional dot-separated package path for domain-driven or mixed structure; null uses automatic assignment
fieldsarray–Complete ordered data object field list.
namestringyesCurrent name of the data object
newNamestring–New data object name; omit to keep its name
projectIdstringyesThe project ID returned by startProject
NameTypeReqDescription
affectedAreasarrayyesObject lists changed directly or by automatic effects. Lists are not returned; use getProject with these details when needed. Empty for no list changes.
changesobjectyesOnly settings whose values actually changed, including automatic effects, using final stored values in MCP format. Nested objects contain changed properties only. Empty when no settings changed; valu…
projectIdstringyesThe project ID returned by startProject
userProjectChangedboolean–Present only once when the project appears to have been changed by the user since the preceding MCP call within the last two hours

No examples provided.

updateDateFields ~73

Enable or disable generated date fields and configure their names. Background information: https://bootify.io/docs/general-tab.html

NameTypeReqDescription
dateCreatedNamestring––
enabledboolean––
lastUpdatedNamestring––
projectIdstringyesThe project ID returned by startProject
NameTypeReqDescription
affectedAreasarrayyesObject lists changed directly or by automatic effects. Lists are not returned; use getProject with these details when needed. Empty for no list changes.
changesobjectyesOnly settings whose values actually changed, including automatic effects, using final stored values in MCP format. Nested objects contain changed properties only. Empty when no settings changed; valu…
projectIdstringyesThe project ID returned by startProject
userProjectChangedboolean–Present only once when the project appears to have been changed by the user since the preceding MCP call within the last two hours

No examples provided.

updateDeveloperPreferences ~188

Update one or more developer preferences of an existing Bootify project. Background information: https://bootify.io/docs/general-tab.html

NameTypeReqDescription
applicationFormatstring–Format of the generated Spring application configuration
deploymentstring––
dockerComposeEnabledboolean–Generate Docker Compose support for local development
includeAgentInstructionsboolean–Generate AGENTS.md with coding agent instructions
javaVersioninteger––
openApiEnabledboolean–Generate OpenAPI documentation and Swagger UI
packageStructurestring–Package layout: TECHNICAL groups classes by technical type in packages such as domain, repos, service and rest; DOMAIN_DRIVEN groups all classes related to an entity in a package named after that ent…
projectIdstringyesThe project ID returned by startProject
NameTypeReqDescription
affectedAreasarrayyesObject lists changed directly or by automatic effects. Lists are not returned; use getProject with these details when needed. Empty for no list changes.
changesobjectyesOnly settings whose values actually changed, including automatic effects, using final stored values in MCP format. Nested objects contain changed properties only. Empty when no settings changed; valu…
projectIdstringyesThe project ID returned by startProject
userProjectChangedboolean–Present only once when the project appears to have been changed by the user since the preceding MCP call within the last two hours

No examples provided.

updateEntity ~243

Update or rename an entity identified by its current name. Only provided properties are changed; a provided fields array replaces all fields.

NameTypeReqDescription
appModulestring|null–App module name; null selects the base module. Available with Bootify Professional.
featurePackagestring|null–Optional dot-separated package path for domain-driven or mixed structure; null uses automatic assignment
fieldsarray–Complete ordered entity field list. Exactly one primary key is required for a concrete entity unless inherited; abstract superclasses may omit it. A primary key must be the first field and use INTEGE…
frontendEnabledboolean––
inheritsstring|null–Name of the superclass entity; null removes inheritance
namestringyesCurrent name of the entity to update
newNamestring–New entity name; omit to keep the current name
paginationEnabledboolean––
projectIdstringyesThe project ID returned by startProject
restEnabledboolean––
searchFilterEnabledboolean––
superclassboolean––
NameTypeReqDescription
affectedAreasarrayyesObject lists changed directly or by automatic effects. Lists are not returned; use getProject with these details when needed. Empty for no list changes.
changesobjectyesOnly settings whose values actually changed, including automatic effects, using final stored values in MCP format. Nested objects contain changed properties only. Empty when no settings changed; valu…
projectIdstringyesThe project ID returned by startProject
userProjectChangedboolean–Present only once when the project appears to have been changed by the user since the preceding MCP call within the last two hours

No examples provided.

updateEnum ~149

Update or rename an enum identified by its current name. Provide newName, values, appModule, featurePackage, or several.

NameTypeReqDescription
appModulestring|null–Custom app module name; null selects base. Available with Bootify Professional.
featurePackagestring|null–Optional dot-separated package path for domain-driven or mixed structure; null uses automatic assignment
namestringyesCurrent name of the enum to update
newNamestring–New enum name; omit to keep the current name
projectIdstringyesThe project ID returned by startProject
valuesarray–Ordered, unique enum values such as DRAFT and PUBLISHED
NameTypeReqDescription
affectedAreasarrayyesObject lists changed directly or by automatic effects. Lists are not returned; use getProject with these details when needed. Empty for no list changes.
changesobjectyesOnly settings whose values actually changed, including automatic effects, using final stored values in MCP format. Nested objects contain changed properties only. Empty when no settings changed; valu…
projectIdstringyesThe project ID returned by startProject
userProjectChangedboolean–Present only once when the project appears to have been changed by the user since the preceding MCP call within the last two hours

No examples provided.

updateFrontend ~115

Update one or more frontend settings of an existing Bootify project. Background information: https://bootify.io/docs/frontend-settings.html

NameTypeReqDescription
buildToolstring––
cssFrameworkstring––
frameworkstring––
htmxEnabledboolean–Used only with Thymeleaf and JTE
projectIdstringyesThe project ID returned by startProject
typescriptEnabledboolean–Used only with Vite or Webpack for Thymeleaf and JTE
NameTypeReqDescription
affectedAreasarrayyesObject lists changed directly or by automatic effects. Lists are not returned; use getProject with these details when needed. Empty for no list changes.
changesobjectyesOnly settings whose values actually changed, including automatic effects, using final stored values in MCP format. Nested objects contain changed properties only. Empty when no settings changed; valu…
projectIdstringyesThe project ID returned by startProject
userProjectChangedboolean–Present only once when the project appears to have been changed by the user since the preceding MCP call within the last two hours

No examples provided.

updateFrontendController ~196

Available with Bootify Professional. Update or rename a custom frontend controller by name. Entity-generated controllers are returned by the matching getProject details option with generated=true and must be changed through their entity options.

NameTypeReqDescription
appModulestring|null–Custom application module name; null selects the web module
endpointsarray––
featurePackagestring|null–Optional dot-separated package path for domain-driven or mixed structure; null uses automatic assignment
namestringyesCurrent name of the frontend controller
newNamestring–New controller name; omit to keep its name
parametersarray–Types for every placeholder and query declaration, in the same order as path. Bootify derives whether each parameter is a path or query parameter.
pathstring–Controller base path, with optional {name} placeholders
projectIdstringyesThe project ID returned by startProject
NameTypeReqDescription
affectedAreasarrayyesObject lists changed directly or by automatic effects. Lists are not returned; use getProject with these details when needed. Empty for no list changes.
changesobjectyesOnly settings whose values actually changed, including automatic effects, using final stored values in MCP format. Nested objects contain changed properties only. Empty when no settings changed; valu…
projectIdstringyesThe project ID returned by startProject
userProjectChangedboolean–Present only once when the project appears to have been changed by the user since the preceding MCP call within the last two hours

No examples provided.

updateIndex ~130

Update an index by its current Entity.field1-field2 identifier. Only provided properties are changed; the response contains its updated identifier.

NameTypeReqDescription
entitystring–Entity containing the indexed fields or owning-side relations
fieldsarray–Ordered field or owning-side relation names. Order affects index usage; many-to-many relations are not available and a primary key cannot be used alone.
namestringyesCurrent Entity.field1-field2 identifier
projectIdstringyesThe project ID returned by startProject
uniqueboolean–Whether the index enforces a unique field combination
NameTypeReqDescription
affectedAreasarrayyesObject lists changed directly or by automatic effects. Lists are not returned; use getProject with these details when needed. Empty for no list changes.
changesobjectyesOnly settings whose values actually changed, including automatic effects, using final stored values in MCP format. Nested objects contain changed properties only. Empty when no settings changed; valu…
namestring–Current canonical selector; copy into subsequent update or delete calls
projectIdstringyesThe project ID returned by startProject
userProjectChangedboolean–Present only once when the project appears to have been changed by the user since the preceding MCP call within the last two hours

No examples provided.

updateMailSettings ~90

Available with Bootify Professional. Enable or disable mail support and configure the generated application's SMTP connection.

NameTypeReqDescription
connectionstring––
displayNamestring|null––
enabledboolean––
fromstring|null––
hoststring|null––
projectIdstringyesThe project ID returned by startProject
usernamestring|null––
NameTypeReqDescription
affectedAreasarrayyesObject lists changed directly or by automatic effects. Lists are not returned; use getProject with these details when needed. Empty for no list changes.
changesobjectyesOnly settings whose values actually changed, including automatic effects, using final stored values in MCP format. Nested objects contain changed properties only. Empty when no settings changed; valu…
projectIdstringyesThe project ID returned by startProject
userProjectChangedboolean–Present only once when the project appears to have been changed by the user since the preceding MCP call within the last two hours

No examples provided.

updateRelation ~371

Update a relation whose type describes the cardinality from fromEntity to toEntity. For MANY_TO_ONE, ONE_TO_ONE and MANY_TO_MANY the owning field is fromEntity.fromField; for ONE_TO_MANY it is toEntity.toField. The response includes that canonical owning-side value as identifier. Bidirectional relations require both fields. Background information: https://bootify.io/docs/jpa-relationship-types-with-examples.html. Identify the existing relation with its current identifier returned by addRelation, updateRelation or getProject; do not reconstruct internal IDs. Only provided relation properties are changed. If an update changes the owning entity or field, use the newly returned identifier for subsequent calls.

NameTypeReqDescription
fromEntitystring–Entity on the from side of the cardinality
fromFieldstring|null–Field generated on fromEntity. Required unless an unidirectional ONE_TO_MANY relation omits this reverse field
identifierstringyesCurrent identifier copied verbatim from addRelation, updateRelation or getProject RELATIONS
projectIdstringyesThe project ID returned by startProject
requiredboolean–Whether the owning foreign key is required. Not applicable to MANY_TO_MANY or self-relations
tableNamestring|null–Join-table name; required only for MANY_TO_MANY
toEntitystring–Entity on the to side of the cardinality
toFieldstring|null–Field generated on toEntity. Required for ONE_TO_MANY and bidirectional relations; also required for self-referencing MANY_TO_MANY relations
typestring–Cardinality from fromEntity to toEntity
unidirectionalboolean–Omit the reverse field. Relations across application modules must be unidirectional
NameTypeReqDescription
affectedAreasarrayyesObject lists changed directly or by automatic effects. Lists are not returned; use getProject with these details when needed. Empty for no list changes.
changesobjectyesOnly settings whose values actually changed, including automatic effects, using final stored values in MCP format. Nested objects contain changed properties only. Empty when no settings changed; valu…
identifierstring–Current canonical selector; copy into subsequent update or delete calls
projectIdstringyesThe project ID returned by startProject
userProjectChangedboolean–Present only once when the project appears to have been changed by the user since the preceding MCP call within the last two hours

No examples provided.

updateRestController ~196

Available with Bootify Professional. Update or rename a custom REST controller by name. Entity-generated controllers are returned by the matching getProject details option with generated=true and must be changed through their entity options.

NameTypeReqDescription
appModulestring|null–Custom application module name; null selects the web module
endpointsarray––
featurePackagestring|null–Optional dot-separated package path for domain-driven or mixed structure; null uses automatic assignment
namestringyesCurrent name of the REST controller
newNamestring–New controller name; omit to keep its name
parametersarray–Types for every placeholder and query declaration, in the same order as path. Bootify derives whether each parameter is a path or query parameter.
pathstring–Controller base path, with optional {name} placeholders
projectIdstringyesThe project ID returned by startProject
NameTypeReqDescription
affectedAreasarrayyesObject lists changed directly or by automatic effects. Lists are not returned; use getProject with these details when needed. Empty for no list changes.
changesobjectyesOnly settings whose values actually changed, including automatic effects, using final stored values in MCP format. Nested objects contain changed properties only. Empty when no settings changed; valu…
projectIdstringyesThe project ID returned by startProject
userProjectChangedboolean–Present only once when the project appears to have been changed by the user since the preceding MCP call within the last two hours

No examples provided.

updateSecurityConfig ~122

Change only the identity, type, module or authentication mode. Changing type resets type-specific settings to defaults.

NameTypeReqDescription
appModulestring|null–Custom app module; null selects base
authenticationMethodstring––
featurePackagestring|null–Optional dot-separated package path for domain-driven or mixed structure; null uses automatic assignment
namestringyesCurrent config name
newNamestring–New config name
projectIdstringyesThe project ID returned by startProject
typestring––
NameTypeReqDescription
affectedAreasarrayyesObject lists changed directly or by automatic effects. Lists are not returned; use getProject with these details when needed. Empty for no list changes.
changesobjectyesOnly settings whose values actually changed, including automatic effects, using final stored values in MCP format. Nested objects contain changed properties only. Empty when no settings changed; valu…
projectIdstringyesThe project ID returned by startProject
userProjectChangedboolean–Present only once when the project appears to have been changed by the user since the preceding MCP call within the last two hours

No examples provided.

updateSettings ~114

Update one or more basic settings of an existing Bootify project. Background information: https://bootify.io/docs/general-tab.html

NameTypeReqDescription
buildTypestring––
groupstring–A group name such as com.my-group, used for build settings and package name
languagestring––
lombokEnabledboolean–Ignored for Kotlin projects
namestring–A project name such as my-project
projectIdstringyesThe project ID returned by startProject
NameTypeReqDescription
affectedAreasarrayyesObject lists changed directly or by automatic effects. Lists are not returned; use getProject with these details when needed. Empty for no list changes.
changesobjectyesOnly settings whose values actually changed, including automatic effects, using final stored values in MCP format. Nested objects contain changed properties only. Empty when no settings changed; valu…
projectIdstringyesThe project ID returned by startProject
userProjectChangedboolean–Present only once when the project appears to have been changed by the user since the preceding MCP call within the last two hours

No examples provided.

updateUtilities ~157

Include utilities for custom code even when the project does not require them. Required utilities cannot be disabled. They remain included when no longer required, until explicitly disabled. Omitted options retain their values. Inspect utilities in getProject for the current inclusion state.

NameTypeReqDescription
includeFileHandlingboolean–Include file handling services and database storage
includeInputRowboolean–Include inputRow and supporting form utilities; requires Thymeleaf, jte, Angular or React
includePaginationAndSortingboolean–Include frontend pagination and sorting utilities; requires a frontend framework
includeSearchFilterboolean–Include frontend search filter utilities; requires a frontend framework
projectIdstringyesThe project ID returned by startProject
NameTypeReqDescription
affectedAreasarrayyesObject lists changed directly or by automatic effects. Lists are not returned; use getProject with these details when needed. Empty for no list changes.
changesobjectyesOnly settings whose values actually changed, including automatic effects, using final stored values in MCP format. Nested objects contain changed properties only. Empty when no settings changed; valu…
projectIdstringyesThe project ID returned by startProject
userProjectChangedboolean–Present only once when the project appears to have been changed by the user since the preceding MCP call within the last two hours

No examples provided.

Install

How do I install the io.bootify/mcp server?

io.bootify/mcp is a hosted endpoint at https://bootify.io/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · bootify.io

# add to Claude Code
claude mcp add --transport http io-bootify-mcp 'https://bootify.io/mcp'
Common questions

What is the io.bootify/mcp server?

io.bootify/mcp is listed in the public MCP registry as io.bootify/mcp. Build Spring Boot applications, ready for coding agents, including best practices. This page covers its hosted endpoint (https://bootify.io/mcp).

Is the io.bootify/mcp server safe to use?

io.bootify/mcp scores 79 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.bootify/mcp server expose?

io.bootify/mcp exposes 57 tools: startProject, getProject, linkProject, copyProject, deleteProject, and 52 more. Their descriptions and schemas cost roughly 7,267 tokens of context every time the server is loaded.

Does the io.bootify/mcp server require authentication?

No. We connected to io.bootify/mcp without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the io.bootify/mcp server still maintained?

io.bootify/mcp is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.