io.usefulapi/civo
REMOTE · CIVO.USEFULAPI.IO · SCANNED OCT 3
List Civo instances, Kubernetes clusters, networks and DNS; reboot instances, add rules.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security89
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability78
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2804 tokens (~127/item across 22 items; 22 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management10
- Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 22 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 22 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
How do I install the io.usefulapi/civo MCP server?
io.usefulapi/civo is a hosted endpoint at https://civo.usefulapi.io/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · civo.usefulapi.io
claude mcp add --transport http io-usefulapi-civo 'https://civo.usefulapi.io/mcp'
{
"mcpServers": {
"io-usefulapi-civo": {
"url": "https://civo.usefulapi.io/mcp"
}
}
} {
"servers": {
"io-usefulapi-civo": {
"type": "http",
"url": "https://civo.usefulapi.io/mcp"
}
}
} [mcp_servers.io-usefulapi-civo] url = "https://civo.usefulapi.io/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"io-usefulapi-civo": {
"type": "remote",
"url": "https://civo.usefulapi.io/mcp",
"enabled": true
}
}
} openclaw mcp add io-usefulapi-civo --url 'https://civo.usefulapi.io/mcp' --transport streamable-http
mcp_servers:
io-usefulapi-civo:
url: "https://civo.usefulapi.io/mcp" {
"McpServers": {
"io-usefulapi-civo": {
"Transport": "http",
"Url": "https://civo.usefulapi.io/mcp"
}
}
} assistant mcp add io-usefulapi-civo -t streamable-http -u 'https://civo.usefulapi.io/mcp'
{
"mcpServers": {
"io-usefulapi-civo": {
"type": "http",
"url": "https://civo.usefulapi.io/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 2 Oct 26 +1
- Server version: 1.3.0 → 1.5.1 functional
- 1 Oct 26 +4
- HTTPS: unverified → pass ▲ security
- Stability: unverified → 0.03 ▲ functional
- Server version: 1.0.0 → 1.3.0 functional
- 30 Sept 26 +54
- Authorization: unverified → pass ▲ security
- Injection markers: unverified → pass ▲ security
- Transport: fail → pass ▲ security
- First check of Judged manipulation: pass security
- First check of Authorization: partial security
- MCP protocol: unverified → fail ▼ functional
- Tool coverage: unverified → 100 ▲ functional
- First check of Schema quality: fail functional
- First check of Schema quality: excellent functional
- First check of Destructive annotations: pass functional
- First check of Schema quality: fail functional
- First check of Tool coverage: 100 functional
- 29 Sept 26 18
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Oct 2026 · Probed https://civo.usefulapi.io/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=usefulapi.io | CN=WE1,O=Google Trust Services,C=US | 13 Sept 2026 | 12 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | d9be3287b0fde9630e825ba1f79bff3f |
| SANs: usefulapi.io, *.usefulapi.io | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of civo.usefulapi.io. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| io. | present | 57355 | 8 | Verified |
| usefulapi.io. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
WWW-Authenticate challenge Bearer realm="OAuth", resource_metadata="https://civo.usefulapi.io/.well-known/oauth-protected-resource/mcp"
Bearer realm="OAuth", resource_metadata="https://civo.usefulapi.io/.well-known/oauth-protected-resource/mcp"Protected resource metadata
| Document | https://civo.usefulapi.io/.well-known/oauth-protected-resource/mcp |
|---|---|
| Retrieved | Yes |
| Resource | https://civo.usefulapi.io/mcp |
| Authorisation server | https://civo.usefulapi.io |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://civo.usefulapi.io/mcp | Verified | 200 | |
| http (plaintext) | http://civo.usefulapi.io/mcp | HTTPS enforced | 301 | https://civo.usefulapi.io/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
civo_create_dns_record Add a DNS record ~160
Add one record to a Civo-hosted domain. Live DNS changes propagate to the world; undo by deleting the record in the Civo dashboard or CLI. Civo: POST /v2/dns/{domain_id}/records.
| Name | Type | Req | Description |
|---|---|---|---|
| domain_id | string | yes | The DNS domain's id (a UUID). |
| name | string | yes | The subdomain part, e.g. www, or @ for the apex. |
| priority | integer | – | Priority, for MX/SRV records (Civo default 10). |
| ttl | integer | – | TTL in seconds; Civo's minimum and default is 600. |
| type | string | yes | Record type. |
| value | string | yes | An IP address, hostname or text value. |
No output schema declared.
No examples provided.
civo_create_firewall_rule Add a firewall rule ~294
Add one rule to a firewall — e.g. allow TCP 443 ingress from 0.0.0.0/0. This changes what is reachable on every instance, cluster and load balancer using the firewall, so prefer narrow CIDRs. Undo by deleting the rule in the Civo dashboard or CLI. Civo: POST /v2/firewalls/{id}/rules.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | – | allow (default) or deny. |
| cidr | array | – | Source (ingress) or destination (egress) CIDRs. Civo defaults to 0.0.0.0/0 — the whole internet. |
| direction | string | – | ingress (default) or egress. |
| end_port | string | – | Last port of a range. Omit for a single port. |
| firewall_id | string | yes | The firewall's id (a UUID). |
| label | string | – | A display name for the rule. |
| protocol | string | yes | tcp, udp or icmp. |
| region | string | – | Region code, e.g. LON1, NYC1, FRA1, PHX1 (see civo_list_regions). Defaults to CIVO_REGION; Civo resources are regional, so pass the region the resource lives in. |
| start_port | string | – | First port, e.g. "443". Required unless protocol is icmp. |
No output schema declared.
No examples provided.
civo_get_instance Get one instance ~128
Fetch one instance: status, size, CPU/RAM/disk, public and private IPs, network, firewall, tags, attached volumes and source image. Passwords are redacted. Civo: GET /v2/instances/{id}.
| Name | Type | Req | Description |
|---|---|---|---|
| instance_id | string | yes | The instance's id (a UUID). |
| region | string | – | Region code, e.g. LON1, NYC1, FRA1, PHX1 (see civo_list_regions). Defaults to CIVO_REGION; Civo resources are regional, so pass the region the resource lives in. |
No output schema declared.
No examples provided.
civo_get_kubernetes_cluster Get one Kubernetes cluster ~133
Fetch one Kubernetes cluster: status, readiness, conditions, version and available upgrade, pools and their instances, network, firewall, CNI and installed marketplace apps. The kubeconfig is redacted. Civo: GET /v2/kubernetes/clusters/{id}.
| Name | Type | Req | Description |
|---|---|---|---|
| cluster_id | string | yes | The cluster's id (a UUID). |
| region | string | – | Region code, e.g. LON1, NYC1, FRA1, PHX1 (see civo_list_regions). Defaults to CIVO_REGION; Civo resources are regional, so pass the region the resource lives in. |
No output schema declared.
No examples provided.
civo_get_quota Get account quota ~71
The account's limits and current usage: instances, CPU cores, RAM, disk, volumes, snapshots, public IPs, networks, firewalls and rules, load balancers, object storage and databases. Answers 'can I launch another one?'. Civo: GET /v2/quota.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
civo_list_charges List charges ~136
List billable usage for a period: each resource's product code, label, region, time span and hours (size_gb for volumes). The range may be at most 31 days; defaults to the start of the current month until now. Civo: GET /v2/charges.
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | – | Start, RFC 3339 (e.g. 2026-09-01T00:00:00Z). Defaults to the start of this month. |
| to | string | – | End, RFC 3339. Defaults to now. At most 31 days after `from`. |
No output schema declared.
No examples provided.
civo_list_databases List databases ~162
List the managed databases (MySQL, PostgreSQL) in a region: software and version, size, nodes, IPs, port, network, firewall and status. Paginated: {page, per_page, pages, items}. Passwords are redacted. Civo: GET /v2/databases.
| Name | Type | Req | Description |
|---|---|---|---|
| page | integer | – | Page number, from 1. |
| per_page | integer | – | Items per page, 1-100 (Civo default 20). |
| region | string | – | Region code, e.g. LON1, NYC1, FRA1, PHX1 (see civo_list_regions). Defaults to CIVO_REGION; Civo resources are regional, so pass the region the resource lives in. |
No output schema declared.
No examples provided.
civo_list_dns_domains List DNS domains ~33
List the domains whose DNS Civo hosts for the account. Civo: GET /v2/dns.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
civo_list_dns_records List DNS records ~102
List the records of one hosted domain (name, type, value, priority, TTL), optionally filtered by type or name. Civo: GET /v2/dns/{domain_id}/records.
| Name | Type | Req | Description |
|---|---|---|---|
| domain_id | string | yes | The DNS domain's id (a UUID). |
| name | string | – | Only records with this name (e.g. www, or @ for the apex). |
| type | string | – | Only records of this type. |
No output schema declared.
No examples provided.
civo_list_firewall_rules List a firewall's rules ~138
List the rules of one firewall: protocol, port range, CIDRs, direction (ingress/egress), action (allow/deny) and label — the answer to 'what is exposed to the internet?'. Civo: GET /v2/firewalls/{id}/rules.
| Name | Type | Req | Description |
|---|---|---|---|
| firewall_id | string | yes | The firewall's id (a UUID). |
| region | string | – | Region code, e.g. LON1, NYC1, FRA1, PHX1 (see civo_list_regions). Defaults to CIVO_REGION; Civo resources are regional, so pass the region the resource lives in. |
No output schema declared.
No examples provided.
civo_list_firewalls List firewalls ~100
List the firewalls in a region with their network, rule count and how many instances, clusters and load balancers use each. Civo: GET /v2/firewalls.
| Name | Type | Req | Description |
|---|---|---|---|
| region | string | – | Region code, e.g. LON1, NYC1, FRA1, PHX1 (see civo_list_regions). Defaults to CIVO_REGION; Civo resources are regional, so pass the region the resource lives in. |
No output schema declared.
No examples provided.
civo_list_instance_sizes List sizes ~105
List the sizes (plans) that can be launched — instances, Kubernetes nodes and databases — with CPU cores, RAM, disk, transfer allowance and GPU. Civo: GET /v2/sizes.
| Name | Type | Req | Description |
|---|---|---|---|
| region | string | – | Region code, e.g. LON1, NYC1, FRA1, PHX1 (see civo_list_regions). Defaults to CIVO_REGION; Civo resources are regional, so pass the region the resource lives in. |
No output schema declared.
No examples provided.
civo_list_instances List instances ~152
List compute instances in a region, optionally filtered by tags. Paginated: returns {page, per_page, pages, items}. Passwords are redacted. Civo: GET /v2/instances.
| Name | Type | Req | Description |
|---|---|---|---|
| page | integer | – | Page number, from 1. |
| per_page | integer | – | Items per page, 1-100 (Civo default 20). |
| region | string | – | Region code, e.g. LON1, NYC1, FRA1, PHX1 (see civo_list_regions). Defaults to CIVO_REGION; Civo resources are regional, so pass the region the resource lives in. |
| tags | array | – | Only instances carrying these tags. |
No output schema declared.
No examples provided.
civo_list_kubernetes_clusters List Kubernetes clusters ~160
List the Kubernetes (K3s/Talos) clusters in a region with status, version, node pools, API endpoint and installed applications. Paginated: {page, per_page, pages, items}. Kubeconfigs are redacted. Civo: GET /v2/kubernetes/clusters.
| Name | Type | Req | Description |
|---|---|---|---|
| page | integer | – | Page number, from 1. |
| per_page | integer | – | Items per page, 1-100 (Civo default 20). |
| region | string | – | Region code, e.g. LON1, NYC1, FRA1, PHX1 (see civo_list_regions). Defaults to CIVO_REGION; Civo resources are regional, so pass the region the resource lives in. |
No output schema declared.
No examples provided.
civo_list_load_balancers List load balancers ~110
List the load balancers in a region: algorithm, backends (IP, protocol, source/target ports), public IP, state and the Kubernetes service each fronts. Civo: GET /v2/loadbalancers.
| Name | Type | Req | Description |
|---|---|---|---|
| region | string | – | Region code, e.g. LON1, NYC1, FRA1, PHX1 (see civo_list_regions). Defaults to CIVO_REGION; Civo resources are regional, so pass the region the resource lives in. |
No output schema declared.
No examples provided.
civo_list_networks List networks ~99
List the private networks in a region: label, CIDR, whether it is the default network, status and nameservers. Civo: GET /v2/networks.
| Name | Type | Req | Description |
|---|---|---|---|
| region | string | – | Region code, e.g. LON1, NYC1, FRA1, PHX1 (see civo_list_regions). Defaults to CIVO_REGION; Civo resources are regional, so pass the region the resource lives in. |
No output schema declared.
No examples provided.
civo_list_regions List regions ~77
List the Civo regions available to the account, with which one is the default, whether each is out of capacity, and the features each supports (IaaS, Kubernetes, object store, load balancers, GPU, databases). A cheap way to confirm the API key works. Civo: GET /v2/regions.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
civo_list_volumes List volumes ~106
List the block-storage volumes in a region: size, status, type, and the instance or cluster each is attached to (unattached volumes still bill). Civo: GET /v2/volumes.
| Name | Type | Req | Description |
|---|---|---|---|
| region | string | – | Region code, e.g. LON1, NYC1, FRA1, PHX1 (see civo_list_regions). Defaults to CIVO_REGION; Civo resources are regional, so pass the region the resource lives in. |
No output schema declared.
No examples provided.
civo_reboot_instance Reboot an instance ~159
Reboot one instance. `soft` (default) asks the OS to restart cleanly; `hard` cuts power and boots it again, like pulling the plug — use only when soft does not work. Causes brief downtime. Civo: POST /v2/instances/{id}/soft_reboots or /hard_reboots.
| Name | Type | Req | Description |
|---|---|---|---|
| instance_id | string | yes | The instance's id (a UUID). |
| region | string | – | Region code, e.g. LON1, NYC1, FRA1, PHX1 (see civo_list_regions). Defaults to CIVO_REGION; Civo resources are regional, so pass the region the resource lives in. |
| type | string | – | soft (default) or hard. |
No output schema declared.
No examples provided.
civo_set_instance_tags Set an instance's tags ~155
REPLACE the full tag list of one instance (tags are used for filtering and by load-balancer instance pools, so changing them can move an instance in or out of a pool). Pass the complete desired list; an empty list clears all tags. Civo: PUT /v2/instances/{id}/tags.
| Name | Type | Req | Description |
|---|---|---|---|
| instance_id | string | yes | The instance's id (a UUID). |
| region | string | – | Region code, e.g. LON1, NYC1, FRA1, PHX1 (see civo_list_regions). Defaults to CIVO_REGION; Civo resources are regional, so pass the region the resource lives in. |
| tags | array | yes | The complete new tag list. |
No output schema declared.
No examples provided.
civo_start_instance Start an instance ~104
Boot a stopped instance. Undoes civo_stop_instance. Civo: PUT /v2/instances/{id}/start.
| Name | Type | Req | Description |
|---|---|---|---|
| instance_id | string | yes | The instance's id (a UUID). |
| region | string | – | Region code, e.g. LON1, NYC1, FRA1, PHX1 (see civo_list_regions). Defaults to CIVO_REGION; Civo resources are regional, so pass the region the resource lives in. |
No output schema declared.
No examples provided.
civo_stop_instance Stop an instance ~120
Power off one instance. Anything it serves goes offline until it is started again with civo_start_instance. A stopped instance is still billed. Civo: PUT /v2/instances/{id}/stop.
| Name | Type | Req | Description |
|---|---|---|---|
| instance_id | string | yes | The instance's id (a UUID). |
| region | string | – | Region code, e.g. LON1, NYC1, FRA1, PHX1 (see civo_list_regions). Defaults to CIVO_REGION; Civo resources are regional, so pass the region the resource lives in. |
No output schema declared.
No examples provided.
What is the io.usefulapi/civo MCP server?
io.usefulapi/civo is an MCP server listed in the public MCP registry as io.usefulapi/civo. List Civo instances, Kubernetes clusters, networks and DNS; reboot instances, add rules. This page covers its hosted endpoint (https://civo.usefulapi.io/mcp).
Is the io.usefulapi/civo MCP server safe to use?
io.usefulapi/civo scores 77 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.usefulapi/civo MCP server expose?
io.usefulapi/civo exposes 22 tools: civo_list_regions, civo_get_quota, civo_list_charges, civo_list_instance_sizes, civo_list_instances, and 17 more. Their descriptions and schemas cost roughly 2,804 tokens of context every time the server is loaded.
Does the io.usefulapi/civo MCP server require authentication?
Yes. io.usefulapi/civo asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the io.usefulapi/civo MCP server still maintained?
io.usefulapi/civo is still listed as active in the MCP registry. We last reached this channel on 3 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.