{"name":"io.github.springrolldev/springroll","slug":"springrolldev-springroll","title":"SpringRoll","description":"Register, deploy, review, and govern internal applications built with coding agents.","url":"https://mcp.market/server/springrolldev-springroll","rating":null,"grade":"C","score":57,"certified":false,"status":"active","category":"devtools","tags":["devtools"],"presence":{"score":5,"stars":null,"forks":null,"downloads_week":null,"last_push_at":null,"license":null},"uptime":{"percent":100,"checks":19,"ok":19,"last_checked_at":"2026-09-24T04:11:09.179Z","last_ok_at":"2026-09-24T04:11:09.179Z","latency_ms":443},"claimed":false,"transport":"remote","callable_via_gateway":true,"default_price_micros":0,"repository":null,"website":null,"version":"0.1.0","remotes":[{"type":"streamable-http","url":"https://springroll.dev/api/mcp"}],"packages":[],"tools":[{"name":"springroll.app.get","description":"Returns an application's registry record: metadata, lifecycle stage, risk score, and whichever of the optional sections you ask for. No secrets are included.\n\nSections, all returned by default:\n  • `source`: repository or uploaded bundle, and `cannotBuildReason` when a deploy would be refused for want of a source\n  • `history`: recent releases and deployments\n  • `status`: each environment's current deployment, outstanding approvals, and usage. This answers \"where is my app up to?\"\n  • `grants`: data access grants and dependencies\n\nPass a narrower `include` when you only need part of it; each section costs a query.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"application":{"type":"string","minLength":1,"description":"Application slug or id."},"include":{"description":"Sections to return. Defaults to all of them.","type":"array","items":{"type":"string","enum":["source","history","status","grants"]}},"context":{"type":"string","description":"Explain why you are calling this tool and how it fits into the user's overall goal. This parameter is used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('I', 'we', 'you') - maintain third-person perspective. NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): \"Searching across the organization's repositories to find all open issues related to performance complaints and latency issues for team prioritization.\""}},"required":["application","context"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"springroll.app.list","description":"Lists applications in this organization, newest first. Use `search` to find one by name or slug.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"search":{"type":"string","maxLength":200},"limit":{"type":"integer","minimum":1,"maximum":100},"context":{"type":"string","description":"Explain why you are calling this tool and how it fits into the user's overall goal. This parameter is used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('I', 'we', 'you') - maintain third-person perspective. NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): \"Searching across the organization's repositories to find all open issues related to performance complaints and latency issues for team prioritization.\""}},"required":["context"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"springroll.app.record_prompts","description":"Attaches the conversation that produced this application to its record, as reference for whoever maintains it next and for the reviewer who has to approve it.\n\nAsk the user before calling this, every time. The transcript is STORED and is READABLE BY ANYONE who can see the application record. SpringRoll scrubs credentials it recognises before writing (agent tokens, cloud keys, private keys, connection strings, and assignment lines whose key looks like a secret), but that scrubbing is best-effort and cannot be complete. If the conversation contained a real secret, do not record it.\n\nSend turns in order. Keep `sessionKey` stable across calls for one build so they join up; retrying with the same key and turn indexes overwrites rather than duplicating.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"application":{"type":"string","minLength":1,"description":"Application slug or id."},"sessionKey":{"type":"string","minLength":1,"maxLength":200,"description":"Stable identifier for this build conversation."},"turns":{"minItems":1,"maxItems":50,"type":"array","items":{"type":"object","properties":{"role":{"type":"string","enum":["user","assistant","system","tool"]},"content":{"type":"string","minLength":1},"occurredAt":{"type":"string","format":"date-time","pattern":"^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"}},"required":["role","content"]},"description":"Up to 50 turns per call, in order."},"startTurnIndex":{"description":"Where this batch starts. Defaults to after the last recorded turn.","type":"integer","minimum":0,"maximum":9007199254740991},"agentName":{"type":"string","maxLength":120},"modelName":{"type":"string","maxLength":120},"inputTokens":{"type":"integer","minimum":0,"maximum":9007199254740991},"outputTokens":{"type":"integer","minimum":0,"maximum":9007199254740991},"releaseId":{"type":"string","format":"uuid","pattern":"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"},"idempotencyKey":{"type":"string","minLength":8,"maxLength":200,"description":"Required. A stable, caller-generated key. Retrying with the same key returns the original result instead of creating a duplicate."},"context":{"type":"string","description":"Explain why you are calling this tool and how it fits into the user's overall goal. This parameter is used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('I', 'we', 'you') - maintain third-person perspective. NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): \"Searching across the organization's repositories to find all open issues related to performance complaints and latency issues for team prioritization.\""}},"required":["application","sessionKey","turns","idempotencyKey","context"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"springroll.app.update","description":"Updates App Portal metadata: description, icon, tags, department, support contact, and data classification. Visibility is deliberately not editable here, because widening an audience requires an approval request (sec. 15.4).","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"application":{"type":"string","minLength":1,"description":"Application slug or id."},"description":{"type":"string","maxLength":2000},"iconUrl":{"type":"string","format":"uri"},"tags":{"maxItems":20,"type":"array","items":{"type":"string","minLength":1,"maxLength":40}},"department":{"type":"string","maxLength":120},"supportContact":{"type":"string","maxLength":200},"dataClassification":{"type":"string","enum":["public","internal","confidential","restricted"]},"context":{"type":"string","description":"Explain why you are calling this tool and how it fits into the user's overall goal. This parameter is used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('I', 'we', 'you') - maintain third-person perspective. NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): \"Searching across the organization's repositories to find all open issues related to performance complaints and latency issues for team prioritization.\""}},"required":["application","context"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"springroll.approval.get","description":"Returns an approval request with its assigned reviewers, decisions so far, and the policy snapshot taken at submission. Poll this to find out whether a release has been approved.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"approvalRequestId":{"type":"string","format":"uuid","pattern":"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"},"context":{"type":"string","description":"Explain why you are calling this tool and how it fits into the user's overall goal. This parameter is used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('I', 'we', 'you') - maintain third-person perspective. NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): \"Searching across the organization's repositories to find all open issues related to performance complaints and latency issues for team prioritization.\""}},"required":["approvalRequestId","context"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"springroll.approval.submit","description":"Submits an approval request of any supported type: UAT_PROMOTION, UAT_SIGN_OFF, PRODUCTION_PROMOTION, VISIBILITY_CHANGE, OWNERSHIP_TRANSFER, RETIREMENT, DOMAIN_CHANGE, or ROLLBACK. **An agent may submit but never decide**: SpringRoll requires a human approver, and an agent token cannot approve its own request.\n\nConfirm with the user before calling this. It creates review work for named people.\n\nType-specific behaviour:\n  • `PRODUCTION_PROMOTION`: this does NOT deploy. It asks. `releaseId` defaults to the application's latest release. Once approved, call springroll.deploy.promote.\n  • `ROLLBACK`: `justification` is required, and `targetEnvironmentType` says which environment to roll back. Put the deployment to restore in `payload.targetDeploymentId`; it defaults to the last successful one.\n  • `RETIREMENT`: `justification` is required.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"application":{"type":"string","minLength":1,"description":"Application slug or id."},"requestType":{"type":"string","enum":["UAT_PROMOTION","UAT_SIGN_OFF","PRODUCTION_PROMOTION","VISIBILITY_CHANGE","OWNERSHIP_TRANSFER","RETIREMENT","DOMAIN_CHANGE","ROLLBACK"]},"releaseId":{"description":"Release this concerns. For PRODUCTION_PROMOTION, defaults to the latest release.","type":"string","format":"uuid","pattern":"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"},"targetEnvironmentType":{"type":"string","enum":["development","uat","production"],"description":"Canonical environment class. SpringRoll promotes development -> uat -> production."},"justification":{"description":"Why this should happen. Shown to reviewers. Required for ROLLBACK and RETIREMENT, and at least 10 characters when required.","type":"string","maxLength":2000},"payload":{"description":"Type-specific detail, e.g. { visibility: 'TENANT' }, { newOwnerMembershipId: '…' }, or { targetDeploymentId: '…' } for a rollback.","type":"object","propertyNames":{"type":"string"},"additionalProperties":{}},"idempotencyKey":{"type":"string","minLength":8,"maxLength":200,"description":"Required. A stable, caller-generated key. Retrying with the same key returns the original result instead of creating a duplicate."},"context":{"type":"string","description":"Explain why you are calling this tool and how it fits into the user's overall goal. This parameter is used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('I', 'we', 'you') - maintain third-person perspective. NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): \"Searching across the organization's repositories to find all open issues related to performance complaints and latency issues for team prioritization.\""}},"required":["application","requestType","idempotencyKey","context"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"springroll.connect.access_status","description":"Returns the status of a data access request: REQUESTED, APPROVED, REJECTED, REVOKED, or EXPIRED, with the fields actually approved. Approved fields are often narrower than requested, and a row filter may restrict which rows the application can see at all.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"grantId":{"type":"string","format":"uuid","pattern":"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"},"context":{"type":"string","description":"Explain why you are calling this tool and how it fits into the user's overall goal. This parameter is used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('I', 'we', 'you') - maintain third-person perspective. NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): \"Searching across the organization's repositories to find all open issues related to performance complaints and latency issues for team prioritization.\""}},"required":["grantId","context"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"springroll.connect.data_products","description":"Without `dataProduct`, lists the governed data products this organization publishes: what each one holds, who owns it, and how sensitive it is.\n\nWith `dataProduct`, returns that product's schema: its datasets, the available fields with their types and sensitivity, the business glossary its owner wrote, and what the underlying source can compute. Read this before requesting access, so you request the fields the application actually needs.\n\nEither way you learn the *kind* of system behind a product (so you know, for example, that a Notion-backed product cannot aggregate) but never a host, a credential, a table name, or a connection string. Request access with springroll.connect.request_access; a data owner must approve it.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"dataProduct":{"description":"Data product slug. Omit to list every product this organization publishes.","type":"string","minLength":1},"context":{"type":"string","description":"Explain why you are calling this tool and how it fits into the user's overall goal. This parameter is used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('I', 'we', 'you') - maintain third-person perspective. NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): \"Searching across the organization's repositories to find all open issues related to performance complaints and latency issues for team prioritization.\""}},"required":["context"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"springroll.connect.request_access","description":"Requests access to a data product for one environment, naming the exact fields the application needs. A data owner must approve, and may narrow the field list or add a row filter before doing so. Nothing is readable until then. You never receive a credential: an approved grant lets the deployed application ask questions through the SpringRoll Connect gateway, which enforces the grant on every request.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"application":{"type":"string","minLength":1,"description":"Application slug or id."},"dataProduct":{"type":"string","minLength":1,"description":"Data product slug from springroll.connect.data_products."},"environmentType":{"type":"string","enum":["development","uat","production"],"description":"Canonical environment class. SpringRoll promotes development -> uat -> production."},"fields":{"minItems":1,"maxItems":200,"type":"array","items":{"type":"string","minLength":1,"maxLength":260},"description":"Qualified field names to request, as `dataset.field`. Ask for what the application actually reads, because a narrower request is approved faster and survives review."},"purpose":{"description":"Why the application needs this data. Shown to the data owner.","type":"string","maxLength":2000},"context":{"type":"string","description":"Explain why you are calling this tool and how it fits into the user's overall goal. This parameter is used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('I', 'we', 'you') - maintain third-person perspective. NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): \"Searching across the organization's repositories to find all open issues related to performance complaints and latency issues for team prioritization.\""}},"required":["application","dataProduct","environmentType","fields","context"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"springroll.context","description":"Returns the organization, identity, and permissions this agent token acts as, together with the deployment runtimes configured for it. Call this first: it tells you which tenant you are in, what you are allowed to do, and whether a deployment can actually land. It never returns credentials.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"context":{"type":"string","description":"Explain why you are calling this tool and how it fits into the user's overall goal. This parameter is used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('I', 'we', 'you') - maintain third-person perspective. NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): \"Searching across the organization's repositories to find all open issues related to performance complaints and latency issues for team prioritization.\""}},"required":["context"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"springroll.deploy","description":"Registers the project if it is new, attaches whatever source you give it, and deploys it using the application's Deployment workflow. Direct applications go to Production; Staged applications go to Development. Returns the live URL, or a deployment id to poll if the build is still running.\n\n**You do not decide whether this project needs git.** Send what you have and SpringRoll works it out:\n  • a pushed git remote → pass `repositoryUrl` (and `ref` if not the default branch)\n  • no remote, or uncommitted work → pass `archive`, a base64 tar+gzip of the source:\n      tar --exclude=node_modules --exclude=.next --exclude=.git --exclude='.env*' \\\n          -czf - . | base64 -w0\n  • both → SpringRoll builds from git, and falls back to your files if the ref cannot be resolved (an unpushed branch, typically)\n  • neither, on an app that already exists → redeploys its current source\n\nUpload SOURCE, not build output: SpringRoll runs the build. node_modules, .next, dist, build, out, coverage and .log files are dropped automatically and reported. Every .env file and .git/ is REFUSED outright, naming the offending path: configuration belongs in SpringRoll, not in the bundle. Upload limits are about 3 MB compressed on the wire (a platform request-body cap, not a preference), 20 MB expanded, 2000 files, 512 KB per file; a project past them should pass `repositoryUrl` instead, which SpringRoll clones directly with no size limit. Sending the same files twice is free, because bundles are addressed by content.\n\nDirect to Production skips workflow approvals but keeps production safety checks. Staged applications continue to use explicit promotion and approvals.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"application":{"description":"An existing app's slug or id. Omit on the first ship; `name` implies it.","type":"string","minLength":1},"name":{"type":"string","minLength":2,"maxLength":120},"slug":{"type":"string","minLength":2,"maxLength":63,"pattern":"^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$"},"manifest":{"description":"A SpringRoll manifest. Supersedes the metadata fields below; the source fields still apply.","type":"string"},"description":{"type":"string","maxLength":2000},"department":{"type":"string","maxLength":120},"supportContact":{"description":"Team channel or email for users of this app. Required before production.","type":"string","maxLength":200},"dataClassification":{"type":"string","enum":["public","internal","confidential","restricted"]},"tags":{"maxItems":20,"type":"array","items":{"type":"string","minLength":1,"maxLength":60}},"repositoryUrl":{"type":"string","format":"uri"},"ref":{"description":"Branch, tag, or full commit SHA. Defaults to the app's default revision.","type":"string","maxLength":200},"archive":{"description":"Base64 of a gzipped tar of the project source. Preferred over `files`.","type":"string"},"files":{"description":"Path-to-contents map. Use `archive` for anything beyond a few files.","type":"object","propertyNames":{"type":"string"},"additionalProperties":{"type":"string"}},"filesEncoding":{"type":"string","enum":["utf-8","base64"]},"preferSource":{"description":"Tie-breaker when both a repository and files are given. Defaults to git.","type":"string","enum":["git","upload"]},"framework":{"type":"string","enum":["nextjs","static"]},"installCommand":{"type":"string","maxLength":500},"buildCommand":{"type":"string","maxLength":500},"outputDirectory":{"type":"string","maxLength":300},"rootDirectory":{"type":"string","maxLength":300},"placement":{"description":"Optional, provider-neutral hints about what this application needs. SpringRoll chooses the provider and plan; these only inform that choice. Leave out anything you do not actually know: monthly billing quantities remain unknown; ordinary workload hints are inferred from the source and named on the placement receipt, which is more useful to the user than a confident guess.","type":"object","properties":{"monthlyUsage":{"description":"Optional monthly billing quantities supplied by the user or actual usage evidence. Never invent values or default missing fields to zero. CPU-hours mean active CPU time; memory GB-hours include billable wait time and provider minimums. Build minutes do not substitute for Sandbox CPU/memory. Database and object storage are separate from local disk. Cloudflare Worker dispatch requests and CPU are separate from container active vCPU, provisioned memory, disk and regional egress. Rows read/written mean billed rows including indexes, not SQL query counts. Cache commands include internal operations and realtime polling. On redeploy this replaces the previous monthlyUsage forecast; omit the whole object to keep it.","type":"object","properties":{"worker":{"type":"object","properties":{"dispatchRequests":{"type":"integer","minimum":0,"maximum":1000000000000000},"cpuMilliseconds":{"type":"number","minimum":0,"maximum":1000000000000000}},"additionalProperties":false},"runtime":{"type":"object","properties":{"activeCpuHours":{"type":"number","minimum":0,"maximum":1000000000000000},"provisionedMemoryGbHours":{"type":"number","minimum":0,"maximum":1000000000000000},"invocations":{"type":"integer","minimum":0,"maximum":1000000000000000},"originTransferGb":{"type":"number","minimum":0,"maximum":1000000000000000}},"additionalProperties":false},"build":{"type":"object","properties":{"minutes":{"type":"number","minimum":0,"maximum":1000000000000000},"activeCpuHours":{"type":"number","minimum":0,"maximum":1000000000000000},"provisionedMemoryGbHours":{"type":"number","minimum":0,"maximum":1000000000000000},"starts":{"type":"integer","minimum":0,"maximum":1000000000000000},"dataTransferGb":{"type":"number","minimum":0,"maximum":1000000000000000},"registryStorageGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000},"artifactStorageGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000},"artifactSimpleOperations":{"type":"integer","minimum":0,"maximum":1000000000000000},"artifactAdvancedOperations":{"type":"integer","minimum":0,"maximum":1000000000000000},"artifactDataTransferGb":{"type":"number","minimum":0,"maximum":1000000000000000}},"additionalProperties":false},"container":{"type":"object","properties":{"billedVcpuSeconds":{"type":"number","minimum":0,"maximum":1000000000000000},"billedMemoryGibSeconds":{"type":"number","minimum":0,"maximum":1000000000000000},"billedDiskGbSeconds":{"type":"number","minimum":0,"maximum":1000000000000000},"egressNaEuGb":{"type":"number","minimum":0,"maximum":1000000000000000},"egressOceaniaKoreaTaiwanGb":{"type":"number","minimum":0,"maximum":1000000000000000},"egressOtherGb":{"type":"number","minimum":0,"maximum":1000000000000000}},"additionalProperties":false},"database":{"type":"object","properties":{"computeCuHours":{"type":"number","minimum":0,"maximum":1000000000000000},"storageGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000},"restoreHistoryGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000},"extraBranchMonths":{"type":"number","minimum":0,"maximum":1000000000000000},"extraBranchHours":{"type":"number","minimum":0,"maximum":1000000000000000},"snapshotStorageGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000},"publicDataTransferGb":{"type":"number","minimum":0,"maximum":1000000000000000},"rowsRead":{"type":"integer","minimum":0,"maximum":1000000000000000},"rowsWritten":{"type":"integer","minimum":0,"maximum":1000000000000000}},"additionalProperties":false},"cache":{"type":"object","properties":{"commands":{"type":"integer","minimum":0,"maximum":1000000000000000},"storageGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000},"dataTransferGb":{"type":"number","minimum":0,"maximum":1000000000000000}},"additionalProperties":false},"durableObject":{"type":"object","properties":{"billableRequests":{"type":"integer","minimum":0,"maximum":1000000000000000},"durationGbSeconds":{"type":"number","minimum":0,"maximum":1000000000000000},"rowsRead":{"type":"integer","minimum":0,"maximum":1000000000000000},"rowsWritten":{"type":"integer","minimum":0,"maximum":1000000000000000},"storageGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000}},"additionalProperties":false},"kv":{"type":"object","properties":{"reads":{"type":"integer","minimum":0,"maximum":1000000000000000},"writes":{"type":"integer","minimum":0,"maximum":1000000000000000},"deletes":{"type":"integer","minimum":0,"maximum":1000000000000000},"lists":{"type":"integer","minimum":0,"maximum":1000000000000000},"storageGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000}},"additionalProperties":false},"objectStorage":{"type":"object","properties":{"storageGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000},"simpleOperations":{"type":"integer","minimum":0,"maximum":1000000000000000},"advancedOperations":{"type":"integer","minimum":0,"maximum":1000000000000000},"dataTransferGb":{"type":"number","minimum":0,"maximum":1000000000000000}},"additionalProperties":false}},"additionalProperties":false},"needs":{"description":"Everything this application needs, in one list. At most one shape of thing being run ('static', 'serverless', 'server', or 'container'), plus any services it needs beside its own code: 'postgres', 'auth', 'storage', 'realtime', 'edge-functions'. A provider that cannot supply an entry is excluded, so ask only for what the app actually uses, and leave the shape out unless the project does something the source does not show.","type":"array","items":{"type":"string","enum":["static","serverless","server","container","database","postgres","auth","storage","realtime","edge-functions"]}},"expectedRequestsPerMonth":{"description":"Only if the user actually told you. Do not estimate: an invented number is indistinguishable from a measured one once it gets here, and SpringRoll's own default for an internal tool is more honest than a guess.","type":"integer","minimum":0,"maximum":9007199254740991},"expectedBandwidthGb":{"description":"Egress in gigabytes a month. Only if the user told you.","type":"number","minimum":0},"computeVcpu":{"description":"Sustained vCPU. Fractional is normal.","type":"number","minimum":0},"memoryMb":{"type":"integer","minimum":0,"maximum":9007199254740991},"storageGb":{"description":"Persistent disk needed, in gigabytes.","type":"number","minimum":0},"region":{"description":"A required region, when the data has to stay somewhere specific.","type":"string","maxLength":64},"coldStartTolerant":{"description":"False if the first visitor after an idle period must not wait. Set this when the user says the app has to be instant; it excludes plans that sleep, which are otherwise the cheapest ones.","type":"boolean"},"needsWebSockets":{"description":"Set true if the app holds a live connection. Inferred from the dependency list otherwise, and getting it wrong puts the app on a runtime that drops the socket on every request.","type":"boolean"},"needsBackgroundWork":{"description":"Set true if the app runs jobs or a scheduler outside a request.","type":"boolean"},"needsPersistentDisk":{"description":"Set true if the app writes files it expects to read back later.","type":"boolean"},"productionCritical":{"description":"Whether a colleague depends on this during their working day. Defaults to true for production and false elsewhere.","type":"boolean"},"budgetUsdPerMonth":{"description":"A real ceiling, if the user gave one. Leave it out otherwise: a budget of zero that nobody asked for would exclude every qualified plan with a non-zero estimate.","type":"number","minimum":0}},"additionalProperties":false},"waitSeconds":{"description":"How long to wait for the build before returning. Defaults to 20. A real build usually outlasts this; poll springroll.deploy.status after.","type":"integer","minimum":0,"maximum":60},"idempotencyKey":{"type":"string","minLength":8,"maxLength":200,"description":"Required. A stable, caller-generated key. Retrying with the same key returns the original result instead of creating a duplicate."},"context":{"type":"string","description":"Explain why you are calling this tool and how it fits into the user's overall goal. This parameter is used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('I', 'we', 'you') - maintain third-person perspective. NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): \"Searching across the organization's repositories to find all open issues related to performance complaints and latency issues for team prioritization.\""}},"required":["idempotencyKey","context"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"springroll.deploy.promote","description":"Promotes a tested deployment into the next environment (development -> uat, uat -> production). Reuses the already-built artifact rather than rebuilding, so the bytes that were tested are the bytes that ship.\n\nPromotion into an environment that requires approval will be refused until the approval exists. For production, submit the request first.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"deploymentId":{"type":"string","format":"uuid","pattern":"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$","description":"The tested deployment to promote."},"targetEnvironmentType":{"type":"string","enum":["development","uat","production"],"description":"Canonical environment class. SpringRoll promotes development -> uat -> production."},"idempotencyKey":{"type":"string","minLength":8,"maxLength":200,"description":"Required. A stable, caller-generated key. Retrying with the same key returns the original result instead of creating a duplicate."},"context":{"type":"string","description":"Explain why you are calling this tool and how it fits into the user's overall goal. This parameter is used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('I', 'we', 'you') - maintain third-person perspective. NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): \"Searching across the organization's repositories to find all open issues related to performance complaints and latency issues for team prioritization.\""}},"required":["deploymentId","targetEnvironmentType","idempotencyKey","context"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"springroll.deploy.status","description":"Returns a deployment's current status, refreshing it from the runtime provider when the build is still in progress. Statuses: QUEUED, VALIDATING, BUILDING, DEPLOYING, READY, FAILED, CANCELLED, SUPERSEDED, ROLLED_BACK. Poll this after deploying rather than assuming success.\n\nPass `includeLogs` to get the normalised build and deploy log lines alongside the status. Do that once the status is FAILED, rather than guessing at the cause.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"deploymentId":{"type":"string","format":"uuid","pattern":"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"},"includeLogs":{"description":"Include build and deploy log lines. Defaults to false.","type":"boolean"},"logLimit":{"description":"How many log lines to return, counting from the end. Defaults to 200.","type":"integer","minimum":1,"maximum":500},"context":{"type":"string","description":"Explain why you are calling this tool and how it fits into the user's overall goal. This parameter is used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('I', 'we', 'you') - maintain third-person perspective. NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): \"Searching across the organization's repositories to find all open issues related to performance complaints and latency issues for team prioritization.\""}},"required":["deploymentId","context"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"springroll.placement.preview","description":"Scores where SpringRoll would place this application and what it would cost, without deploying or writing anything. It shares its implementation with springroll.deploy, so the receipt it returns is what a deploy right now would decide: the provider and plan, the estimated monthly cost range, every limit the plan carries, what was inferred rather than declared, and why each other candidate lost.\n\nIt works before any provider account is connected. The ranking is computed from the public catalog alone and credentials never affect it: connecting an account changes only whether a plan is deployable, never how it ranks. Each ranked alternative carries its readiness and the action that unlocks it, so you can tell the user both what is recommended and what would deploy today.\n\nUse it to put the cost and the limits in front of the user before deploying, or to ask what-if questions by varying the placement hints.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"application":{"type":"string","minLength":1,"description":"Application slug or id."},"environmentType":{"description":"Environment class to score for. Defaults to production, which is the strictest: plans published as unsuitable for production are excluded there.","type":"string","enum":["development","uat","production"]},"placement":{"description":"Optional, provider-neutral hints about what this application needs. SpringRoll chooses the provider and plan; these only inform that choice. Leave out anything you do not actually know: monthly billing quantities remain unknown; ordinary workload hints are inferred from the source and named on the placement receipt, which is more useful to the user than a confident guess.","type":"object","properties":{"monthlyUsage":{"description":"Optional monthly billing quantities supplied by the user or actual usage evidence. Never invent values or default missing fields to zero. CPU-hours mean active CPU time; memory GB-hours include billable wait time and provider minimums. Build minutes do not substitute for Sandbox CPU/memory. Database and object storage are separate from local disk. Cloudflare Worker dispatch requests and CPU are separate from container active vCPU, provisioned memory, disk and regional egress. Rows read/written mean billed rows including indexes, not SQL query counts. Cache commands include internal operations and realtime polling. On redeploy this replaces the previous monthlyUsage forecast; omit the whole object to keep it.","type":"object","properties":{"worker":{"type":"object","properties":{"dispatchRequests":{"type":"integer","minimum":0,"maximum":1000000000000000},"cpuMilliseconds":{"type":"number","minimum":0,"maximum":1000000000000000}},"additionalProperties":false},"runtime":{"type":"object","properties":{"activeCpuHours":{"type":"number","minimum":0,"maximum":1000000000000000},"provisionedMemoryGbHours":{"type":"number","minimum":0,"maximum":1000000000000000},"invocations":{"type":"integer","minimum":0,"maximum":1000000000000000},"originTransferGb":{"type":"number","minimum":0,"maximum":1000000000000000}},"additionalProperties":false},"build":{"type":"object","properties":{"minutes":{"type":"number","minimum":0,"maximum":1000000000000000},"activeCpuHours":{"type":"number","minimum":0,"maximum":1000000000000000},"provisionedMemoryGbHours":{"type":"number","minimum":0,"maximum":1000000000000000},"starts":{"type":"integer","minimum":0,"maximum":1000000000000000},"dataTransferGb":{"type":"number","minimum":0,"maximum":1000000000000000},"registryStorageGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000},"artifactStorageGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000},"artifactSimpleOperations":{"type":"integer","minimum":0,"maximum":1000000000000000},"artifactAdvancedOperations":{"type":"integer","minimum":0,"maximum":1000000000000000},"artifactDataTransferGb":{"type":"number","minimum":0,"maximum":1000000000000000}},"additionalProperties":false},"container":{"type":"object","properties":{"billedVcpuSeconds":{"type":"number","minimum":0,"maximum":1000000000000000},"billedMemoryGibSeconds":{"type":"number","minimum":0,"maximum":1000000000000000},"billedDiskGbSeconds":{"type":"number","minimum":0,"maximum":1000000000000000},"egressNaEuGb":{"type":"number","minimum":0,"maximum":1000000000000000},"egressOceaniaKoreaTaiwanGb":{"type":"number","minimum":0,"maximum":1000000000000000},"egressOtherGb":{"type":"number","minimum":0,"maximum":1000000000000000}},"additionalProperties":false},"database":{"type":"object","properties":{"computeCuHours":{"type":"number","minimum":0,"maximum":1000000000000000},"storageGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000},"restoreHistoryGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000},"extraBranchMonths":{"type":"number","minimum":0,"maximum":1000000000000000},"extraBranchHours":{"type":"number","minimum":0,"maximum":1000000000000000},"snapshotStorageGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000},"publicDataTransferGb":{"type":"number","minimum":0,"maximum":1000000000000000},"rowsRead":{"type":"integer","minimum":0,"maximum":1000000000000000},"rowsWritten":{"type":"integer","minimum":0,"maximum":1000000000000000}},"additionalProperties":false},"cache":{"type":"object","properties":{"commands":{"type":"integer","minimum":0,"maximum":1000000000000000},"storageGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000},"dataTransferGb":{"type":"number","minimum":0,"maximum":1000000000000000}},"additionalProperties":false},"durableObject":{"type":"object","properties":{"billableRequests":{"type":"integer","minimum":0,"maximum":1000000000000000},"durationGbSeconds":{"type":"number","minimum":0,"maximum":1000000000000000},"rowsRead":{"type":"integer","minimum":0,"maximum":1000000000000000},"rowsWritten":{"type":"integer","minimum":0,"maximum":1000000000000000},"storageGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000}},"additionalProperties":false},"kv":{"type":"object","properties":{"reads":{"type":"integer","minimum":0,"maximum":1000000000000000},"writes":{"type":"integer","minimum":0,"maximum":1000000000000000},"deletes":{"type":"integer","minimum":0,"maximum":1000000000000000},"lists":{"type":"integer","minimum":0,"maximum":1000000000000000},"storageGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000}},"additionalProperties":false},"objectStorage":{"type":"object","properties":{"storageGbMonths":{"type":"number","minimum":0,"maximum":1000000000000000},"simpleOperations":{"type":"integer","minimum":0,"maximum":1000000000000000},"advancedOperations":{"type":"integer","minimum":0,"maximum":1000000000000000},"dataTransferGb":{"type":"number","minimum":0,"maximum":1000000000000000}},"additionalProperties":false}},"additionalProperties":false},"needs":{"description":"Everything this application needs, in one list. At most one shape of thing being run ('static', 'serverless', 'server', or 'container'), plus any services it needs beside its own code: 'postgres', 'auth', 'storage', 'realtime', 'edge-functions'. A provider that cannot supply an entry is excluded, so ask only for what the app actually uses, and leave the shape out unless the project does something the source does not show.","type":"array","items":{"type":"string","enum":["static","serverless","server","container","database","postgres","auth","storage","realtime","edge-functions"]}},"expectedRequestsPerMonth":{"description":"Only if the user actually told you. Do not estimate: an invented number is indistinguishable from a measured one once it gets here, and SpringRoll's own default for an internal tool is more honest than a guess.","type":"integer","minimum":0,"maximum":9007199254740991},"expectedBandwidthGb":{"description":"Egress in gigabytes a month. Only if the user told you.","type":"number","minimum":0},"computeVcpu":{"description":"Sustained vCPU. Fractional is normal.","type":"number","minimum":0},"memoryMb":{"type":"integer","minimum":0,"maximum":9007199254740991},"storageGb":{"description":"Persistent disk needed, in gigabytes.","type":"number","minimum":0},"region":{"description":"A required region, when the data has to stay somewhere specific.","type":"string","maxLength":64},"coldStartTolerant":{"description":"False if the first visitor after an idle period must not wait. Set this when the user says the app has to be instant; it excludes plans that sleep, which are otherwise the cheapest ones.","type":"boolean"},"needsWebSockets":{"description":"Set true if the app holds a live connection. Inferred from the dependency list otherwise, and getting it wrong puts the app on a runtime that drops the socket on every request.","type":"boolean"},"needsBackgroundWork":{"description":"Set true if the app runs jobs or a scheduler outside a request.","type":"boolean"},"needsPersistentDisk":{"description":"Set true if the app writes files it expects to read back later.","type":"boolean"},"productionCritical":{"description":"Whether a colleague depends on this during their working day. Defaults to true for production and false elsewhere.","type":"boolean"},"budgetUsdPerMonth":{"description":"A real ceiling, if the user gave one. Leave it out otherwise: a budget of zero that nobody asked for would exclude every qualified plan with a non-zero estimate.","type":"number","minimum":0}},"additionalProperties":false},"context":{"type":"string","description":"Explain why you are calling this tool and how it fits into the user's overall goal. This parameter is used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('I', 'we', 'you') - maintain third-person perspective. NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): \"Searching across the organization's repositories to find all open issues related to performance complaints and latency issues for team prioritization.\""}},"required":["application","context"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"springroll.policy.check","description":"Reports which governance policies an application would pass or fail for an environment.\n\nSend `manifest` (YAML or JSON) to validate a document without creating anything. Call this before springroll.deploy to avoid a rejected submission. Read the `springroll://manifest/example` resource for the document's shape.\n\nSend `application` instead to explain why an existing application cannot deploy or promote to `environmentType`, with specific remediation for each failing rule. Call this when a deployment is rejected with POLICY_BLOCKED.\n\nSend exactly one of the two.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"manifest":{"description":"The manifest document, as YAML or JSON. Mutually exclusive with `application`.","type":"string","minLength":10},"application":{"description":"An existing application to explain. Mutually exclusive with `manifest`.","type":"string","minLength":1},"environmentType":{"description":"Environment to evaluate against. Defaults to production.","type":"string","enum":["development","uat","production"]},"releaseId":{"description":"Release to evaluate. Only meaningful with `application`.","type":"string","format":"uuid","pattern":"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"},"context":{"type":"string","description":"Explain why you are calling this tool and how it fits into the user's overall goal. This parameter is used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('I', 'we', 'you') - maintain third-person perspective. NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): \"Searching across the organization's repositories to find all open issues related to performance complaints and latency issues for team prioritization.\""}},"required":["context"],"$schema":"http://json-schema.org/draft-07/schema#"}}],"scan":{"score":57,"grade":"C","scanned_at":"2026-09-23T17:15:47.555Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-23T17:15:47.542Z","components":{"code":{"score":-1,"max":25,"notes":["remote-only server, no package to scan"]},"reliability":{"score":20,"max":20,"notes":["remote reachable in 450ms"]},"poisoning":{"score":15,"max":15,"notes":["15 tool descriptions checked"]},"auth":{"score":3,"max":15,"notes":["open endpoint exposes 5 write-action tools with no auth"]},"maintenance":{"score":3,"max":15,"notes":["no repository listed"]},"identity":{"score":2,"max":10,"notes":["no repository or website to verify"]}},"findings":[{"id":"auth.open-write","severity":"high","component":"auth","title":"Write-action tools reachable without authentication"},{"id":"maint.no-repo","severity":"low","component":"maintenance","title":"No source repository listed"}],"inputs":{"probes":[{"url":"https://springroll.dev/api/mcp","reachable":true,"authRequired":false,"latencyMs":450,"serverInfo":{"name":"springroll","version":"0.2.0"}}],"packages":[],"repo":{"found":false},"icon":{"url":"https://springroll.dev/icon.png?icon.1bruwxjyedo29.png","source":"site","width":512,"height":512},"presence":{"stars":null,"forks":null,"downloadsWeek":null,"license":null,"lastPushAt":null,"score":5}}}},"grade_history":[],"reviews":[]}