General Tools

librebase.xyz

Provides general-purpose tools through the Model Context Protocol.

2 endpoints176 known toolsFirst detected September 22, 2026Last detected September 22, 2026

ENDPOINT 1

https://app.librebase.xyz/api/mcp

No auth detected

MCP server metadata

Name: librebase
Version: 0.1.40

Capabilities

tools

Server instructions

SaaS MCP is JSON-RPC at https://app.librebase.xyz/api/mcp (GET https://app.librebase.xyz/api/mcp for discovery). Alias: https://app.librebase.xyz/mcp. 1. tools/call auth_status. 2. If unauthenticated, tools/call auth_start. Pass access=read|write and resources=[projects,keys,logs,instances,hosts,members] for the permissions you need; omit them to request full read/write on every area. The payload includes showToHuman — your next message to the human MUST be that URL on its own first line, then the userCode. Do not bury them in a status report. 3. Open that URL (https://app.librebase.xyz/mcp/authorize) in the browser, review the requested permissions, and click Approve. 4. tools/call auth_poll. Send the mcp-session-id response header back, or pass deviceCode. Repeat while status is waiting_for_user (ok:true). That is not a failure and does not need an MCP key. Hosted sessions persist across Studio rebuilds; the token is never returned in JSON-RPC. 5. Write path (human Approve required): org_whoami → host_list → instance_create(hostId) → instance_launch → project_create → sqlite_import or supabase_import (preview then write, project DB only) → knowledge_bootstrap then knowledge_put/search (durable project notes in the project DB) → app_deploy (appId template or image) → instance_health → report URL. Hermes dogfood (LIB-55): hermes_bootstrap → hermes_gap_upsert → hermes_sync_linear (Linear key stays on the server). Read-only tokens must auth_start again with access=write. auth_logout drops the session token. Do not paste an MCP key into chat or config for interactive use. Do not send the operator to accounts.x.ai or Grok OAuth. Do not call admin_login / admin_setup on the hosted SaaS MCP.

Known tools 88

auth_status

Report whether this hosted MCP session is authorized.

Inferred read-only

auth_start

Start Librebase device login on this console (NOT x.ai, NOT Grok OAuth, NOT admin_login).

Inferred read-only

auth_login

Same as auth_start on the hosted HTTP MCP.

Inferred read-only

auth_complete

Finish a pending device login using this session's full-agent token (every org).

Inferred read-only

auth_poll

Poll until the human clicks Approve, or until auth_start/auth_complete already finished.

Inferred read-only

auth_logout

Drop the session token for this MCP session (does not revoke console CI keys).

Potential side effects

org_whoami

Resolve the authenticated org (id, name, edition).

Inferred read-only

billing_get

Org plan, instance count/limit, and Stripe status (control-plane metadata only).

Inferred read-only

usage_list

Org usage meter summary (control-plane billing metadata only).

Inferred read-only

usage_get

Usage meters for one instance (control-plane ids only).

Inferred read-only

usage_project_summary

Usage meters aggregated for a project's instances (ids only).

Inferred read-only

project_list

List projects in the org.

Inferred read-only

project_create

Create a project (requires an existing instanceId).

Potential side effects

auth_provider_list

List OAuth sign-in providers configured for a project.

Inferred read-only

auth_provider_upsert

Configure an OAuth sign-in provider for a project.

Inferred read-only

instance_list

List instances in the org.

Inferred read-only

instance_get

Get one instance by id.

Inferred read-only

instance_create

Create an instance (stopped by default).

Potential side effects

instance_launch

Launch an instance (status -> running).

Inferred read-only

instance_stop

Stop an instance (status -> stopped).

Inferred read-only

instance_restart

Restart the runtime container on the host (re-injects keys).

Inferred read-only

instance_delete

Delete an instance (cascades its projects).

Potential side effects

instance_health

Probe the instance SQL endpoint (SELECT 1).

Inferred read-only

instance_logs

Last container log snippet reported by the host agent heartbeat.

Inferred read-only

member_list

List org members.

Inferred read-only

member_invite

Invite a user by email with a role.

Potential side effects

member_update_role

Update a member's role.

Potential side effects

host_list

List hosts in the org.

Inferred read-only

host_create

Create a host (VM).

Potential side effects

host_get

Get one host by id (status, IP).

Inferred read-only

host_status

Host health: status, IP, memory budget, last heartbeat, and agent diagnostics (containers).

Inferred read-only

host_reprovision

Rebuild the VM from the golden image.

Inferred read-only

host_delete

Delete a host VM and its instances/apps.

Potential side effects

app_list

List agent-managed app containers on a host.

Inferred read-only

project_delivery

Guided project completion (LIB-62).

Inferred read-only

app_deploy

Deploy an app to a host.

Inferred read-only

app_remove

Remove an agent-managed app container from a host.

Potential side effects

sqlite_import

Import a user SQLite dump into the project database (not the SaaS control plane).

Inferred read-only

supabase_import

Import a Supabase/Postgres dump into the project database (never the SaaS control plane).

Inferred read-only

hermes_bootstrap

LIB-55: apply named Hermes migrations to the project database (gaps, observations, lifecycle, Linear links, competitors).

Inferred read-only

hermes_gap_list

List Hermes gaps from the project database.

Inferred read-only

hermes_gap_upsert

Insert or update a Hermes gap in the project database by stable externalKey.

Potential side effects

hermes_sync_linear

LIB-57: server-side Linear GraphQL sync.

Inferred read-only

knowledge_bootstrap

LIB-100: apply named knowledge migrations (pages, entities, links, embeddings) to the project database.

Inferred read-only

knowledge_search

Hybrid search over project knowledge pages (LIKE + local hash/ngram).

Inferred read-only

knowledge_put

Insert or update a knowledge page in the project database (people, decisions, how we work).

Potential side effects

knowledge_get

Get a knowledge page by id or slug, with entities, links, and backlinks.

Inferred read-only

knowledge_link

Create a directed graph edge between two pages or entities.

Potential side effects

knowledge_backlinks

List incoming links to a page or entity id.

Inferred read-only

storage_bucket_list

List object-storage buckets on the project instance (LIB-24).

Inferred read-only

storage_bucket_create

Create a bucket on the project instance.

Potential side effects

storage_bucket_delete

Delete a project-instance bucket.

Potential side effects

storage_object_list

List objects in a project-instance bucket.

Inferred read-only

storage_object_put

Upload an object to the project instance (utf8 or base64 content).

Potential side effects

storage_object_get

Download an object from the project instance (JSON with base64).

Inferred read-only

storage_object_delete

Delete an object on the project instance.

Potential side effects

storage_object_sign

Mint a signed GET URL for a project-instance object.

Inferred read-only

function_list

List small HTTP-invocable functions stored in the project database (LIB-25).

Inferred read-only

function_upsert

Create or replace a small edge function (def handler(request, auth)).

Potential side effects

function_invoke

Invoke a project-instance function.

Inferred read-only

generate_embedding

Embed text with a local hash/ngram vector (no API key).

Inferred read-only

semantic_search

Nearest-neighbor search over vectors stored in the project database.

Inferred read-only

key_list

List KMS keys/secrets for the org (metadata only).

Inferred read-only

key_create

Create a KMS key/secret.

Potential side effects

key_get

Get key metadata.

Inferred read-only

key_decrypt

Decrypt a key.

Inferred read-only

key_rotate

Rotate a KMS key.

Inferred read-only

key_update

Update key metadata.

Potential side effects

key_delete

Delete a KMS key.

Potential side effects

log_list

List recent org audit/access events.

Inferred read-only

get_mcp_audit_log

List recent MCP tool-call audit events for this org (redacted args, no secrets).

Inferred read-only

webhook_list

List org webhook endpoints (URL, event types, enabled).

Inferred read-only

webhook_create

Create an org webhook endpoint.

Potential side effects

webhook_delete

Delete an org webhook endpoint.

Potential side effects

slack_test

POST a test message to the org Slack incoming webhook.

Potential side effects

telemetry_status

Instance health + last log JSON (control-plane metadata) and Sentry/Slack configured flags.

Potential side effects

sentry_mcp_status

LIB-79: Sentry MCP ingest status.

Inferred read-only

vercel_status

LIB-80: Vercel Marketplace one-click status.

Inferred read-only

marketplace_list

LIB-81: partner marketplace plugins.

Inferred read-only

github_app_status

LIB-83: GitHub App issue/PR sync status.

Inferred read-only

sso_get

Org SAML SSO status.

Inferred read-only

sso_configure

Configure org-level SAML SSO.

Inferred read-only

region_list

Placement regions.

Inferred read-only

instance_replica_list

Control-plane replica placement for an instance.

Inferred read-only

instance_replica_add

Record a replica region (placement metadata).

Inferred read-only

instance_failover

Point the instance primary region at an existing replica row.

Inferred read-only

agent_feed

List Reddit-for-Agents posts.

Inferred read-only

agent_post

Publish a post as this authenticated agent.

Potential side effects

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.librebase]
url = "https://app.librebase.xyz/api/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "librebase": {
      "type": "http",
      "url": "https://app.librebase.xyz/api/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: librebase
Remote MCP URL: https://app.librebase.xyz/api/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "librebase": {
      "url": "https://app.librebase.xyz/api/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "librebase": {
      "type": "http",
      "url": "https://app.librebase.xyz/api/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "librebase",
  "transport": "streamable-http",
  "url": "https://app.librebase.xyz/api/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

ENDPOINT 2

https://app.librebase.xyz/mcp

No auth detected

MCP server metadata

Name: librebase
Version: 0.1.40

Capabilities

tools

Server instructions

Known tools 88

auth_status

Report whether this hosted MCP session is authorized.

Inferred read-only

auth_start

Start Librebase device login on this console (NOT x.ai, NOT Grok OAuth, NOT admin_login).

Inferred read-only

auth_login

Same as auth_start on the hosted HTTP MCP.

Inferred read-only

auth_complete

Finish a pending device login using this session's full-agent token (every org).

Inferred read-only

auth_poll

Poll until the human clicks Approve, or until auth_start/auth_complete already finished.

Inferred read-only

auth_logout

Drop the session token for this MCP session (does not revoke console CI keys).

Potential side effects

org_whoami

Resolve the authenticated org (id, name, edition).

Inferred read-only

billing_get

Org plan, instance count/limit, and Stripe status (control-plane metadata only).

Inferred read-only

usage_list

Org usage meter summary (control-plane billing metadata only).

Inferred read-only

usage_get

Usage meters for one instance (control-plane ids only).

Inferred read-only

usage_project_summary

Usage meters aggregated for a project's instances (ids only).

Inferred read-only

project_list

List projects in the org.

Inferred read-only

project_create

Create a project (requires an existing instanceId).

Potential side effects

auth_provider_list

List OAuth sign-in providers configured for a project.

Inferred read-only

auth_provider_upsert

Configure an OAuth sign-in provider for a project.

Inferred read-only

instance_list

List instances in the org.

Inferred read-only

instance_get

Get one instance by id.

Inferred read-only

instance_create

Create an instance (stopped by default).

Potential side effects

instance_launch

Launch an instance (status -> running).

Inferred read-only

instance_stop

Stop an instance (status -> stopped).

Inferred read-only

instance_restart

Restart the runtime container on the host (re-injects keys).

Inferred read-only

instance_delete

Delete an instance (cascades its projects).

Potential side effects

instance_health

Probe the instance SQL endpoint (SELECT 1).

Inferred read-only

instance_logs

Last container log snippet reported by the host agent heartbeat.

Inferred read-only

member_list

List org members.

Inferred read-only

member_invite

Invite a user by email with a role.

Potential side effects

member_update_role

Update a member's role.

Potential side effects

host_list

List hosts in the org.

Inferred read-only

host_create

Create a host (VM).

Potential side effects

host_get

Get one host by id (status, IP).

Inferred read-only

host_status

Host health: status, IP, memory budget, last heartbeat, and agent diagnostics (containers).

Inferred read-only

host_reprovision

Rebuild the VM from the golden image.

Inferred read-only

host_delete

Delete a host VM and its instances/apps.

Potential side effects

app_list

List agent-managed app containers on a host.

Inferred read-only

project_delivery

Guided project completion (LIB-62).

Inferred read-only

app_deploy

Deploy an app to a host.

Inferred read-only

app_remove

Remove an agent-managed app container from a host.

Potential side effects

sqlite_import

Import a user SQLite dump into the project database (not the SaaS control plane).

Inferred read-only

supabase_import

Import a Supabase/Postgres dump into the project database (never the SaaS control plane).

Inferred read-only

hermes_bootstrap

LIB-55: apply named Hermes migrations to the project database (gaps, observations, lifecycle, Linear links, competitors).

Inferred read-only

hermes_gap_list

List Hermes gaps from the project database.

Inferred read-only

hermes_gap_upsert

Insert or update a Hermes gap in the project database by stable externalKey.

Potential side effects

hermes_sync_linear

LIB-57: server-side Linear GraphQL sync.

Inferred read-only

knowledge_bootstrap

LIB-100: apply named knowledge migrations (pages, entities, links, embeddings) to the project database.

Inferred read-only

knowledge_search

Hybrid search over project knowledge pages (LIKE + local hash/ngram).

Inferred read-only

knowledge_put

Insert or update a knowledge page in the project database (people, decisions, how we work).

Potential side effects

knowledge_get

Get a knowledge page by id or slug, with entities, links, and backlinks.

Inferred read-only

knowledge_link

Create a directed graph edge between two pages or entities.

Potential side effects

knowledge_backlinks

List incoming links to a page or entity id.

Inferred read-only

storage_bucket_list

List object-storage buckets on the project instance (LIB-24).

Inferred read-only

storage_bucket_create

Create a bucket on the project instance.

Potential side effects

storage_bucket_delete

Delete a project-instance bucket.

Potential side effects

storage_object_list

List objects in a project-instance bucket.

Inferred read-only

storage_object_put

Upload an object to the project instance (utf8 or base64 content).

Potential side effects

storage_object_get

Download an object from the project instance (JSON with base64).

Inferred read-only

storage_object_delete

Delete an object on the project instance.

Potential side effects

storage_object_sign

Mint a signed GET URL for a project-instance object.

Inferred read-only

function_list

List small HTTP-invocable functions stored in the project database (LIB-25).

Inferred read-only

function_upsert

Create or replace a small edge function (def handler(request, auth)).

Potential side effects

function_invoke

Invoke a project-instance function.

Inferred read-only

generate_embedding

Embed text with a local hash/ngram vector (no API key).

Inferred read-only

semantic_search

Nearest-neighbor search over vectors stored in the project database.

Inferred read-only

key_list

List KMS keys/secrets for the org (metadata only).

Inferred read-only

key_create

Create a KMS key/secret.

Potential side effects

key_get

Get key metadata.

Inferred read-only

key_decrypt

Decrypt a key.

Inferred read-only

key_rotate

Rotate a KMS key.

Inferred read-only

key_update

Update key metadata.

Potential side effects

key_delete

Delete a KMS key.

Potential side effects

log_list

List recent org audit/access events.

Inferred read-only

get_mcp_audit_log

List recent MCP tool-call audit events for this org (redacted args, no secrets).

Inferred read-only

webhook_list

List org webhook endpoints (URL, event types, enabled).

Inferred read-only

webhook_create

Create an org webhook endpoint.

Potential side effects

webhook_delete

Delete an org webhook endpoint.

Potential side effects

slack_test

POST a test message to the org Slack incoming webhook.

Potential side effects

telemetry_status

Instance health + last log JSON (control-plane metadata) and Sentry/Slack configured flags.

Potential side effects

sentry_mcp_status

LIB-79: Sentry MCP ingest status.

Inferred read-only

vercel_status

LIB-80: Vercel Marketplace one-click status.

Inferred read-only

marketplace_list

LIB-81: partner marketplace plugins.

Inferred read-only

github_app_status

LIB-83: GitHub App issue/PR sync status.

Inferred read-only

sso_get

Org SAML SSO status.

Inferred read-only

sso_configure

Configure org-level SAML SSO.

Inferred read-only

region_list

Placement regions.

Inferred read-only

instance_replica_list

Control-plane replica placement for an instance.

Inferred read-only

instance_replica_add

Record a replica region (placement metadata).

Inferred read-only

instance_failover

Point the instance primary region at an existing replica row.

Inferred read-only

agent_feed

List Reddit-for-Agents posts.

Inferred read-only

agent_post

Publish a post as this authenticated agent.

Potential side effects

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.librebase]
url = "https://app.librebase.xyz/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "librebase": {
      "type": "http",
      "url": "https://app.librebase.xyz/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: librebase
Remote MCP URL: https://app.librebase.xyz/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "librebase": {
      "url": "https://app.librebase.xyz/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "librebase": {
      "type": "http",
      "url": "https://app.librebase.xyz/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "librebase",
  "transport": "streamable-http",
  "url": "https://app.librebase.xyz/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.