Dataecho MCP server
online · 100% uptimeai.dataecho/mcp·v1.0.0Deploy files, sites, and Dockerfile apps to live URLs + private drives for agent memory.
0 stars
Reviews
Write oneNobody has reviewed Dataecho yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Dataecho tools (26, 8 write)
write = sends, deletes, buys or postsapp_statusFreeBuild/run status of a container app deployed via publish_site with a Dockerfile. Poll until status is `live` or `failed`.
claim_siteFreeMake a previously-anonymous site permanent under the authenticated account (requires auth + the claimToken from publish_site).
create_drivewrite actionFreeCreate a new private drive.
delete_sitewrite actionFreePermanently delete an owned site. Irreversible — confirm with the user first.
delete_variablewrite actionFreeDelete an account variable.
drive_delete_filewrite actionFreeDelete one file from a drive.
drive_historyFreeVersion timeline of a drive (every write is a restorable version).
drive_list_filesFreeList files in a drive (by drive name or drv_… id), optionally under a path prefix.
drive_move_fileFreeMove/rename a file inside a drive.
drive_read_fileFreeRead a file from a drive. Text comes back as utf-8 `content`; binary as `contentBase64`. Files over 1 MB are refused (use the skill scripts).
drive_restoreFreeRestore a drive to a prior version (commits a new version; nothing is lost).
drive_revoke_tokenFreeRevoke a drive share token.
drive_shareFreeMint a scoped drive access token for another agent (perms read|write, optional path prefix + TTL like `7d`). The secret is returned ONCE.
drive_tokensFreeList active share tokens of a drive (secrets are never shown again).
drive_write_filewrite actionFreeWrite/overwrite one file in a drive (ETag-safe: pass ifMatch to assert the version you read, otherwise the current version is used automatically).
get_siteFreeFull details + current file manifest of an owned site.
list_drivesFreeList the authenticated account's private cloud drives.
list_sitesFreeList all sites owned by the authenticated account.
list_variablesFreeList account variable NAMES (values are write-only — they are injected into proxy calls and container apps, never read back).
platform_infoFreeDataEcho platform overview: what it can host, auth state of this connection, docs links. Call this first if unsure.
publish_sitewrite actionFreeDeploy files to a live URL. No slug → create a NEW site (works without auth; anonymous sites expire in 24h — always show the user the claimUrl). With slug → UPDATE that site (complete snapshot: send ALL files). A Dockerfile in the files makes it a server-side app (auth required; listen on process.env.PORT; persist under /data; poll app_status). Total payload ≤ 8 MB — for bigger sites use the dataecho skill scripts.
request_login_codeFreeStart sign-in: email a one-time code to the user. Follow with verify_login_code.
search_sitesFreeFull-text search across the authenticated account's sites (names, metadata, and text content).
set_variablewrite actionFreeCreate/update a write-only account secret (uppercase name). Injected as env vars into container apps and as ${VAR} into proxy calls. Optionally pin which upstream hosts may receive it.
update_site_metadatawrite actionFreePatch site settings without redeploying: viewer title/description, SPA mode, TTL, password (string sets, null removes).
verify_login_codeFreeComplete sign-in with the emailed code. Returns the apiKey ONCE — configure it as the `Authorization: Bearer <key>` header of this MCP connection (and/or save to ~/.artifact/credentials for the CLI scripts). Never echo it into chat.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 1978ms20/20
- Tool poisoning26 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 8 write-action tools with no auth3/15
- Maintenancelast push 84 days ago12/15
- Maintainer identitynamespace and repository owner differ; GitHub account older than a year; website matches verified namespace7/10
Findings (1)
- highWrite-action tools reachable without authentication
auth.open-write
How Dataecho compares
Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 76/100
- higher than 43% of 1,119 Developer tools servers
- Tools
- 26
- the typical Developer tools server has 7
- Tools that change things
- 31%
- typical: 5%. Fewer write tools means less an agent can break
- Uptime
- 100%
- of our recent checks; the typical remote Developer tools server answers 100%
- Response time
- 90 ms
- faster than 77% of 443 Developer tools servers
What its tools let an agent do: 18 read · 1 create · 4 change · 2 delete · 1 send or post
Install Dataecho in Claude Code, Cursor or VS Code
claude mcp add --transport http mcp https://dataecho.ai/mcp
What the publisher says
From the Dataecho repository's README, as published. We do not edit it. Read it on GitHub
DataEcho — agent skills
Two Agent Skills for the DataEcho platform:
Both are plain SKILL.md + self-contained scripts (bash + python3 stdlib, zero dependencies), so they work in any agent that supports the open Agent Skills format — Claude Code, OpenAI Codex, Gemini CLI, Cursor, GitHub Copilot / VS Code, Goose, opencode, Qwen Code, Amp, Cline, Kilo, Hermes, OpenClaw, and more.
Install
# both skills, any supported agent (global; drop -g for project-local)
npx skills add mohocp/dataecho -g
# just one of them
npx skills add mohocp/dataecho --skill dataecho -g
npx skills add mohocp/dataecho --skill dataecho-memory -gClaude Code plugin route:
/plugin marketplace add mohocp/dataecho
/plugin install dataecho@dataechoNo npm? Install the deploy helper scripts directly:
curl -fsSL https://dataecho.ai/install.sh | bash # macOS / Linuxirm https://dataecho.ai/install.ps1 | iex # Windows PowerShellWhat's inside
- skills/dataecho/SKILL.md — publish handshake, Dockerfile app contract, claim contract, Drives, API-key flow
- scripts/publish.sh — 3-call publish (create → upload → finalize), incremental deploys, anonymous-claim handling
- scripts/drive.sh — drive CRUD, import/export, scoped share tokens, ETag-safe writes
- scripts/publish.ps1 — Windows PowerShell publisher
- skills/dataecho-memory/SKILL.md — the memory discipline (recall-first, update-don't-duplicate, forget-what's-wrong)
- scripts/memory.sh — recall / remember / forget / reindex / history / restore / handoff; every mutation commits fact + index in one atomic CAS batch
Security & privacy
- Credentials: the API key (obtained via an email one-time code) is stored at ~/.artifact/credentials (chmod 600), or passed via $ARTIFACTAPIKEY. Nothing else is written outside the project. Revoke keys any time from the dashboard.
- Network: scripts talk only to https://dataecho.ai (override: $ARTIFACTBASEURL). No telemetry, no third-party calls.
- Anonymous publishes need no account; they expire in 24 h unless claimed. Claim tokens are saved locally under ~/.artifact/claims/.
- Memory is private storage, scoped to your account; share access is via revocable, prefix/TTL-scoped drive tokens. Don't store secrets in memories — it's not a vault.
- The curl | bash installer above is a convenience mirror of install.sh; the canonical scripts are versioned in this repo.
Links
Docs: https://dataecho.ai/docs · Agent context: https://dataecho.ai/llms.txt · llms-full.txt · OpenAPI: https://dataecho.ai/openapi.json · Discovery: https://dataecho.ai/.well-known/agent.json
License
MIT
Nothing above is checked by us. What we check is on the safety report.
Grade history
- 2026-09-26restoreD → Bscore 76: Write-action tools reachable without authentication
Dataecho: common questions
- Is Dataecho MCP server safe?
- Mostly: it is graded B (76/100). Read the Dataecho safety report
- How do I install Dataecho?
- It runs remotely at dataecho.ai. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Dataecho need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Dataecho maintained?
- The last commit was 122 days ago (2026-07-04). The latest release is v1.0.0.
- Is Dataecho up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- What can I use instead of Dataecho?
- Servers from other publishers that do the same job: Dockhold MCP server, Aiven MCP server and Akb MCP server.
- How does Dataecho compare with other Developer tools MCP servers?
- safety score 76/100 (higher than 43% of 1,119 Developer tools servers); tools 26 (the typical Developer tools server has 7); tools that change things 31% (typical: 5%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Dataecho
Same job from other publishers: the closest match first, then the best rated.
- DockholdDeploy your project to a live HTTPS URL from your AI tool; read logs, set variables, resize apps.not reviewedGrowingA
Aiven MCPProvision PostgreSQL, manage Apache Kafka, and deploy apps with Aiven - all from your AI assistant.not reviewedEstablishedA- AkbGit-backed org memory for AI agents — hybrid search, tables, files & a URI graph over MCP.not reviewedGrowingA
- Agent HarnessesAgent-harness picks, decision guides, setup templates, and skills; live GitHub/HN discovery.not reviewedEstablishedA
walkerOS FlowBuild, validate, simulate, and deploy walkerOS event pipelinesnot reviewedEstablishedB