MCP.Market

Dataecho MCP server

online · 100% uptime
by dataecho.ai·ai.dataecho/mcp·v1.0.0

Deploy files, sites, and Dockerfile apps to live URLs + private drives for agent memory.

B76/100grade B
What users say
No reviews yet
Be the first
Safety scan
B76/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed Dataecho yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Dataecho tools (26, 8 write)

write = sends, deletes, buys or posts
  • app_statusFree

    Build/run status of a container app deployed via publish_site with a Dockerfile. Poll until status is `live` or `failed`.

  • claim_siteFree

    Make a previously-anonymous site permanent under the authenticated account (requires auth + the claimToken from publish_site).

  • create_drivewrite actionFree

    Create a new private drive.

  • delete_sitewrite actionFree

    Permanently delete an owned site. Irreversible — confirm with the user first.

  • delete_variablewrite actionFree

    Delete an account variable.

  • drive_delete_filewrite actionFree

    Delete one file from a drive.

  • drive_historyFree

    Version timeline of a drive (every write is a restorable version).

  • drive_list_filesFree

    List files in a drive (by drive name or drv_… id), optionally under a path prefix.

  • drive_move_fileFree

    Move/rename a file inside a drive.

  • drive_read_fileFree

    Read a file from a drive. Text comes back as utf-8 `content`; binary as `contentBase64`. Files over 1 MB are refused (use the skill scripts).

  • drive_restoreFree

    Restore a drive to a prior version (commits a new version; nothing is lost).

  • drive_revoke_tokenFree

    Revoke a drive share token.

  • drive_shareFree

    Mint a scoped drive access token for another agent (perms read|write, optional path prefix + TTL like `7d`). The secret is returned ONCE.

  • drive_tokensFree

    List active share tokens of a drive (secrets are never shown again).

  • drive_write_filewrite actionFree

    Write/overwrite one file in a drive (ETag-safe: pass ifMatch to assert the version you read, otherwise the current version is used automatically).

  • get_siteFree

    Full details + current file manifest of an owned site.

  • list_drivesFree

    List the authenticated account's private cloud drives.

  • list_sitesFree

    List all sites owned by the authenticated account.

  • list_variablesFree

    List account variable NAMES (values are write-only — they are injected into proxy calls and container apps, never read back).

  • platform_infoFree

    DataEcho platform overview: what it can host, auth state of this connection, docs links. Call this first if unsure.

  • publish_sitewrite actionFree

    Deploy files to a live URL. No slug → create a NEW site (works without auth; anonymous sites expire in 24h — always show the user the claimUrl). With slug → UPDATE that site (complete snapshot: send ALL files). A Dockerfile in the files makes it a server-side app (auth required; listen on process.env.PORT; persist under /data; poll app_status). Total payload ≤ 8 MB — for bigger sites use the dataecho skill scripts.

  • request_login_codeFree

    Start sign-in: email a one-time code to the user. Follow with verify_login_code.

  • search_sitesFree

    Full-text search across the authenticated account's sites (names, metadata, and text content).

  • set_variablewrite actionFree

    Create/update a write-only account secret (uppercase name). Injected as env vars into container apps and as ${VAR} into proxy calls. Optionally pin which upstream hosts may receive it.

  • update_site_metadatawrite actionFree

    Patch site settings without redeploying: viewer title/description, SPA mode, TTL, password (string sets, null removes).

  • verify_login_codeFree

    Complete sign-in with the emailed code. Returns the apiKey ONCE — configure it as the `Authorization: Bearer <key>` header of this MCP connection (and/or save to ~/.artifact/credentials for the CLI scripts). Never echo it into chat.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 1978ms20/20
  • Tool poisoning26 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 8 write-action tools with no auth3/15
  • Maintenancelast push 84 days ago12/15
  • Maintainer identitynamespace and repository owner differ; GitHub account older than a year; website matches verified namespace7/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 76/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Dataecho compares

Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
76/100
higher than 43% of 1,119 Developer tools servers
Tools
26
the typical Developer tools server has 7
Tools that change things
31%
typical: 5%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote Developer tools server answers 100%
Response time
90 ms
faster than 77% of 443 Developer tools servers

What its tools let an agent do: 18 read · 1 create · 4 change · 2 delete · 1 send or post

Install Dataecho in Claude Code, Cursor or VS Code

claude mcp add --transport http mcp https://dataecho.ai/mcp
Add to Cursor

What the publisher says

From the Dataecho repository's README, as published. We do not edit it. Read it on GitHub

DataEcho — agent skills

Two Agent Skills for the DataEcho platform:

Both are plain SKILL.md + self-contained scripts (bash + python3 stdlib, zero dependencies), so they work in any agent that supports the open Agent Skills format — Claude Code, OpenAI Codex, Gemini CLI, Cursor, GitHub Copilot / VS Code, Goose, opencode, Qwen Code, Amp, Cline, Kilo, Hermes, OpenClaw, and more.

Install

# both skills, any supported agent (global; drop -g for project-local)
npx skills add mohocp/dataecho -g

# just one of them
npx skills add mohocp/dataecho --skill dataecho -g
npx skills add mohocp/dataecho --skill dataecho-memory -g

Claude Code plugin route:

/plugin marketplace add mohocp/dataecho
/plugin install dataecho@dataecho

No npm? Install the deploy helper scripts directly:

curl -fsSL https://dataecho.ai/install.sh | bash        # macOS / Linux
irm https://dataecho.ai/install.ps1 | iex               # Windows PowerShell

What's inside

  • skills/dataecho/SKILL.md — publish handshake, Dockerfile app contract, claim contract, Drives, API-key flow
  • scripts/publish.sh — 3-call publish (create → upload → finalize), incremental deploys, anonymous-claim handling
  • scripts/drive.sh — drive CRUD, import/export, scoped share tokens, ETag-safe writes
  • scripts/publish.ps1 — Windows PowerShell publisher
  • skills/dataecho-memory/SKILL.md — the memory discipline (recall-first, update-don't-duplicate, forget-what's-wrong)
  • scripts/memory.sh — recall / remember / forget / reindex / history / restore / handoff; every mutation commits fact + index in one atomic CAS batch

Security & privacy

  • Credentials: the API key (obtained via an email one-time code) is stored at ~/.artifact/credentials (chmod 600), or passed via $ARTIFACTAPIKEY. Nothing else is written outside the project. Revoke keys any time from the dashboard.
  • Network: scripts talk only to https://dataecho.ai (override: $ARTIFACTBASEURL). No telemetry, no third-party calls.
  • Anonymous publishes need no account; they expire in 24 h unless claimed. Claim tokens are saved locally under ~/.artifact/claims/.
  • Memory is private storage, scoped to your account; share access is via revocable, prefix/TTL-scoped drive tokens. Don't store secrets in memories — it's not a vault.
  • The curl | bash installer above is a convenience mirror of install.sh; the canonical scripts are versioned in this repo.

Links

Docs: https://dataecho.ai/docs · Agent context: https://dataecho.ai/llms.txt · llms-full.txt · OpenAPI: https://dataecho.ai/openapi.json · Discovery: https://dataecho.ai/.well-known/agent.json

License

MIT

Nothing above is checked by us. What we check is on the safety report.

Grade history

  • 2026-09-26restoreD → Bscore 76: Write-action tools reachable without authentication

Dataecho: common questions

Is Dataecho MCP server safe?
Mostly: it is graded B (76/100). Read the Dataecho safety report
How do I install Dataecho?
It runs remotely at dataecho.ai. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Dataecho need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Dataecho maintained?
The last commit was 122 days ago (2026-07-04). The latest release is v1.0.0.
Is Dataecho up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Dataecho?
Servers from other publishers that do the same job: Dockhold MCP server, Aiven MCP server and Akb MCP server.
How does Dataecho compare with other Developer tools MCP servers?
safety score 76/100 (higher than 43% of 1,119 Developer tools servers); tools 26 (the typical Developer tools server has 7); tools that change things 31% (typical: 5%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Dataecho

Same job from other publishers: the closest match first, then the best rated.

  • Dockhold
    Deploy your project to a live HTTPS URL from your AI tool; read logs, set variables, resize apps.
    A
  • Aiven MCP
    Provision PostgreSQL, manage Apache Kafka, and deploy apps with Aiven - all from your AI assistant.
    A
  • Akb
    Git-backed org memory for AI agents — hybrid search, tables, files & a URI graph over MCP.
    A
  • Agent Harnesses
    Agent-harness picks, decision guides, setup templates, and skills; live GitHub/HN discovery.
    A
  • walkerOS Flow
    Build, validate, simulate, and deploy walkerOS event pipelines
    B