DreamAgent
REMOTE · MCP.DREAMAGENT.CLOUD · SCANNED AUG 20
Build and deploy websites, Telegram and Discord bots from chat via the DreamAgent platform.
Available components
Recent critical change
Authorization (16 Aug 2026). See the changelog before you install this server.
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (dreamagent_cancel_chat). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability68
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 3260 tokens (~271/item across 12 items; 12 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management17
- Stability observed for 5 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
remote · mcp.dreamagent.cloud
claude mcp add --transport http nivethaug-dreamagent https://mcp.dreamagent.cloud/mcp
[mcp_servers.nivethaug-dreamagent] url = "https://mcp.dreamagent.cloud/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"nivethaug-dreamagent": {
"type": "remote",
"url": "https://mcp.dreamagent.cloud/mcp",
"enabled": true
}
}
} openclaw mcp add nivethaug-dreamagent --url https://mcp.dreamagent.cloud/mcp --transport streamable-http
mcp_servers:
nivethaug-dreamagent:
url: "https://mcp.dreamagent.cloud/mcp" {
"mcpServers": {
"nivethaug-dreamagent": {
"type": "http",
"url": "https://mcp.dreamagent.cloud/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Aug 26 0
- Authorization: unverified → fail ▼ critical
- The server rewrote its instructions, which are the text every model session reads security
- Tool “dreamagent_cancel_chat” rewrote its description, which is the text the model reads security
- Tool “dreamagent_chat” rewrote its description, which is the text the model reads security
- Tool “dreamagent_create_project” rewrote its description, which is the text the model reads security
- Tool “dreamagent_create_session” rewrote its description, which is the text the model reads security
- Tool “dreamagent_get_chat_status” rewrote its description, which is the text the model reads security
- Tool “dreamagent_get_edit_progress” rewrote its description, which is the text the model reads security
- Tool “dreamagent_get_project_status” rewrote its description, which is the text the model reads security
- Tool “dreamagent_list_projects” rewrote its description, which is the text the model reads security
- Tool “dreamagent_list_sessions” rewrote its description, which is the text the model reads security
- Tool “dreamagent_release_project_lock” rewrote its description, which is the text the model reads security
- Tool “dreamagent_cancel_chat” is now declared destructive security
- Schema quality: 194 → 271 ▼ functional
- Stability: unverified → 0.03 ▲ functional
- New tool “dreamagent_list_global_integrations” functional
- New tool “dreamagent_list_project_env” functional
- “dreamagent_create_project” added an optional parameter “bot_token_integration_id” cosmetic
- “dreamagent_create_project” added an optional parameter “global_integration_ids” cosmetic
- “dreamagent_cancel_chat” reworded the description of “session_key” cosmetic
- “dreamagent_chat” reworded the description of “message” cosmetic
- “dreamagent_chat” reworded the description of “new_session” cosmetic
- “dreamagent_chat” reworded the description of “project_id” cosmetic
- “dreamagent_chat” reworded the description of “session_key” cosmetic
- “dreamagent_create_project” reworded the description of “description” cosmetic
- “dreamagent_create_project” reworded the description of “env_vars” cosmetic
- “dreamagent_create_project” reworded the description of “project_type” cosmetic
- “dreamagent_create_session” reworded the description of “label” cosmetic
- “dreamagent_get_chat_status” reworded the description of “after” cosmetic
- “dreamagent_get_chat_status” reworded the description of “session_key” cosmetic
- “dreamagent_get_project_status” reworded the description of “project_id” cosmetic
- “dreamagent_list_projects” reworded the description of “status” cosmetic
- “dreamagent_create_project” dropped the optional parameter “bot_token” cosmetic
- 15 Aug 26 62
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Aug 2026 · Probed https://mcp.dreamagent.cloud/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=*.dreamagent.cloud | CN=YE1,O=Let's Encrypt,C=US | 26 Jun 2026 | 24 Sept 2026 | ECDSA 256 | ECDSA-SHA384 | 542e8b4e6df8a96716cd8c23d4c9f044632 |
| SANs: *.dreamagent.cloud, dreamagent.cloud | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
DNSSEC insecure
Validation of mcp.dreamagent.cloud. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| cloud. | present | 7041 | 13 | Verified |
| dreamagent.cloud. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.dreamagent.cloud/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.dreamagent.cloud/mcp | HTTPS enforced | 301 | https://mcp.dreamagent.cloud/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
dreamagent_cancel_chat ~130
DESTRUCTIVE — stops an AI edit that is currently running. Use ONLY when the user explicitly asks to stop/cancel the active edit. After cancellation, do NOT claim the requested change was completed — report that it was stopped. Returns 'Cancellation requested: <backend message>' — e.g. 'Query cancelled', 'Cancellation requested' (durable run), or 'No active query found'. Afterwards poll dreamagent_get_chat_status / dreamagent_get_edit_progress until run_status reports 'cancelled'.
| Name | Type | Req | Description |
|---|---|---|---|
| session_key | string | yes | the session key of the running edit. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
dreamagent_chat ~372
WRITE ACTION — builds, modifies, or fixes an EXISTING project with a natural-language instruction. Use ONLY when the user clearly asks for a change ("add X", "fix Y", "change the theme"). If the user is only asking for advice, analysis, review, or suggestions ("what could be improved?", "review my bot"), do NOT call this — answer from the project's info instead; a review request is not an edit. Describe ONLY the desired change — DreamAgent's AI automatically handles code, tests, rebuild, and redeployment. Completed changes are saved and committed automatically. ASYNCHRONOUS: returns immediately with the session_key; monitor with dreamagent_get_edit_progress (or dreamagent_get_chat_status with the returned session key) until a terminal state. Report success only after run_status reaches 'completed'. Edits consume the user's AI credits. ERRORS (actual returns): failures come back as text starting with 'ERROR:'. If the edit was rejected before starting, the text says 'the edit was NOT started' plus the reason — HTTP 402 insufficient credits, 409 another edit already active, 423 session lock held by another session, 404 wrong project id, 401 no account connected. Treat the edit as failed/cancelled only when a status tool says so. ONE EDIT AT A TIME: never start another modification on the same project while one is running — check progress first and wait.
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | the desired change (what + any behavioral constraints). |
| new_session | boolean | – | optional — start a fresh session for a new topic. |
| project_id | integer | yes | the project to modify. |
| session_key | – | – | optional — continue a specific development session. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
dreamagent_create_project ~756
WRITE ACTION — creates a new DreamAgent project (website, Telegram bot, Discord bot, or scheduler). Use ONLY when the user clearly asks to create/build a new project; not for questions about what to build. CONFIRM BEFORE CALLING — never create on the first mention. In ONE message, present and get the user's explicit go-ahead for: 1. The credential: run dreamagent_list_global_integrations first. If several telegram/discord credentials are saved, list them (id + title) and ask which to use. If exactly one is saved, state which one you will use. Never pick silently. 2. The plan: name, type, and the final description exactly as you will submit it (this is the Prompt Assistant's recommendation summary). Call this tool only after the user confirms. CREATION IS ASYNCHRONOUS: after calling, check dreamagent_get_project_status repeatedly until the project is 'ready' or 'failed' (bots ~2-5 min, websites longer). CREDENTIALS: raw bot tokens are never accepted in chat or as inputs. For Telegram/Discord bots you MUST pass bot_token_integration_id — the ID of a saved credential from dreamagent_list_global_integrations. If none is saved, direct the user to dreamagent.cloud → Settings → Global Integrations. Other saved keys can be imported via global_integration_ids. Credentials are stored as project secrets and are never exposed back. DESCRIPTION = the refined creation brief. Act as a Creative Director / Product Manager, not an architect. Create a concise but complete description of WHAT should be built: - product vision and target audience - user experience and core functionality - design/tone direction - important features and behavior - final expected result Do not include implementation details such as: - technology stack - architecture - database/API implementation - authentication implementation - deployment - CI/CD - testing commands Infer reasonable defaults when missing details are non-critical. Ask for clarification only when missing information ma…
| Name | Type | Req | Description |
|---|---|---|---|
| bot_token_integration_id | – | – | REQUIRED for telegrambot & discordbot — saved-credential ID (see dreamagent_list_global_integrations). |
| description | – | – | the build request (what + for whom + features/tone). |
| env_vars | – | – | optional non-secret environment variables. |
| global_integration_ids | – | – | optional saved-key IDs to import as env vars. |
| name | string | yes | project name (max 30 chars; a public subdomain is auto-generated). |
| project_type | string | yes | website / telegrambot / discordbot / scheduler. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
dreamagent_create_session ~82
Create a new development session for a project — a separate conversation with its own context. Use when the user wants to start a distinct development topic. A new session does NOT replace or affect the existing project — earlier sessions remain available.
| Name | Type | Req | Description |
|---|---|---|---|
| label | string | – | optional name for the session. |
| project_id | integer | yes | the project. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
dreamagent_get_chat_status ~256
Check the progress and final status of a specific AI development session using its session key. Use this to monitor an asynchronous edit until it completes, fails, or is cancelled — keep checking until a terminal state. The session key comes from dreamagent_chat or dreamagent_list_sessions and is an identifier, not a secret. Returns (actual fields): 'active=', 'run_status=', 'next_after=' (cursor for the next check), optional 'new_output:' (text produced since the last check), then either "Still working — poll again" or a terminal 'done=true' line: finished (with the final output tail), 'the edit was NOT started: <reason>' (rejected early, e.g. HTTP 402 insufficient credits), or 'stream error' (the connection to the run broke — the server-side run may still have finished; verify with dreamagent_get_edit_progress). run_status values: queued | running | cancel_requested | completed | failed | cancelled | interrupted | unknown.
| Name | Type | Req | Description |
|---|---|---|---|
| after | integer | – | cursor from the previous check (0 on the first check). |
| session_key | string | yes | the session key returned by dreamagent_chat. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
dreamagent_get_edit_progress ~276
Check the latest AI edit progress for a project using its project identifier — no session key needed: the project id retrieves the session holding the latest edit. Use when the user asks whether their edit is finished, when the session key isn't available (e.g. a new conversation), and BEFORE starting any new edit. Returns (actual fields): 'session_key=' (the identifier of the session this progress comes from), 'edit_active=', 'run_status=', 'chunks=' (output size so far), optional 'recent_output (tail):', and a terminal 'result:' line: finished (with the final output tail), 'the edit was NOT started: <reason>' (rejected early, e.g. HTTP 402 insufficient credits), 'stream error', or 'no run is currently active'. run_status values: queued | running | cancel_requested | completed | failed | cancelled | interrupted | unknown. Distinct from dreamagent_get_project_status: project status = creation/deployment state (creating/ready/failed); edit progress = current AI modification state; chat status (dreamagent_get_chat_status) monitors one specific session by its session key. If edit_active is true, do NOT launch another edit for the same project.
| Name | Type | Req | Description |
|---|---|---|---|
| project_id | integer | yes | the project being edited. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
dreamagent_get_project_status ~144
Check a project's creation/deployment state. Terminal states are 'ready' (built and live) and 'failed'; while a project is being created it reports progressive phases such as 'creating', 'building', 'deploying', or 'ai_provisioning' — treat any non-terminal status as still building. Use after dreamagent_create_project (poll until ready or failed) and whenever the user asks whether a project is ready or live. NOTE: this reports the PROJECT's build/deploy state — NOT AI edit progress. For edits use dreamagent_get_edit_progress.
| Name | Type | Req | Description |
|---|---|---|---|
| project_id | integer | yes | the project to check. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
dreamagent_list_global_integrations ~132
List the user's saved credentials (Global Integrations). ALWAYS call this before creating any bot project or asking the user for a token/API key. Saved credentials are referenced BY ID when creating projects: bot_token_integration_id for bot tokens, global_integration_ids for other keys. Secret values are never returned — only IDs and metadata (type, key name, verified, title). If nothing suitable is saved: direct the user to dreamagent.cloud → Settings → Global Integrations to add it (one-time, verified, reusable). Never ask the user to paste tokens in chat.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
dreamagent_list_project_env ~110
List a project's environment variables with their details. Shows each key's name, title, description, docs URL, and category — values are masked (secrets are never returned). Use to see which integrations a project already has before adding more, or to answer "what keys does my project have?". These are PROJECT-SPECIFIC variables — distinct from the user's Global Integrations (dreamagent_list_global_integrations).
| Name | Type | Req | Description |
|---|---|---|---|
| project_id | integer | yes | the project to inspect. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
dreamagent_list_projects ~125
List the user's DreamAgent projects. Returns each project's name, ID, type, status, and live domain (when available). Use when the user asks to see, find, select, or check their projects — and ALWAYS before modifying a project when its ID is not already known (resolve names to IDs here first).
| Name | Type | Req | Description |
|---|---|---|---|
| status | – | – | optional exact-match filter (e.g. 'ready', 'failed'). During creation, projects report intermediate phases (creating/building/deploying/…), so filtering by 'creating' does not match every in-progress… |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
dreamagent_list_sessions ~103
List a project's development sessions (conversation threads). Returns each session's identifier (session key) and context so you can select, continue, or monitor a specific development session — pass the session key to dreamagent_chat to continue that thread or to dreamagent_get_chat_status to monitor it. The session key is a reference used to address a session; it is not an authentication credential or a secret.
| Name | Type | Req | Description |
|---|---|---|---|
| project_id | integer | yes | the project. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
dreamagent_release_project_lock ~124
RECOVERY-ONLY — releases a project's editing lock when a stale or abandoned session blocks new modifications. NOT a normal editing step, and NEVER a way to bypass an actively running edit. The lock state is not machine-readable from here: to judge staleness, check dreamagent_get_edit_progress — if no edit is active but dreamagent_chat still fails with a lock error, the lock is stale. Confirm with the user before releasing if they may have the project open elsewhere.
| Name | Type | Req | Description |
|---|---|---|---|
| project_id | integer | yes | the project to unlock. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.