{"name":"ai.spala/public-mcp","slug":"spala-public-mcp","title":"Spala Public MCP","description":"Discovery, OAuth, project operations, and exact project MCP handoff for Spala backend projects.","url":"https://mcp.market/server/spala-public-mcp","rating":null,"grade":"B","score":75,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":23,"stars":0,"forks":0,"downloads_week":null,"last_push_at":"2026-09-23T12:13:43.000Z","license":null},"uptime":{"percent":100,"checks":28,"ok":28,"last_checked_at":"2026-11-04T02:50:30.495Z","last_ok_at":"2026-11-04T02:50:30.495Z","latency_ms":124},"claimed":false,"transport":"remote","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/spala-ai/spala-public-mcp","website":"https://spala.ai/mcp-profile/","version":"1.0.2","remotes":[{"type":"streamable-http","url":"https://mcp.spala.ai/mcp","headers":[{"description":"Required for raw Streamable HTTP JSON-RPC clients.","isRequired":true,"value":"application/json, text/event-stream","name":"Accept"}]}],"packages":[],"tools":[{"name":"account_setup","description":"AUTH REQUIRED; WRITES MISSING ACCOUNT DATA TO THE SPALA CONTROL PLANE. Fills missing first and last name fields and creates the first company or workspace organization when none exists. Invoke only with real account and organization values supplied by the user.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"firstName":{"type":"string","minLength":1,"maxLength":120,"description":"Account holder first name. Required when account_status reports firstName missing."},"lastName":{"type":"string","minLength":1,"maxLength":120,"description":"Account holder last name. Required when account_status reports lastName missing."},"companyName":{"type":"string","minLength":1,"maxLength":120,"description":"Company or workspace name. Required when account_status reports companyName missing."}},"description":"Complete missing Spala account data after OAuth. Supply only real values confirmed by the user or confidently known from the current work context.","additionalProperties":false}},{"name":"account_status","description":"AUTH REQUIRED; READ-ONLY. Verifies the current public MCP OAuth identity and account readiness. Returns the authenticated identity, available organizations, and exact missing account fields without exposing OAuth or dashboard credentials.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{},"description":"No arguments. Call this tool with an empty object.","additionalProperties":false}},{"name":"addon_list","description":"Lists public Spala addons and integrations matching an optional query. Invoke to discover capabilities such as webhooks, outbound HTTP API calls, transactional email, media uploads, and realtime messaging. Returns addon ids, names, descriptions, and tags.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"query":{"type":"string","description":"Optional filter phrase for matching public Spala templates or addons by name, tag, or use case.","default":""},"limit":{"type":"integer","minimum":1,"maximum":50,"description":"Maximum number of catalog entries to return.","default":20}},"description":"Optional catalog search and result limit for public Spala planning resources.","additionalProperties":false}},{"name":"docs_search","description":"Searches the public Spala agent-facing documentation index by query. Invoke for setup, OAuth, installer, public-versus-project MCP, pricing, limits, security, templates, addons, or project handoff questions. Returns ranked docs entries with URLs and summaries.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"query":{"type":"string","description":"Optional search phrase. Use words such as auth, OAuth, MCP, templates, addons, pricing, limits, frontend handoff, or project handoff.","default":""},"limit":{"type":"integer","minimum":1,"maximum":20,"description":"Maximum number of ranked documentation results to return.","default":5}},"description":"Optional text search and result limit for public Spala documentation.","additionalProperties":false}},{"name":"organization_create","description":"AUTH REQUIRED; WRITES A NEW SPALA ORGANIZATION FOR THE SIGNED-IN ACCOUNT. Creates an additional company or workspace organization using the supplied name.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"name":{"type":"string","minLength":1,"maxLength":120,"description":"Human-readable company or workspace name."}},"required":["name"],"description":"Create an additional Spala organization for the authenticated account.","additionalProperties":false}},{"name":"project_connect","description":"AUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Prepares one accessible Spala project for agent access. Accepts one installer client (codex, roo, claude-code, cursor, a2a); when omitted, returns a client-selection response without executable arguments. Returns a client-specific workspace binding plan: protected one-time bootstrap for Codex, Roo, and Cursor; verifier-bound delegated bootstrap for Claude Code.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"projectId":{"type":"string","minLength":1,"maxLength":256,"description":"Exact Spala project ID. Mutually exclusive with subdomain."},"subdomain":{"type":"string","minLength":1,"maxLength":256,"description":"Exact project subdomain returned by the Spala projects API. Mutually exclusive with projectId."},"organizationId":{"type":"string","minLength":1,"maxLength":256,"description":"Optional organization ID returned for the signed-in account."},"client":{"type":"string","enum":["codex","roo","claude-code","cursor","a2a"],"description":"Target MCP client for @spala-ai/mcp-install. Omit to receive client_selection_required without an executable mutation plan."},"bootstrapRequestId":{"type":"string","pattern":"^claim_[A-Za-z0-9_-]{20,80}$","description":"Non-secret local request ID returned by project prepare. Claude Code only."},"bootstrapChallenge":{"type":"string","pattern":"^[A-Za-z0-9_-]{43}$","description":"S256 challenge returned by project prepare. The verifier remains only in the local credential store."}},"description":"Provide exactly one project selector and a supported agentic workspace client (codex, roo, claude-code, or cursor) to receive executable installer argv.","oneOf":[{"type":"object","additionalProperties":false,"required":["projectId"],"properties":{"projectId":{"type":"string","minLength":1,"maxLength":256,"description":"Exact Spala project ID. Mutually exclusive with subdomain."},"client":{"type":"string","enum":["codex","roo","claude-code","cursor","a2a"],"description":"Target MCP client for @spala-ai/mcp-install. Omit to receive client_selection_required without an executable mutation plan."},"bootstrapRequestId":{"type":"string","pattern":"^claim_[A-Za-z0-9_-]{20,80}$","description":"Non-secret local request ID returned by project prepare. Claude Code only."},"bootstrapChallenge":{"type":"string","pattern":"^[A-Za-z0-9_-]{43}$","description":"S256 challenge returned by project prepare. The verifier remains only in the local credential store."}}},{"type":"object","additionalProperties":false,"required":["subdomain"],"properties":{"subdomain":{"type":"string","minLength":1,"maxLength":256,"description":"Exact project subdomain returned by the Spala projects API. Mutually exclusive with projectId."},"organizationId":{"type":"string","minLength":1,"maxLength":256,"description":"Optional organization ID returned for the signed-in account."},"client":{"type":"string","enum":["codex","roo","claude-code","cursor","a2a"],"description":"Target MCP client for @spala-ai/mcp-install. Omit to receive client_selection_required without an executable mutation plan."},"bootstrapRequestId":{"type":"string","pattern":"^claim_[A-Za-z0-9_-]{20,80}$","description":"Non-secret local request ID returned by project prepare. Claude Code only."},"bootstrapChallenge":{"type":"string","pattern":"^[A-Za-z0-9_-]{43}$","description":"S256 challenge returned by project prepare. The verifier remains only in the local credential store."}}}],"additionalProperties":false}},{"name":"project_create","description":"AUTH REQUIRED; WRITES TO THE SPALA CONTROL PLANE. Creates a real Spala project with the supplied project name in an accessible organization. Accepts an organization id when multiple organizations are available and automatically scopes a sole organization. This operation is not idempotent.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"name":{"type":"string","minLength":1,"maxLength":120,"description":"Human-readable name for the new Spala project."},"organizationId":{"type":"string","minLength":1,"maxLength":256,"description":"Organization ID returned for the signed-in account. Optional only when exactly one organization is available."}},"required":["name"],"description":"Create a real Spala project in an organization available to the authenticated user.","additionalProperties":false}},{"name":"project_get_mcp_manifest","description":"AUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Prepares one accessible project and returns its exact platform-provided project MCP manifest URL, MCP URL, and client-specific workspace binding plan. Accepts one installer client (codex, roo, claude-code, cursor, a2a); when omitted, returns a client-selection response without executable arguments.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"projectId":{"type":"string","minLength":1,"maxLength":256,"description":"Exact Spala project ID. Mutually exclusive with subdomain."},"subdomain":{"type":"string","minLength":1,"maxLength":256,"description":"Exact project subdomain returned by the Spala projects API. Mutually exclusive with projectId."},"organizationId":{"type":"string","minLength":1,"maxLength":256,"description":"Optional organization ID returned for the signed-in account."},"client":{"type":"string","enum":["codex","roo","claude-code","cursor","a2a"],"description":"Target MCP client for @spala-ai/mcp-install. Omit to receive client_selection_required without an executable mutation plan."},"bootstrapRequestId":{"type":"string","pattern":"^claim_[A-Za-z0-9_-]{20,80}$","description":"Non-secret local request ID returned by project prepare. Claude Code only."},"bootstrapChallenge":{"type":"string","pattern":"^[A-Za-z0-9_-]{43}$","description":"S256 challenge returned by project prepare. The verifier remains only in the local credential store."}},"description":"Provide exactly one project selector and a supported agentic workspace client (codex, roo, claude-code, or cursor) to receive executable installer argv.","oneOf":[{"type":"object","additionalProperties":false,"required":["projectId"],"properties":{"projectId":{"type":"string","minLength":1,"maxLength":256,"description":"Exact Spala project ID. Mutually exclusive with subdomain."},"client":{"type":"string","enum":["codex","roo","claude-code","cursor","a2a"],"description":"Target MCP client for @spala-ai/mcp-install. Omit to receive client_selection_required without an executable mutation plan."},"bootstrapRequestId":{"type":"string","pattern":"^claim_[A-Za-z0-9_-]{20,80}$","description":"Non-secret local request ID returned by project prepare. Claude Code only."},"bootstrapChallenge":{"type":"string","pattern":"^[A-Za-z0-9_-]{43}$","description":"S256 challenge returned by project prepare. The verifier remains only in the local credential store."}}},{"type":"object","additionalProperties":false,"required":["subdomain"],"properties":{"subdomain":{"type":"string","minLength":1,"maxLength":256,"description":"Exact project subdomain returned by the Spala projects API. Mutually exclusive with projectId."},"organizationId":{"type":"string","minLength":1,"maxLength":256,"description":"Optional organization ID returned for the signed-in account."},"client":{"type":"string","enum":["codex","roo","claude-code","cursor","a2a"],"description":"Target MCP client for @spala-ai/mcp-install. Omit to receive client_selection_required without an executable mutation plan."},"bootstrapRequestId":{"type":"string","pattern":"^claim_[A-Za-z0-9_-]{20,80}$","description":"Non-secret local request ID returned by project prepare. Claude Code only."},"bootstrapChallenge":{"type":"string","pattern":"^[A-Za-z0-9_-]{43}$","description":"S256 challenge returned by project prepare. The verifier remains only in the local credential store."}}}],"additionalProperties":false}},{"name":"project_get_public_context","description":"AUTH REQUIRED; READ-ONLY. Returns documented MCP handoff fields for one accessible project without exposing tokens, private source code, unrelated customer data, or executable installer arguments.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"projectId":{"type":"string","minLength":1,"maxLength":256,"description":"Exact Spala project ID. Mutually exclusive with subdomain."},"subdomain":{"type":"string","minLength":1,"maxLength":256,"description":"Exact project subdomain returned by the Spala projects API. Mutually exclusive with projectId."},"organizationId":{"type":"string","minLength":1,"maxLength":256,"description":"Optional organization ID returned for the signed-in account."}},"description":"Provide exactly one project selector: projectId or subdomain. organizationId is optional when selecting by subdomain.","oneOf":[{"type":"object","additionalProperties":false,"required":["projectId"],"properties":{"projectId":{"type":"string","minLength":1,"maxLength":256,"description":"Exact Spala project ID. Mutually exclusive with subdomain."}}},{"type":"object","additionalProperties":false,"required":["subdomain"],"properties":{"subdomain":{"type":"string","minLength":1,"maxLength":256,"description":"Exact project subdomain returned by the Spala projects API. Mutually exclusive with projectId."},"organizationId":{"type":"string","minLength":1,"maxLength":256,"description":"Optional organization ID returned for the signed-in account."}}}],"additionalProperties":false}},{"name":"project_list","description":"AUTH REQUIRED; READ-ONLY. Lists projects accessible to the authenticated Spala user in one organization. Accepts an organization id when multiple organizations are available and automatically scopes a sole organization.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"organizationId":{"type":"string","minLength":1,"maxLength":256,"description":"Organization ID returned for the signed-in account. Optional only when exactly one organization is available."}},"description":"List projects for an organization available to the authenticated user.","additionalProperties":false}},{"name":"project_select","description":"AUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Compatibility alias for project_connect. Prepares one accessible project and returns the same client-specific workspace binding contract as project_connect.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"projectId":{"type":"string","minLength":1,"maxLength":256,"description":"Exact Spala project ID. Mutually exclusive with subdomain."},"subdomain":{"type":"string","minLength":1,"maxLength":256,"description":"Exact project subdomain returned by the Spala projects API. Mutually exclusive with projectId."},"organizationId":{"type":"string","minLength":1,"maxLength":256,"description":"Optional organization ID returned for the signed-in account."},"client":{"type":"string","enum":["codex","roo","claude-code","cursor","a2a"],"description":"Target MCP client for @spala-ai/mcp-install. Omit to receive client_selection_required without an executable mutation plan."},"bootstrapRequestId":{"type":"string","pattern":"^claim_[A-Za-z0-9_-]{20,80}$","description":"Non-secret local request ID returned by project prepare. Claude Code only."},"bootstrapChallenge":{"type":"string","pattern":"^[A-Za-z0-9_-]{43}$","description":"S256 challenge returned by project prepare. The verifier remains only in the local credential store."}},"description":"Provide exactly one project selector and a supported agentic workspace client (codex, roo, claude-code, or cursor) to receive executable installer argv.","oneOf":[{"type":"object","additionalProperties":false,"required":["projectId"],"properties":{"projectId":{"type":"string","minLength":1,"maxLength":256,"description":"Exact Spala project ID. Mutually exclusive with subdomain."},"client":{"type":"string","enum":["codex","roo","claude-code","cursor","a2a"],"description":"Target MCP client for @spala-ai/mcp-install. Omit to receive client_selection_required without an executable mutation plan."},"bootstrapRequestId":{"type":"string","pattern":"^claim_[A-Za-z0-9_-]{20,80}$","description":"Non-secret local request ID returned by project prepare. Claude Code only."},"bootstrapChallenge":{"type":"string","pattern":"^[A-Za-z0-9_-]{43}$","description":"S256 challenge returned by project prepare. The verifier remains only in the local credential store."}}},{"type":"object","additionalProperties":false,"required":["subdomain"],"properties":{"subdomain":{"type":"string","minLength":1,"maxLength":256,"description":"Exact project subdomain returned by the Spala projects API. Mutually exclusive with projectId."},"organizationId":{"type":"string","minLength":1,"maxLength":256,"description":"Optional organization ID returned for the signed-in account."},"client":{"type":"string","enum":["codex","roo","claude-code","cursor","a2a"],"description":"Target MCP client for @spala-ai/mcp-install. Omit to receive client_selection_required without an executable mutation plan."},"bootstrapRequestId":{"type":"string","pattern":"^claim_[A-Za-z0-9_-]{20,80}$","description":"Non-secret local request ID returned by project prepare. Claude Code only."},"bootstrapChallenge":{"type":"string","pattern":"^[A-Za-z0-9_-]{43}$","description":"S256 challenge returned by project prepare. The verifier remains only in the local credential store."}}}],"additionalProperties":false}},{"name":"spala_get_onboarding","description":"Returns machine-readable Spala onboarding information for MCP clients. Includes product scope, OAuth metadata, supported installer client identifiers, authenticated project-handoff status, workflow stages, and canonical links.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{},"description":"No arguments. Call this tool with an empty object.","additionalProperties":false}},{"name":"spala_get_tool_map","description":"Returns a machine-readable routing map for Spala MCP clients. Identifies public and authenticated tools, supported installer clients, OAuth endpoints, project handoff rules, and project-MCP entry points.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{},"description":"No arguments. Call this tool with an empty object.","additionalProperties":false}},{"name":"spala_help","description":"Returns a human-readable overview of Spala, canonical start URLs, and the boundary between public discovery and project-scoped backend MCPs. Invoke for product, setup, or integration orientation. This read-only tool requires no authentication and does not access or modify project data.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{},"description":"No arguments. Call this tool with an empty object.","additionalProperties":false}},{"name":"spala_start","description":"AUTH REQUIRED; READ-ONLY STARTUP. Invoke after OAuth to begin Spala account or project setup. Returns a versioned startup phase with account readiness, organizations, safely scoped project discovery, and one explicit next action. Reports missing account fields, automatically scopes a sole organization, and returns all accessible choices when multiple organizations exist.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{},"description":"No arguments. Call this tool with an empty object.","additionalProperties":false}},{"name":"template_list","description":"Lists public Spala backend templates matching an optional query. Invoke to discover available backend starting points such as marketplace, dashboard API, reservation, inventory, or document management. Returns template ids, names, descriptions, and tags.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"query":{"type":"string","description":"Optional filter phrase for matching public Spala templates or addons by name, tag, or use case.","default":""},"limit":{"type":"integer","minimum":1,"maximum":50,"description":"Maximum number of catalog entries to return.","default":20}},"description":"Optional catalog search and result limit for public Spala planning resources.","additionalProperties":false}}],"scan":{"score":75,"grade":"B","scanned_at":"2026-09-25T12:09:04.387Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-25T12:09:04.362Z","components":{"code":{"score":-1,"max":25,"notes":["remote-only server, no package to scan"]},"reliability":{"score":17,"max":20,"notes":["remote reachable in 2618ms"]},"poisoning":{"score":15,"max":15,"notes":["16 tool descriptions checked"]},"auth":{"score":3,"max":15,"notes":["open endpoint exposes 2 write-action tools with no auth"]},"maintenance":{"score":15,"max":15,"notes":["last push 2 days ago"]},"identity":{"score":6,"max":10,"notes":["namespace and repository owner differ","website matches verified namespace"]}},"findings":[{"id":"auth.open-write","severity":"high","component":"auth","title":"Write-action tools reachable without authentication"}],"inputs":{"probes":[{"url":"https://mcp.spala.ai/mcp","reachable":true,"authRequired":false,"latencyMs":2618,"serverInfo":{"name":"Spala Public MCP","version":"0.1.1"}}],"packages":[],"repo":{"found":true,"owner":"spala-ai","repo":"spala-public-mcp","archived":false,"pushedAt":"2026-09-23T12:13:43Z","stars":0,"forks":0,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/254668143?v=4","ownerCreatedAt":"2026-01-13T11:29:26Z"},"icon":{"url":"https://spala.ai/apple-touch-icon.png","source":"site","width":180,"height":180},"presence":{"stars":0,"forks":0,"downloadsWeek":null,"license":null,"lastPushAt":"2026-09-23T12:13:43.000Z","score":23}}}},"grade_history":[],"reviews":[]}