MCP.Market

demo.st MCP server

online · 100% uptime
by demo.st·st.demo/demost·v1.1.0

Reserve a subdomain, upload .zip via MCP, get a link. Optional document API at api.demo.st.

C65/100grade C
What users say
No reviews yet
Be the first
Safety scan
C65/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed demo.st yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

demo.st tools (13, 6 write)

write = sends, deletes, buys or posts
  • check_subdomain_availabilityFree

    Check if a subdomain name is available on demo.st (e.g. "my-site" → my-site.demo.st).

  • clear_sitewrite actionFree

    Remove deployed site content from your subdomain. Subdomain remains reserved.

  • create_collectionwrite actionFree

    Create a document collection (lowercase letter start; letters, numbers, underscores; max 63 chars). Max 20 collections per site.

  • delete_collectionwrite actionFree

    Delete a document collection and all of its records.

  • delete_recordwrite actionFree

    Delete a record from a document collection.

  • get_site_api_keyFree

    Get (or create) the public site API key for your reserved subdomain. Embed this key in your static site and call https://api.demo.st/v1 with Authorization: Bearer <key>. Tenant is scoped by the key — never share another site's key.

  • list_collectionsFree

    List document collections for your site (api.demo.st document store).

  • list_recordsFree

    List records in a document collection.

  • release_subdomainFree

    Release your reserved subdomain. Deletes the reservation, any deployed site, and all document DB data for that site.

  • reserve_subdomainFree

    Reserve a subdomain for the logged-in account. One subdomain per account.

  • rotate_site_api_keyFree

    Rotate the public site API key. The old key stops working immediately; update your site with the new key.

  • upload_sitewrite actionFree

    Upload a .zip as site content for your reserved subdomain. Easiest for agents: zip_base64 (base64-encoded zip). Or file_url (public URL to zip). Or file_path (local path, when MCP runs locally).

  • upsert_recordwrite actionFree

    Create or update a JSON record in a collection. Pass data as an object. Optional id to upsert a specific record.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 3095ms17/20
  • Tool poisoning13 tool descriptions checked15/15
  • Auth qualityAPI key sent as a header8/15
  • Maintenancelast push 193 days ago4/15
  • Maintainer identitynamespace and repository owner differ; website matches verified namespace5/10
Overall 65/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How demo.st compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
65/100
higher than 20% of 48,255 servers
Tools
13
the typical server has 7
Tools that change things
46%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote server answers 100%
Response time
1,679 ms
faster than 5% of 30,031 servers

What its tools let an agent do: 7 read · 2 create · 2 change · 2 delete

Install demo.st in Claude Code, Cursor or VS Code

claude mcp add --transport http demost https://demo.st/mcp
Add to Cursor

What the publisher says

From the demo.st repository's README, as published. We do not edit it. Read it on GitHub

demo.st

Demo stage for vibe-coded prototypes. Reserve a subdomain, publish from your agent via MCP, get a clean link like yourproject.demo.st. Static hosting only (Nginx; no PHP, no databases).

  • Site: https://demo.st
  • MCP endpoint: https://demo.st/mcp

Cursor plugin

This repo is a Cursor plugin. Install it from the Cursor Marketplace (after it’s published) or add the repo in Cursor to use the demo.st MCP server.

Getting your MCP token

Authenticated tools (reserve subdomain, upload zip, clear, release) require a Bearer token:

  1. Sign in at https://demo.st (create an account if needed).
  2. Open https://demo.st/api/mcp/token or the MCP page and copy the token.
  3. Set it as an environment variable:
  • Windows (PowerShell): $env:DEMOSTMCP_TOKEN = "your-token-here"
  • macOS / Linux: export DEMOSTMCP_TOKEN="your-token-here"
  • Or add to your shell profile (.bashrc, .zshrc) so Cursor picks it up.
  1. Restart Cursor (or reload the window). The Agent can then use demo.st tools.

MCP tools

  • checksubdomainavailability — Check if a subdomain is available (no token).
  • reserve_subdomain — Reserve a subdomain (token required).
  • uploadsite — Upload a .zip as site content; use zipbase64 (easiest for agents) or file_url for a public zip URL (token required).
  • clear_site — Remove deployed content; subdomain stays reserved (token required).
  • release_subdomain — Release your subdomain (token required).

License

See LICENSE.

Nothing above is checked by us. What we check is on the safety report.

demo.st: common questions

Is demo.st MCP server safe?
With care: it is graded C, so read the findings first (65/100). Read the demo.st safety report
How do I install demo.st?
It runs remotely at demo.st. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does demo.st need an API key?
Yes. The registry entry asks for Authorization.
Is demo.st maintained?
The last commit was 232 days ago (2026-03-17). The latest release is v1.1.0.
Is demo.st up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
How does demo.st compare with other MCP servers?
safety score 65/100 (higher than 20% of 48,255 servers); tools 13 (the typical server has 7); tools that change things 46% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.