# StillOnline (npm · stillonline-mcp)

StillOnline MCP: uptime, status pages, checks. REST API for Cursor and Claude Code.

- Trust score: 71/100 (medium)
- Change this week: +47
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `stillonline-mcp`: 71/100 (this document), [markdown](https://verifymcp.io/servers/shenwell-stillonline/stillonline-mcp.md), [page](https://verifymcp.io/servers/shenwell-stillonline/stillonline-mcp)

## Channel facts

- Registry: `npm`
- Package: `stillonline-mcp`
- Version: `0.3.6`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (98 of 102), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (98 of 102), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 52 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 85/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 795 tokens (~61/item across 13 items; 10 tools + 3 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add shenwell-stillonline -- npx -y stillonline-mcp
```

### Codex

```bash
codex mcp add shenwell-stillonline -- npx -y stillonline-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "shenwell-stillonline": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "stillonline-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add shenwell-stillonline --command npx --arg -y --arg stillonline-mcp
```

### Hermes

```yaml
mcp_servers:
  shenwell-stillonline:
    command: "npx"
    args: ["-y", "stillonline-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "shenwell-stillonline": {
      "command": "npx",
      "args": [
        "-y",
        "stillonline-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 71, +4)

- [functional improvement] Stability: unverified → 0.23

### 2026-08-02 (score 67, +54)

- [security regression] Install scripts: pass → unverified
- [security regression] Provenance: fail → unverified
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional regression] Security disclosure: fail → unverified
- [functional regression] Maintenance: pass → unverified
- [functional regression] License: pass → unverified
- [functional improvement] Schema quality: unverified → 100
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] MCP protocol: unverified → pass
- [functional] Licence: MIT

### 2026-08-01 (score 13, −36)

- [security regression] Known CVEs: partial → unverified
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional regression] Dependency health: partial → unverified
- [functional regression] Capabilities: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Schema quality: 100 → unverified

### 2026-07-31 (score 49, +43)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 6, −47)

- [security regression] Malware scan: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Schema quality: 100 → unverified

### 2026-07-28 (score 53, +29)

- [functional regression] Security disclosure: unverified → fail
- [functional improvement] Schema quality: unverified → 100
- [functional improvement] Tool coverage: unverified → 100
- [functional] First check of Schema quality: pass
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 100
- [functional] First check of Tool coverage: 100
- [functional] First check of Schema quality: unverified

### 2026-07-27 (score 24)

First indexed and scored.

## MCP tools (10)

### `projects.list` (~41 tokens)

List Projects

List StillOnline projects for the authenticated account. Returns project IDs, names, status page metadata, and plan-scoped project data for follow-up check or incident operations.

Output parameters:

- `projects` (array): Projects available to the authenticated StillOnline account.

### `projects.create` (~111 tokens)

Create Project

Create a StillOnline project with an automatic status page and initial HTTP URL check. Call this after deploying a new SaaS app, API, MCP backend, or AI agent health endpoint that needs uptime monitoring.

Input parameters:

- `description` (string): Optional short project description for dashboard context.
- `name` (string, required): Human-readable project name shown in StillOnline and on the generated status page.
- `url` (string, required): Public HTTPS URL to monitor, usually an app URL, API health endpoint, or agent /health endpoint.

Output parameters:

- `project` (object): StillOnline project object, including identifiers, display name, status page metadata, and plan-scoped fields returned by the REST API.

### `projects.delete` (~49 tokens)

Delete Project

Soft-delete a StillOnline project. Removes it from the dashboard and disables checks, matching the UI delete behavior.

Input parameters:

- `project_id` (string, required): StillOnline project ID returned by projects.list or projects.create.

Output parameters:

- `deleted` (boolean): Whether the project delete operation succeeded.
- `project_id` (string): ID of the deleted StillOnline project.

### `checks.list` (~51 tokens)

List Checks

List HTTP and SSL checks for a StillOnline project. Use this before updating, pausing, deleting, or auditing monitor coverage.

Input parameters:

- `project_id` (string, required): StillOnline project ID whose checks should be listed.

Output parameters:

- `checks` (array): Checks configured for the requested StillOnline project.

### `checks.create` (~118 tokens)

Create Check

Add a URL check to an existing StillOnline project. Use this for additional SaaS endpoints, API health URLs, MCP backends, or autonomous agent health checks.

Input parameters:

- `interval_seconds` (number): Optional probe interval in seconds. Availability depends on the account plan.
- `name` (string): Optional check label shown in the dashboard and status context.
- `project_id` (string, required): StillOnline project ID that should receive the new check.
- `url` (string, required): Public URL to probe. Prefer HTTPS health endpoints that return 200 without authentication.

Output parameters:

- `check` (object): StillOnline check object, including identifiers, URL, enabled state, interval, and latest probe status fields returned by the REST API.

### `checks.update` (~109 tokens)

Update Check

Update a StillOnline check. Use this to pause or resume monitoring, rename a check, or change its probe interval after deploy or infrastructure changes.

Input parameters:

- `check_id` (string, required): StillOnline check ID returned by checks.list or checks.create.
- `enabled` (boolean): Set true to resume monitoring or false to pause this check.
- `interval_seconds` (number): Optional new probe interval in seconds. Availability depends on the account plan.
- `name` (string): Optional new display name for this check.

Output parameters:

- `check` (object): StillOnline check object, including identifiers, URL, enabled state, interval, and latest probe status fields returned by the REST API.

### `checks.delete` (~46 tokens)

Delete Check

Permanently delete a StillOnline check. Use only when an endpoint should no longer be monitored.

Input parameters:

- `check_id` (string, required): StillOnline check ID returned by checks.list or checks.create.

Output parameters:

- `deleted` (boolean): Whether the check delete operation succeeded.

### `status.get` (~55 tokens)

Get Public Status

Get public StillOnline status JSON by status page slug. Use this to inspect customer-facing uptime without exposing private account data.

Input parameters:

- `slug` (string, required): Public status page slug or ID from a StillOnline /s/{slug} URL.

### `incidents.create` (~76 tokens)

Create Incident

Open an incident on a StillOnline status page. Use this when an outage or degraded service should be visible to subscribers and stakeholders.

Input parameters:

- `status_page_id` (string, required): StillOnline status page ID associated with the affected project.
- `title` (string, required): Short incident title, for example 'API latency elevated' or 'Agent gateway unavailable'.

Output parameters:

- `incident` (object): StillOnline incident object, including identifiers, title, status page relation, and current incident state fields returned by the REST API.

### `incidents.get` (~54 tokens)

Get Incident

Get a StillOnline incident by ID. Despite the historical name, this returns one incident record for follow-up status updates or review.

Input parameters:

- `incident_id` (string, required): StillOnline incident ID returned by incidents.create or the incidents API.

Output parameters:

- `incident` (object): StillOnline incident object, including identifiers, title, status page relation, and current incident state fields returned by the REST API.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/shenwell-stillonline/stillonline-mcp#diagnostics

## Score history

- 2026-08-03: 71
- 2026-08-02: 67
- 2026-08-01: 13
- 2026-07-31: 49
- 2026-07-30: 6
- 2026-07-28: 53
- 2026-07-27: 24

## Links

- npm package: https://www.npmjs.com/package/stillonline-mcp
- Socket report: https://socket.dev/npm/package/stillonline-mcp
- Repository: https://github.com/shenwell/stillonline-mcp
- Changelog RSS feed: https://verifymcp.io/servers/shenwell-stillonline/stillonline-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/shenwell-stillonline/stillonline-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/shenwell-stillonline/stillonline-mcp