Developer Tools
homespun.dev
Manages deployment and data operations for web applications (v2 apps).
ENDPOINT 1
https://homespun.dev/mcp
MCP server metadata
- Name
- homespun
- Version
- 1.6.77
Known tools 25
deploy_appDeploy a v2 app: an HTML document plus a capability manifest, hosted at its own URL.
Inferred read-onlycount_rowsThe live row count of a v2 app's collection (spec B4, issue #1056), a whole-scope total with no filter and no paging.
Inferred read-onlyget_rowFetch a single row by its key from a v2 app collection, through a dedicated relay route rather than a client-side scan.
Inferred read-onlyupsert_rowCreate a row in a v2 app's collection, or return the existing row when `key` is already present (deduped:true).
Potential side effectsupdate_rowUpdate an existing row in a v2 app's collection, replacing its data.
Potential side effectsget_feed_eventsPoll a v2 app's change feed for what has happened: row creates, updates and deletes, from any writer, agent or human.
Inferred read-onlyappsThe v2 app lifecycle apart from creation and redeploy, which deploy_app covers.
Inferred read-onlymembersA v2 app's membership (auth spec section 6): who besides the owner can sign in to a private app and write to member-scoped collections.
Potential side effectscredentialsA v2 app's scoped service credentials (#1354, #1355): the bearer token an app owner points a backend they host themselves at, so their own server can read and write the app's data without holding the owner's full authority.
Potential side effectsconnectionsA v2 app's Connections: the stored credential (a static header token, or a full generic OAuth2 client) a manifest webhook rule authenticates its delivery target with, bound to a host so the credential can never be exfiltrated to another one.
Inferred read-onlyattachmentsBinary attachments (images, PDFs, audio, video) referenced from event payloads and input_data via `format: homespun-attachment-id`.
Inferred read-onlytasteThe agent's UI taste notes: a short freeform markdown document of presentation preferences gathered from human feedback, such as 'denser layout' or 'no rounded corners'.
Inferred read-onlyfeedbackReports a problem with homespun itself to the relay operator, and lists what this agent has already reported.
Inferred read-onlycommunityPublishing an app as a community template, taking your own listing back down, installing a template, and, for relay operators, reviewing submissions.
Inferred read-onlypublisherThe caller's community publisher identity: the @-handle and public profile shown in the template gallery.
Inferred read-onlyreviewRatings and reviews of community templates, responses from a template's own publisher, and, for relay operators, moderation.
Inferred read-onlyCONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.homespun]
url = "https://homespun.dev/mcp"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"homespun": {
"type": "http",
"url": "https://homespun.dev/mcp"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: homespun
Remote MCP URL: https://homespun.dev/mcp
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"homespun": {
"url": "https://homespun.dev/mcp"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"homespun": {
"type": "http",
"url": "https://homespun.dev/mcp"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "homespun",
"transport": "streamable-http",
"url": "https://homespun.dev/mcp"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
TRUST AND VERIFICATION EVIDENCE
Trust Data Available
BuiltWith Trust API v2 evidence for homespun.dev was fetched 2026-07-26T15:10:37.059Z and is being refreshed.
homespun.dev is assessed as Neutral: No suspicious signals found, but no strong positive signal either
Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.