Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

TOBIZ MCP

OCI · GHCR.IO/TOBIZ21/TOBIZ-MCP

Create, edit and audit TOBIZ websites, pages, blocks, articles and products.

+4 this week 42 Trust /100

Last scanned (9 hours ago)

Scores higher than 53% of OCI servers

Category Documents and Files

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security0
  • No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
  • Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
  • Install-script risk not yet assessed.Unverified
  • Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
Provenance & Transparency35
Schema Quality & AI Usability57
  • AI-judged instruction clarity (fair).Partial
  • Tool/resource definitions use about 9823 tokens (~79/item across 124 items; 124 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management73
  • Stability observed for 22 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage71
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 0% of tool parameters carry a description.Fail
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 8 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "tobiz_publish_article_package" implies "publish" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 125 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 +1
    • Package version: 0.9.0-beta.2 → 0.9.0-beta.3 functional
  • 3 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 63 to 67. That category is still filling its 30-day observation window: 19 days of observed history at the previous scan, 20 at this one. The score rises as the window fills, whether or not the server changes.

  • 1 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 57 to 60. That category is still filling its 30-day observation window: 17 days of observed history at the previous scan, 18 at this one. The score rises as the window fills, whether or not the server changes.

  • 31 Oct 26 0
    • Provenance: unverified → fail ▼ security
    • Stability: 0.53 → unverified ▼ security
    • Tool safety: pass → unverified ▼ security
    • Capabilities: pass → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
  • 30 Oct 26 +1
    • Provenance: fail → unverified ▼ security
  • 28 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.

  • 25 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.

  • 23 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed oci/ghcr.io/tobiz21/tobiz-mcp@0.9.0-beta.3

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem oci
Reason No attestation published

Background: How many MCP packages publish verified provenance →

MCP tools · 124 exposed · ~9,734 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
tobiz_inspect_flex_block ~82

Read-only inspection of a native TOBIZ Flex block (type 1600). Returns its element inventory, responsive modes and deterministic overlap/mobile CTA issues. Use this before editing Flex; it never changes the draft.

NameTypeReqDescription
block_idstring|integer––
page_idstring|integer––
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_install_template ~90

Установить бесплатный штатный шаблон TOBIZ как отдельный проект. По умолчанию только проверяет план; apply=true создает проект. Платные шаблоны никогда не покупает автоматически.

NameTypeReqDescription
applyboolean––
multipageboolean––
template_idstring|integeryes–
template_page_idstring|integeryes–

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_layout_registry ~65

Build a project-specific registry of native TOBIZ layout controls from vendor block metadata. Returns controls, options, dependencies and whether each control is safe for automatic repair. Optionally filter by type_ids. Read-only.

NameTypeReqDescription
project_id–––
type_ids–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_list_article_categories ~24

Категории статей проекта.

NameTypeReqDescription
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_list_articles ~72

Список статей проекта с фильтром категории, поиском и пагинацией.

NameTypeReqDescription
categorystring|integer––
limitinteger––
order_bystring––
pageinteger––
project_id–––
searchstring––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_list_blocks ~71

Блоки страницы в порядке отображения: block_id, type_id, название типа, позиция, признак правки в черновике. values=true добавляет значения полей.

NameTypeReqDescription
page_idstring|integer––
project_id–––
valuesboolean––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_list_design_feedback ~46

List locally stored human design evaluations. Read-only and contains no copied page content.

NameTypeReqDescription
limitinteger––
page_id–––
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_list_page_backups ~46

Список автоматических резервных копий блоков страницы, созданных перед сохранением.

NameTypeReqDescription
page_idstring|integer––
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_list_pages ~51

Страницы проекта: page_id (он же v в адресе редактора), название, slug, видимость, ссылка редактора.

NameTypeReqDescription
project_id–––
refreshboolean––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_list_product_categories ~25

Категории интернет-магазина проекта.

NameTypeReqDescription
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_list_product_offers ~36

Список вариантов (offers) товара.

NameTypeReqDescription
product_idstring|integer––
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_list_products ~75

Список товаров проекта с фильтром категории, поиском, сортировкой и пагинацией.

NameTypeReqDescription
categorystring|integer––
limitinteger––
order_bystring––
pageinteger––
project_id–––
searchstring––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_list_projects ~56

Список проектов (сайтов) аккаунта: project_id, название, адрес сайта, число страниц. project_id нужен всем остальным инструментам.

NameTypeReqDescription
include_pagesboolean––
refreshboolean––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_list_site_package_revisions ~49

List up to 20 previous versions of one local site-package checkpoint. Returns metadata only and never changes TOBIZ or the current package.

NameTypeReqDescription
checkpoint_idstringyes–

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_list_site_packages ~43

List locally saved site-package checkpoints without exposing credentials or full client content. Returns checkpoint IDs, timestamps, plan IDs and topics. Read-only for TOBIZ.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_load_site_package ~58

Load a local site-package checkpoint and revalidate its plan and template against current TOBIZ state. Returns the complete package, current progress and exact next action. Read-only for TOBIZ.

NameTypeReqDescription
checkpoint_idstringyes–

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_login ~45

Войти в конструктор (или принудительно обновить сессию). Возвращает состояние сессии без значений cookie.

NameTypeReqDescription
forceboolean––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_move_block ~72

Изменить порядок блоков: position (индекс с нуля) или after_block_id.

NameTypeReqDescription
after_block_idstring|integer––
block_idstring|integer––
page_idstring|integer––
position–––
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_multipage_package_status ~47

Revalidate every nested page package and return one aggregate completion status. Read-only for TOBIZ; use before any multi-page build.

NameTypeReqDescription
packageobjectyes–

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_onboarding_check ~79

Безопасная проверка подключения перед началом работы: сессия, рендерер, изоляция проектов и доступ. Если передать project_id и page_id, дополнительно выполняет read-only проверку пересохранения страницы. Ничего не изменяет.

NameTypeReqDescription
page_id–––
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_page_content ~43

Read all editable content in one call with a draft hash. Does not change layout.

NameTypeReqDescription
page_idstring|integer––
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_page_info ~72

Параметры страницы как в панели: название, URL (slug), SEO-заголовок, описание, ключевые слова, картинка для соцсетей, доступ по паролю. Читается из формы панели.

NameTypeReqDescription
page_idstring|integer––
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_page_summary ~56

Компактная карта страницы: порядок блоков и короткий текст каждого — экономит контекст.

NameTypeReqDescription
max_chars_per_blockinteger––
page_idstring|integer––
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_plan_multipage_site ~79

Plan a complete native TOBIZ multi-page site before creating anything. Validates one home page, unique routes, concise shared navigation and the purpose of every page, then creates a quality plan for each page and requires one visual system. Read-only.

NameTypeReqDescription
pagesarrayyes–
site_briefobjectyes–

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_plan_site ~89

Create a deterministic native-first site plan before building. Selects an installed TOBIZ template, locks its block structure, assigns a purpose to each section, sets text-slot limits, photo briefs, CTA rules and acceptance criteria. Returns a stable plan_id that can be validated after restart. Read-only; no page is created.

NameTypeReqDescription
briefobjectyes–
goalstring––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_preflight_article ~67

Read-only validation of a complete proposed article before creating it. Pass the final fields, category_ids and number of images that will be uploaded.

NameTypeReqDescription
category_ids–––
fields–––
image_countinteger––
minimum_body_charsinteger––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_preflight_product ~71

Read-only validation of a complete proposed product before creating it. Pass final fields, category_ids, planned offers and number of images.

NameTypeReqDescription
allow_price_on_requestboolean––
category_ids–––
fields–––
image_countinteger––
offers–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_preflight_site_build ~104

One-call read-only gate for the complete site package before creating a TOBIZ page. Validates plan_id, copy, factual claims, media assignments, SEO lengths, page slug and unsafe or empty links. Returns one ready_for_build verdict and exact blockers.

NameTypeReqDescription
briefobjectyes–
goalstring––
media_recipe–––
plan_idstring––
recipeobjectyes–
seo–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_prepare_multipage_package ~74

Prepare one fillable native page package for every page in a validated multi-page plan. Nothing is created in TOBIZ. The returned envelope keeps shared navigation and exact page routes.

NameTypeReqDescription
pagesarrayyes–
save_checkpointsboolean––
site_briefobjectyes–

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_prepare_site_package ~95

Prepare the complete clean fill-in package for a new native TOBIZ page in one call. Returns stable plan_id, locked template, every text/link slot with role and mobile limit, every exact image path with visual requirements, SEO fields and missing client evidence. Source-template copy is deliberately omitted. Read-only.

NameTypeReqDescription
briefobjectyes–
goalstring––
save_checkpointboolean––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_prepare_template ~85

Preview deterministic native fixes for a copied template. With apply=true, stage them in the draft without saving. Fixes broken button anchors when a native form is available, keeps gallery labels visible, and hides empty social links.

NameTypeReqDescription
applyboolean––
expected_hashstring––
page_idstring|integer––
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_publish_article_package ~114

Preview or atomically publish a complete native TOBIZ article. The package contains final fields, category_ids and images (each image accepts path or content_base64 plus file_name). apply=false only validates. apply=true creates, fills and uploads, then re-reads and audits the article; any failure deletes the incomplete article.

NameTypeReqDescription
applyboolean––
category_ids–––
fields–––
images–––
minimum_body_charsinteger––
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_publish_product_package ~116

Preview or atomically publish a complete native TOBIZ product with categories, images and offers. An offer may use image_index to select a newly uploaded image. apply=false validates only. apply=true creates the full product, re-reads it and runs the publication audit; any failure deletes the incomplete product.

NameTypeReqDescription
allow_price_on_requestboolean––
applyboolean––
category_ids–––
fields–––
images–––
offers–––
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_record_design_feedback ~118

Record explicit human feedback about a page for future design decisions. Preview by default; apply=true writes a local privacy-safe JSONL record, never changes the TOBIZ site.

NameTypeReqDescription
applyboolean––
corrections–––
dimensions–––
issue_codes–––
issues–––
notesstring––
page_idstring|integeryes–
project_idstring|integeryes–
score_overallnumberyes–
template_idstring––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_refine_design ~116

Analyze the whole rendered page as a design system across desktop and mobile: container grid, section alignment and rhythm, button palette/radii, typography, image proportions and clipped content. Preview by default. Apply mode combines only deterministic native template and layout fixes, validates editor roundtrip, saves once and restores the backup if quality decreases, a critical error appears or design-system consistency regresses.

NameTypeReqDescription
applyboolean––
page_idstring|integer––
project_id–––
source_terms–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_refresh_assets ~41

Принудительно перекачать библиотеку блоков и каталог проекта (если вендор обновил сборку).

NameTypeReqDescription
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_refresh_design_passport ~61

Re-read one installed template and preview refreshed block-count/Flex facts. apply=true stores a local override after explicit review; it never edits the source TOBIZ page.

NameTypeReqDescription
applyboolean––
template_idstringyes–

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_register_design_template ~170

Register an existing page from the current TOBIZ account as a verified local design template. Runs desktop/tablet/mobile, composition and editor checks. Preview by default; apply=true requires explicit visual approval and stores only its passport and source IDs, never page content.

NameTypeReqDescription
applyboolean––
conceptsarrayyes–
content_densitystring––
page_idstring|integeryes–
photo_dependencystring––
project_idstring|integeryes–
site_kindstringyes–
strengthsarrayyes–
template_idstringyes–
titlestringyes–
visual_review_approvedboolean––
visual_review_notesstring––
visual_systemstringyes–

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_release_design_gate ~154

Run the strict final acceptance gate for a native TOBIZ page. A ready verdict requires desktop/tablet/mobile screenshots, a design reference, approved brief for claim audit, editor roundtrip and explicit visual review confirmation. Missing evidence blocks release. Does not change the site or submit forms.

NameTypeReqDescription
brief–––
check_editorboolean––
goalstring––
page_idstring|integer––
project_id–––
reference_page_idstring|integer––
reference_project_id–––
screenshotsboolean––
source_terms–––
visual_review_approvedboolean––
visual_review_notesstring––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_release_project_gate ~106

Read-only whole-project release gate. Audits every native page plus every article, product and product offer in the project. Optional require_articles/require_products turn an empty blog or catalog into a blocker. Returns one release_ready verdict.

NameTypeReqDescription
allow_price_on_requestboolean––
goalstring––
minimum_article_body_charsinteger––
project_id–––
require_articlesboolean––
require_productsboolean––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_repair_layout ~129

Repair block-level visual layout defects using only controls exposed by the affected native TOBIZ block type. Handles equal card/button height, initially visible buttons, hover animation and button alignment. Mobile controls are reported for review unless their semantics are deterministic. Preview by default. Apply mode requires a clean editor-safe draft, creates a backup, re-audits desktop/mobile and rolls back on a lower score or new critical issue.

NameTypeReqDescription
applyboolean––
page_idstring|integer––
project_id–––
source_terms–––
viewports–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_restore_page_backup ~67

Восстановить блоки страницы из автоматической резервной копии. Перезаписывает страницу и требует confirm=true.

NameTypeReqDescription
backup_idstring––
confirmboolean––
page_idstring|integer––
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_restore_site_package_revision ~77

Restore a selected previous local site-package version. The current version is archived first, TOBIZ is not changed, and confirm=true is required. Returns the restored package revalidated against current TOBIZ state.

NameTypeReqDescription
checkpoint_idstringyes–
confirmboolean––
revision_idstringyes–

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_save_page ~92

Единственный инструмент, который пишет на сервер: рендерит HTML блоков шаблонами вендора и отправляет SaveBlocks. verify=true проверяет результат по публичной вёрстке.

NameTypeReqDescription
include_payloadboolean––
only_if_changedboolean––
page_idstring|integer––
project_id–––
verifyboolean––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_save_site_package ~71

Save or update a validated site-package checkpoint in local MCP storage so work can resume after reconnecting or in another AI client. Atomic local write only; does not edit TOBIZ. Returns checkpoint_id and current progress.

NameTypeReqDescription
expected_content_hashstring––
packageobjectyes–

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_screenshot_page ~57

Сделать полностраничные PNG-снимки публичной страницы в desktop и mobile и вернуть пути к файлам.

NameTypeReqDescription
page_idstring|integer––
project_id–––
viewports–––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_search_blocks ~91

Поиск по библиотеке блоков: русский текст ищется в названии и описании типа, можно отфильтровать по категории или точному type_id.

NameTypeReqDescription
category_idstring|integer––
limitinteger––
offsetinteger––
project_id–––
querystring––
type_idstring|integer––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_select_design ~78

Rank installed native templates for a website brief. brief may include industry, offer, audience, goal, needs/features, visual_system, page_length and photo_quality. Returns an explainable choice, alternatives, risks and visual references; does not copy or change a site.

NameTypeReqDescription
briefobjectyes–
top_kinteger––

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_session_status ~32

Состояние сессии конструктора: есть ли cookie, когда проверялись, какой user_id.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

tobiz_set_block_image ~88

Загрузить изображение и подставить его имя в указанное поле блока одним вызовом.

NameTypeReqDescription
block_idstring|integer––
content_base64string––
fieldstring––
file_namestring––
page_idstring|integer––
pathstring––
project_id–––

Structured output declared, but exposes no named fields.

No examples provided.

Install

How do I install the TOBIZ MCP server?

TOBIZ MCP runs locally as a container image, launched with docker run --rm -i -e TOBIZ_EMAIL -e TOBIZ_PASSWORD -e TOBIZ_ALLOWED_PROJECT_IDS -e TOBIZ_REQUIRE_PROJECT_ALLOWLIST ghcr.io/tobiz21/tobiz-mcp:0.9.0-beta.3. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.

oci · ghcr.io/tobiz21/tobiz-mcp

# add to Claude Code
claude mcp add tobiz21-tobiz-mcp -- docker run --rm -i -e TOBIZ_EMAIL -e TOBIZ_PASSWORD -e TOBIZ_ALLOWED_PROJECT_IDS -e TOBIZ_REQUIRE_PROJECT_ALLOWLIST ghcr.io/tobiz21/tobiz-mcp:0.9.0-beta.3

This image reads TOBIZ_EMAIL, TOBIZ_PASSWORD, TOBIZ_ALLOWED_PROJECT_IDS and TOBIZ_REQUIRE_PROJECT_ALLOWLIST. Set them in your client's env block for this server; docker run -e passes each one through to the container.

Common questions

What is the TOBIZ MCP server?

TOBIZ MCP is listed in the public MCP registry as io.github.Tobiz21/tobiz-mcp. Create, edit and audit TOBIZ websites, pages, blocks, articles and products. This page covers its container image (ghcr.io/tobiz21/tobiz-mcp).

Is the TOBIZ MCP server safe to use?

TOBIZ MCP scores 42 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the TOBIZ MCP server expose?

TOBIZ MCP exposes 124 tools: tobiz_login, tobiz_session_status, tobiz_health, tobiz_diagnostics, tobiz_onboarding_check, and 119 more. Their descriptions and schemas cost roughly 9,734 tokens of context every time the server is loaded.

Is the TOBIZ MCP server still maintained?

TOBIZ MCP is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.