# AgentBuilders (remote · api.agentbuilders.app)

Deploy full-stack web apps with database, file storage, auth, and RBAC via a single API call.

- Trust score: 72/100 (medium)
- Change this week: +5
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `api.agentbuilders.app`: 72/100 (this document), [markdown](https://verifymcp.io/servers/sirarchiemccarthy-oss-agentbuilders/api.md), [page](https://verifymcp.io/servers/sirarchiemccarthy-oss-agentbuilders/api)

## Channel facts

- Endpoint: `https://api.agentbuilders.app/mcp`
- Transports: `streamable-http`
- Auth: `required`
- Version: `0.6.1`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 74/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 81/100
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 1323 tokens (~101/item across 13 items; 13 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 40/100
  - Spec-recency check failed: implements MCP spec 2025-03-26; the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http sirarchiemccarthy-oss-agentbuilders https://api.agentbuilders.app/mcp
```

### Codex

```toml
[mcp_servers.sirarchiemccarthy-oss-agentbuilders]
url = "https://api.agentbuilders.app/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "sirarchiemccarthy-oss-agentbuilders": {
      "type": "remote",
      "url": "https://api.agentbuilders.app/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add sirarchiemccarthy-oss-agentbuilders --url https://api.agentbuilders.app/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  sirarchiemccarthy-oss-agentbuilders:
    url: "https://api.agentbuilders.app/mcp"
```

### Other

```json
{
  "mcpServers": {
    "sirarchiemccarthy-oss-agentbuilders": {
      "type": "http",
      "url": "https://api.agentbuilders.app/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 72, +1)

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-01 (score 71, +1)

No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-31 (score 70, +2)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 68, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-28 (score 68, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-27 (score 67, +1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-26 (score 66)

First indexed and scored.

## MCP tools (13)

### `deploy_app` (~262 tokens)

Deploy a full-stack web app. Creates or redeploys an app with static files, optional database, file storage, user auth, and RBAC. Supports BYO (Bring Your Own) integrations — after deploy, use set_secret to attach third-party API keys (Stripe, Resend, Neon, etc.) and the app can proxy requests through them securely. Returns a live URL.

Input parameters:

- `database_tables` (object): Database tables: { table_name: { column: 'TEXT'|'INTEGER'|'REAL'|'BLOB' } }
- `enable_auth` (boolean): Enable user registration/login for this app
- `enable_files` (boolean): Enable R2 file storage for this app
- `files` (object, required): Map of filename to content string
- `name` (string, required): App subdomain name (lowercase alphanumeric + hyphens, 1-63 chars)
- `public` (boolean): Make app publicly accessible (default: private with viewKey)
- `rbac_default_role` (string): Default role for new users
- `rbac_roles` (object): RBAC role definitions: { role_name: { permissions: [...], inherits: [...] } }
- `version` (integer): Expected version for optimistic concurrency (CAS)

### `list_apps` (~17 tokens)

List all apps deployed with your API key.

### `get_app` (~31 tokens)

Get details of a specific app including URL, capabilities, and version.

Input parameters:

- `name` (string, required): App name

### `update_app` (~43 tokens)

Update app settings (e.g., toggle public/private) without full redeploy.

Input parameters:

- `name` (string, required): App name
- `public` (boolean): Set public accessibility

### `get_viewkey` (~35 tokens)

Get the viewKey for a private app. Users need this to access the app.

Input parameters:

- `name` (string, required): App name

### `create_app` (~172 tokens)

Create an app entry without deploying files. Reserves the name and sets initial configuration. Supports BYO (Bring Your Own) integrations via proxy secrets — after creation, use set_secret to attach third-party API keys and verify_integration to confirm connectivity. Use deploy_app later to push files.

Input parameters:

- `database_tables` (object): Database tables to provision: { table_name: { column: 'TEXT'|'INTEGER'|'REAL'|'BLOB' } }
- `enable_auth` (boolean): Enable user registration/login for this app
- `enable_files` (boolean): Enable R2 file storage for this app
- `name` (string, required): App subdomain name (lowercase alphanumeric + hyphens, 3-63 chars)
- `public` (boolean): Make app publicly accessible (default: false)

### `deploy_preview` (~93 tokens)

Deploy an ephemeral preview of an app. The preview auto-expires after the specified TTL (default: 1 hour, max: 24 hours). Returns a unique preview URL.

Input parameters:

- `files` (object, required): Map of filename to content string
- `name` (string, required): Base app name for the preview
- `ttl` (integer): Preview lifetime in seconds (default: 3600, max: 86400)

### `claim_deployment` (~59 tokens)

Claim ownership of an agent-deployed app using its claim code. Transfers the app from the deploying agent to your account.

Input parameters:

- `claim_code` (string, required): The 8-character claim code (format: XXXX-XXXX) provided by the deploying agent

### `get_deployment` (~67 tokens)

Get deployment history and version info for an app. Returns the current version, available rollback versions, and deploy trail entries.

Input parameters:

- `limit` (integer): Max number of deploy trail entries to return (default: 20, max: 100)
- `name` (string, required): App name

### `get_logs` (~62 tokens)

Get recent deploy logs and operational events for an app. Includes deploy successes, failures, rollbacks, and errors.

Input parameters:

- `limit` (integer): Max log entries to return (default: 50, max: 200)
- `name` (string, required): App name

### `set_secret` (~289 tokens)

Store a BYO (Bring Your Own) proxy secret for an app. Used to attach third-party API keys so the app can proxy requests through AgentBuilders without exposing keys to the client. Common secret names: STRIPE_SECRET_KEY, RESEND_API_KEY, NEON_DATABASE_URL, SENTRY_DSN, POSTHOG_API_KEY, CLERK_SECRET_KEY, OPENAI_API_KEY, GITHUB_TOKEN. Domains are auto-detected from the secret name (e.g., STRIPE_* routes to api.stripe.com). Secret values are never returned in responses. Use verify_integration after setting a secret to confirm connectivity.

Input parameters:

- `allowed_domains` (array): Restrict the secret to these target domains. Usually auto-detected from the secret name (e.g., STRIPE_* auto-allows api.stripe.com). Override only if needed.
- `name` (string, required): App name to attach the secret to
- `secret_name` (string, required): Secret identifier — use the service convention: STRIPE_SECRET_KEY, RESEND_API_KEY, NEON_DATABASE_URL, SENTRY_DSN, POSTHOG_API_KEY, CLERK_SECRET_KEY, OPENAI_API_KEY, GITHUB_TOKEN (alphanumeric + dashe…
- `secret_value` (string, required): The secret value (e.g., sk_live_..., re_...). Stored securely, never returned.

### `create_custom_domain` (~68 tokens)

Attach a custom domain to an app. Returns DNS instructions (CNAME + TXT records) for verification. Requires Hobby tier or above.

Input parameters:

- `hostname` (string, required): Custom domain hostname (e.g., "app.example.com")
- `name` (string, required): App name to attach the domain to

### `verify_integration` (~125 tokens)

Verify a BYO (Bring Your Own) integration is correctly configured for an app. Checks that the proxy secret exists, the target service is reachable, and a lightweight health probe succeeds. Returns structured pass/fail per check. Supported services: stripe, resend, neon, sentry, posthog, clerk, openai, github, supabase.

Input parameters:

- `app_name` (string, required): The app to verify integration for
- `service` (string, required): Service to verify (stripe, resend, neon, sentry, posthog, clerk, openai, github, supabase)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/sirarchiemccarthy-oss-agentbuilders/api#diagnostics

## Score history

- 2026-08-03: 72
- 2026-08-02: 71
- 2026-08-01: 71
- 2026-07-31: 70
- 2026-07-30: 68
- 2026-07-29: 68
- 2026-07-28: 68
- 2026-07-27: 67
- 2026-07-26: 66

## Links

- Remote endpoint: https://api.agentbuilders.app/mcp
- Authorisation metadata: https://api.agentbuilders.app/.well-known/oauth-protected-resource/mcp
- Repository: https://github.com/sirarchiemccarthy-oss/clawd
- Changelog RSS feed: https://verifymcp.io/servers/sirarchiemccarthy-oss-agentbuilders/api/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/sirarchiemccarthy-oss-agentbuilders/api/changelog.json
- HTML version of this page: https://verifymcp.io/servers/sirarchiemccarthy-oss-agentbuilders/api